Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          A+uZYJCZb6tgVIvao70UpWTUkt8+7xITfBRtM7byBTI=
Subject key identifier:   18:C6:E3:92:94:C8:7C:20:9A:A8:B5:42:DF:1E:ED:CA:F3:DD:A4:D0
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019FA2290413A5B2AF1C17EEDD00B8D1BE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          0925
Signing time:             Mon 27 Jul 2026 06:00:24 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:24 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:24 +0000
Files and hashes:         1: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: uGfTO5k/1PRhqpoPHMeznLnz3qV2gWOpkTnlJKhlAHQ=)
                          2: GopW9XoJL6Ypu9PWinwmSTBcV5k.roa (hash: 7tI9fa5JE+5E+2k/J0Jt01aGm4si+69+ihdJ7wHZgjw=)
                          3: MM7pgiUkNhrRZtXrgMvTdH1mZbM.roa (hash: w/6ncUVh+7s29fgIvXgidq6wk2lNJOLgEH8f2l92rB4=)
                          4: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          5: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          6: fthEES7ULueds3FNvYJDhxIkkoY.roa (hash: an/1lrGy32ibi55SrdxYeDyCH0x0JUXmE2+DfK+SDWY=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:04:13:a5:b2:af:1c:17:ee:dd:00:b8:d1:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Jul 27 06:00:24 2026 GMT
            Not After : Jul 28 06:00:24 2026 GMT
        Subject: CN=18c6e39294c87c209aa8b542df1eedcaf3dda4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8c:41:ce:06:1a:66:3a:09:63:85:4f:9a:79:
                    91:ac:16:81:81:fb:70:63:38:f3:84:a6:a0:43:ca:
                    1d:2c:57:eb:04:cc:dd:2b:1f:29:b8:01:d7:6b:85:
                    3a:36:a1:1c:09:87:d4:b4:7b:2f:79:a2:fe:89:20:
                    82:80:35:50:16:93:77:15:94:de:17:d8:2e:f7:60:
                    70:13:9a:cd:e7:e8:7e:07:ac:08:2d:55:4b:c4:14:
                    6a:42:07:a4:5e:82:69:54:17:40:3a:0b:da:e7:8f:
                    ef:01:39:7f:b5:aa:63:26:62:a0:66:c3:77:bd:3a:
                    8c:5c:ca:4b:3c:9e:7e:e0:3f:4c:d9:29:2c:08:ef:
                    63:8f:03:a7:cd:0b:38:73:c2:e3:23:88:1d:ca:c4:
                    21:08:2c:9f:e7:62:ba:e3:6f:fa:08:d0:7d:89:ae:
                    df:a3:08:f4:d8:b7:6c:f4:ee:60:2d:e4:16:ba:21:
                    9e:32:b5:69:3c:a0:ab:81:c5:60:ec:ad:de:01:12:
                    52:4b:dc:78:cb:05:ec:8e:02:62:ac:eb:b0:19:8d:
                    7f:be:ad:92:8c:90:ca:bf:20:39:88:e9:e2:03:69:
                    57:2d:57:fa:77:20:b4:b5:f4:46:c3:0a:1a:70:cf:
                    43:c1:b3:70:f4:18:0e:9c:eb:85:d5:f8:e4:e5:2b:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:E3:92:94:C8:7C:20:9A:A8:B5:42:DF:1E:ED:CA:F3:DD:A4:D0
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:95:46:78:87:48:79:8c:26:d8:0d:d1:0d:27:71:21:ff:f4:
         40:03:7c:c1:ab:77:de:fc:8e:77:24:8c:98:5b:06:19:88:55:
         8d:be:b5:a2:2c:f5:fe:2f:c4:f0:07:02:10:78:9e:82:24:0c:
         c7:5f:2f:b7:d6:d1:56:c9:9e:e5:47:38:4c:e9:b1:5d:01:28:
         43:c0:ec:60:09:da:9b:e4:ad:98:02:8b:37:2c:3b:62:ab:d4:
         64:a5:c7:f6:3f:66:5f:b3:23:d2:ed:d6:4f:d4:b7:51:97:1d:
         1f:a7:50:f7:5c:92:ff:72:a3:e4:c9:f2:f9:a7:eb:0a:0a:33:
         48:98:d1:7e:f4:0c:b2:e9:23:48:d3:47:66:02:e1:8a:7b:78:
         c2:8f:eb:62:f1:d8:cf:86:7c:3c:50:7c:ad:97:b3:f4:9c:9f:
         fc:02:49:e9:5c:01:47:68:ab:45:65:d5:34:12:aa:de:a8:c4:
         76:83:f5:22:ae:ad:d7:9e:35:04:1b:05:96:bc:57:4c:fa:4d:
         e2:3b:2d:ae:9a:cc:b7:74:39:56:dc:f9:9a:2d:a5:4a:c2:d9:
         62:70:85:0e:36:39:6e:af:26:ff:9e:a7:f7:f1:ba:bf:1b:3c:
         e6:a6:bb:59:ef:01:9d:fa:3b:1b:1f:b0:3d:c4:40:f5:47:57:
         33:a6:98:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:34:46 2026 by rpki-client