Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File:                     EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier:          rkV9QX7kB9jQgx0yIAMkGrotN9YrghNUVAqtP5scIPg=
Subject key identifier:   86:DB:5E:EA:CA:35:BE:14:F8:FA:35:25:BD:D8:36:0E:71:9C:5A:F1
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer:       /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial:       019F32950EDCD7286CEC6FD1C0BB099F2E68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number:          02FA
Signing time:             Sun 05 Jul 2026 14:00:57 +0000
Manifest this update:     Sun 05 Jul 2026 14:00:57 +0000
Manifest next update:     Mon 06 Jul 2026 14:00:57 +0000
Files and hashes:         1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
                          2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: 3dABfO7lB6TY0YSOdJbZcNc8ipl4duAEh1HAl7wNZkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:32:95:0e:dc:d7:28:6c:ec:6f:d1:c0:bb:09:9f:2e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
        Validity
            Not Before: Jul  5 14:00:57 2026 GMT
            Not After : Jul  6 14:00:57 2026 GMT
        Subject: CN=86db5eeaca35be14f8fa3525bdd8360e719c5af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:eb:cf:32:19:16:74:da:70:87:86:e6:21:e4:
                    45:18:40:31:e8:80:ec:4b:fd:f2:f5:01:75:72:31:
                    7d:aa:13:a4:10:d0:5c:6a:d0:ca:89:c0:da:80:1a:
                    aa:e8:3a:eb:fc:60:a5:c4:32:fa:fc:31:ed:69:7b:
                    9d:9b:87:13:99:a2:ee:5c:33:a0:4f:2a:40:5b:ba:
                    eb:f0:a3:93:02:b5:8e:15:33:b4:a0:f2:77:7f:1e:
                    84:90:5b:ef:26:44:14:1f:33:36:8d:70:09:47:f8:
                    d4:c2:92:0a:a6:4e:f0:7d:9a:8e:1c:58:4a:d7:61:
                    90:80:3d:f9:9b:42:f2:53:5d:41:98:8a:4c:94:7a:
                    8a:bf:55:4f:14:45:ca:87:35:9d:80:ee:56:4d:f4:
                    04:7c:e7:9f:fd:14:91:9d:b7:3f:95:65:3d:bd:d0:
                    f7:ea:fd:8f:e9:fb:e5:5f:a9:e2:aa:aa:9b:d7:17:
                    3b:c0:73:72:05:b3:67:18:c8:41:71:3f:8b:f0:bb:
                    69:16:76:ce:f4:a3:3c:00:6d:0d:a9:d0:51:1e:9f:
                    c9:fe:b8:0e:f8:7c:b4:ea:00:b0:c6:55:92:a6:15:
                    92:5b:6d:96:7d:8f:bb:92:70:47:0e:3c:70:5d:25:
                    0c:1a:d9:21:d4:2f:ea:ec:a3:8e:e5:5f:f3:de:6f:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DB:5E:EA:CA:35:BE:14:F8:FA:35:25:BD:D8:36:0E:71:9C:5A:F1
            X509v3 Authority Key Identifier:
                keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:3a:39:eb:e6:b5:7f:5c:2f:c4:95:67:fa:96:9f:a2:9c:c2:
         64:44:8c:60:00:7f:4f:97:86:76:a0:5b:50:1b:c7:b8:d4:62:
         27:73:9a:64:b5:f2:e7:e2:04:fa:a8:43:ef:17:63:67:a1:c9:
         c1:47:22:a2:0d:24:c3:12:ab:e0:24:a6:5c:7c:04:03:33:b0:
         43:88:c7:54:2c:6c:9e:ea:3c:53:b6:ed:cc:80:2e:3e:83:8c:
         52:ee:8b:05:41:a1:16:b3:c8:af:62:3c:e2:9a:48:a1:19:db:
         51:95:ef:e4:7f:bc:24:18:84:40:12:0c:34:a9:17:74:ab:a3:
         1d:45:2c:77:ce:62:59:02:d0:de:c2:2a:f2:48:ad:1c:94:28:
         16:47:ba:2c:b9:b9:83:ee:4f:02:a4:cb:ed:ce:26:d5:9a:5c:
         64:35:1b:1b:e5:a2:50:d6:c7:d6:5b:5e:6a:ff:80:7e:35:4f:
         ea:92:3f:69:96:ac:34:9b:52:73:e0:48:1f:83:03:35:b3:bc:
         4e:f1:b0:55:c3:85:77:91:0c:8c:be:8d:c6:18:f2:0d:d4:04:
         34:1b:58:c7:89:36:f0:a7:a2:ee:5c:ec:56:eb:6a:5b:cb:1d:
         73:c5:9a:13:eb:f0:39:23:00:6d:ef:44:11:1e:61:e4:aa:32:
         9e:43:98:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ylQ7c1yhs7G/RwLsJny5oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwZTA1ZGFiYmNmMTRkNTMwMTVhYjhmZjFlNGJkNzI5N2Fj
YjBlNzcwHhcNMjYwNzA1MTQwMDU3WhcNMjYwNzA2MTQwMDU3WjAzMTEwLwYDVQQD
Eyg4NmRiNWVlYWNhMzViZTE0ZjhmYTM1MjViZGQ4MzYwZTcxOWM1YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+evPMhkWdNpwh4bmIeRFGEAx6IDs
S/3y9QF1cjF9qhOkENBcatDKicDagBqq6Drr/GClxDL6/DHtaXudm4cTmaLuXDOg
TypAW7rr8KOTArWOFTO0oPJ3fx6EkFvvJkQUHzM2jXAJR/jUwpIKpk7wfZqOHFhK
12GQgD35m0LyU11BmIpMlHqKv1VPFEXKhzWdgO5WTfQEfOef/RSRnbc/lWU9vdD3
6v2P6fvlX6niqqqb1xc7wHNyBbNnGMhBcT+L8LtpFnbO9KM8AG0NqdBRHp/J/rgO
+Hy06gCwxlWSphWSW22WfY+7knBHDjxwXSUMGtkh1C/q7KOO5V/z3m+6mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbbXurKNb4U+Po1Jb3YNg5xnFrxMB8GA1UdIwQY
MBaAFBDgXau88U1TAVq4/x5L1yl6yw53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEt
ZTYyM2Q1M2Y4YmIxLzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEtZTYyM2Q1M2Y4YmIx
LzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITo56+a1
f1wvxJVn+pafopzCZESMYAB/T5eGdqBbUBvHuNRiJ3OaZLXy5+IE+qhD7xdjZ6HJ
wUciog0kwxKr4CSmXHwEAzOwQ4jHVCxsnuo8U7btzIAuPoOMUu6LBUGhFrPIr2I8
4ppIoRnbUZXv5H+8JBiEQBIMNKkXdKujHUUsd85iWQLQ3sIq8kitHJQoFke6LLm5
g+5PAqTL7c4m1ZpcZDUbG+WiUNbH1lteav+AfjVP6pI/aZasNJtSc+BIH4MDNbO8
TvGwVcOFd5EMjL6NxhjyDdQENBtYx4k28Kei7lzsVutqW8sdc8WaE+vwOSMAbe9E
ER5h5KoynkOYVw==
-----END CERTIFICATE-----
Generated at Sun Jul 5 19:58:17 2026 by rpki-client