Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          nbSaiHC/YcabArQoF22QKHvE8squPqGgzrR3BYgMG0c=
Subject key identifier:   95:7D:99:58:9F:F4:7B:33:B2:A0:E5:3F:BA:E3:E4:1E:7C:C3:F7:EE
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019FA2CE65F8958EF5737F47336150D15639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          19D3
Signing time:             Mon 27 Jul 2026 09:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:03 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: j/G6SprGOMq6Y+Rw+8HYuTJ1A5HyVPqtox/K7OwCRzs=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:65:f8:95:8e:f5:73:7f:47:33:61:50:d1:56:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Jul 27 09:01:03 2026 GMT
            Not After : Jul 28 09:01:03 2026 GMT
        Subject: CN=957d99589ff47b33b2a0e53fbae3e41e7cc3f7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:7a:ab:4e:ed:6b:6d:86:ce:5b:60:41:be:31:
                    86:84:46:4e:ad:6f:ca:50:09:c6:95:ea:1d:eb:76:
                    d5:d3:e1:78:16:6a:78:bb:5e:a8:cd:a5:5d:a0:84:
                    10:77:cd:50:52:b1:b5:65:6d:6f:fa:62:4f:7c:18:
                    b7:71:93:1b:c3:ff:55:79:d9:a5:cb:c6:01:fc:50:
                    31:15:78:a8:13:35:83:fd:aa:02:1b:87:10:23:6d:
                    98:71:3b:82:ce:e6:a8:82:a7:4b:33:2f:d5:89:77:
                    db:c9:7e:2f:5c:02:44:12:f2:ee:8e:5d:5f:aa:53:
                    17:a8:88:15:5e:71:73:60:c8:ab:d9:c7:6e:63:37:
                    3d:44:6f:52:0e:17:ca:26:1e:58:9f:0d:57:64:3f:
                    fc:54:ff:3a:92:28:b9:18:c6:f0:ab:ad:f4:72:68:
                    87:30:e6:5f:1a:40:e4:90:64:f2:00:c9:df:30:2d:
                    23:2b:62:5b:c7:15:91:01:ba:47:90:f5:8c:37:e1:
                    ca:31:96:13:44:ad:9e:d5:80:b8:96:f7:7a:a9:cd:
                    60:88:dd:61:1c:ba:b6:ea:6f:38:39:2d:0f:ff:a1:
                    6f:88:00:59:33:d0:f9:51:4a:3e:e2:3c:d2:4a:b9:
                    97:a0:c3:d6:3f:ce:ae:f3:e6:2a:55:cc:a4:93:67:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:7D:99:58:9F:F4:7B:33:B2:A0:E5:3F:BA:E3:E4:1E:7C:C3:F7:EE
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ee:5a:d7:79:83:41:02:25:c5:b9:0f:b0:48:6b:92:4e:ac:
         e1:69:c5:23:58:ba:5b:19:b4:6c:9b:bd:5b:84:51:49:34:c0:
         53:33:a9:7f:ec:c9:07:7b:14:09:5f:f8:27:0d:36:ed:4e:3f:
         a2:8f:e4:23:62:55:b8:8c:fc:d2:97:a1:b6:57:98:13:39:ee:
         cc:fb:71:84:35:29:c9:82:5f:de:9d:53:f7:21:fe:62:b7:eb:
         cd:6d:cf:2c:21:ba:47:48:6b:6e:00:ec:04:8d:28:ed:1f:61:
         08:b8:61:e3:ce:ea:62:17:5a:e1:18:33:e7:67:61:26:71:df:
         0f:d7:60:5e:ae:df:96:f7:f8:1d:70:3b:82:44:c1:41:5a:d8:
         6b:c8:45:72:15:32:fe:aa:20:4d:09:da:13:a6:d1:91:5c:71:
         ec:02:79:09:64:d6:64:11:ca:17:52:98:82:c5:7b:21:39:d9:
         9d:4d:2b:67:76:ce:a4:ed:19:2d:c3:d4:20:3b:f1:94:fb:d3:
         48:06:c4:83:da:52:cc:c9:16:25:09:85:d7:41:69:6b:d9:ca:
         b0:30:0f:00:23:ff:7f:37:7c:44:15:38:2d:e2:c6:19:35:02:
         d4:d3:9b:08:a3:20:bd:2b:be:e8:6a:9d:33:b0:24:4d:4a:8d:
         37:84:5d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:00:31 2026 by rpki-client