Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
File:                     cEZO_kc3QepObM9sPFo3xm89oXk.mft (raw, json)
Hash identifier:          ruJHjj9wAwmILEgIvPKpwm0mTP71IXrAk+D6zEz0nBo=
Subject key identifier:   BA:4C:AC:A5:29:81:55:26:98:41:43:F6:A7:E8:AC:00:BD:0A:EA:71
Authority key identifier: 70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79
Certificate issuer:       /CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
Certificate serial:       019FA0727A57C2B59F44A4F3F4A04192AB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
Manifest number:          01E6
Signing time:             Sun 26 Jul 2026 22:01:24 +0000
Manifest this update:     Sun 26 Jul 2026 22:01:24 +0000
Manifest next update:     Mon 27 Jul 2026 22:01:24 +0000
Files and hashes:         1: ROpNx89soFP8JE-okJDCTVHVXDs.roa (hash: 5HtcGDIbCLb9z7TZql7Z+rs2Xx1sglk4pFTRwXa2X+g=)
                          2: cEZO_kc3QepObM9sPFo3xm89oXk.crl (hash: 5a7BHKizD+U89V4zu5pSz1XnUGJPxrd+kFsdpcoPgow=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:72:7a:57:c2:b5:9f:44:a4:f3:f4:a0:41:92:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70464efe473741ea4e6ccf6c3c5a37c66f3da179
        Validity
            Not Before: Jul 26 22:01:24 2026 GMT
            Not After : Jul 27 22:01:24 2026 GMT
        Subject: CN=ba4caca529815526984143f6a7e8ac00bd0aea71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:82:93:6d:87:94:b8:b2:05:18:7b:25:bf:8f:
                    a7:4a:49:48:34:2d:e9:04:31:ac:28:c8:26:66:50:
                    aa:cd:04:67:f8:d6:2f:d9:a2:59:df:0f:48:e7:e2:
                    2c:49:0c:46:3b:3b:0f:fe:af:a8:08:9a:2a:3f:0f:
                    a5:0f:05:f0:d9:ac:7b:eb:70:fa:8d:79:69:6c:75:
                    8e:da:cc:ad:1f:bf:96:b6:b8:0d:0a:94:7d:f3:ca:
                    ea:c4:23:35:84:7f:da:fb:8f:8f:b9:b6:9d:fa:cc:
                    c3:9a:6d:4a:6f:a3:69:2f:cd:b9:7a:c1:21:27:18:
                    af:e6:58:7e:31:c0:cc:4e:dc:59:71:89:2b:7b:9d:
                    4c:62:dd:f7:ac:a6:46:08:76:1c:60:d4:ff:23:22:
                    d0:89:61:41:0e:e8:a3:6e:ce:29:14:54:54:c9:cc:
                    03:ce:ae:5b:65:f2:a3:66:68:98:cf:c4:69:4c:31:
                    0b:96:58:74:08:08:41:7f:15:65:a8:85:98:6f:71:
                    86:97:08:0b:3b:e9:ea:d8:01:f0:99:cb:55:3a:49:
                    04:de:8d:36:73:51:0a:73:a0:44:66:97:91:19:51:
                    4a:d7:79:b0:f2:ff:54:c8:75:7f:db:b6:96:7b:42:
                    c8:a5:b4:bb:5d:02:ae:33:37:bf:a2:d5:41:b4:3b:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4C:AC:A5:29:81:55:26:98:41:43:F6:A7:E8:AC:00:BD:0A:EA:71
            X509v3 Authority Key Identifier:
                keyid:70:46:4E:FE:47:37:41:EA:4E:6C:CF:6C:3C:5A:37:C6:6F:3D:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEZO_kc3QepObM9sPFo3xm89oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ec4b80-46ed-43b5-9cfa-9b807de60902/1/cEZO_kc3QepObM9sPFo3xm89oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:45:1a:7f:d3:21:b9:b4:9a:98:48:ba:58:2d:f8:0d:69:3b:
         45:84:34:78:2e:1f:98:57:30:2c:7f:a4:a1:83:ca:f4:7e:06:
         f2:63:e1:81:bc:37:bf:27:4d:a3:d1:ee:a9:7b:4b:70:1b:35:
         6f:01:31:ad:75:2d:68:39:40:94:a1:f3:c9:7e:a0:22:28:0d:
         eb:15:a1:bf:38:79:17:5a:24:3e:65:97:2c:11:41:e8:14:7a:
         7d:5b:42:64:65:e8:6d:63:e3:78:3f:f3:1b:a4:4f:49:5e:55:
         d1:55:cf:2f:6f:73:ed:38:12:3e:cd:ce:f9:62:44:70:6b:28:
         e8:17:de:ec:b8:3a:84:d4:95:37:ac:fd:6c:d3:e2:a3:1c:b0:
         49:27:59:78:a9:98:87:81:bb:20:cc:b1:2a:c7:6d:e2:f3:89:
         0f:ee:08:2e:f1:71:48:06:e1:19:14:1a:44:e9:7c:bc:d2:1d:
         4c:8b:e7:06:a8:e6:30:a8:3c:13:de:2b:71:97:e4:ea:15:f4:
         24:bd:7f:7d:f9:22:c3:d5:b4:0d:9d:62:9e:e5:ea:1e:b3:5e:
         a4:66:5a:cc:12:84:26:30:51:1c:f2:8a:dd:f3:03:30:0d:33:
         fc:6a:e8:a3:be:6d:b4:87:f7:59:dc:f9:99:95:da:76:b7:a6:
         06:ba:40:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:56:20 2026 by rpki-client