Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
File:                     eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft (raw, json)
Hash identifier:          DfySJDl1ev2a9z++CLzbqFas+TL+mi6XJgW166uXSvY=
Subject key identifier:   A5:DE:D7:9F:61:C5:FF:67:F9:B5:3C:AD:BC:40:C7:5D:7C:D5:90:74
Authority key identifier: 78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2
Certificate issuer:       /CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
Certificate serial:       019FA2601908AEF4AAD98D82590A9261F234
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
Manifest number:          1619
Signing time:             Mon 27 Jul 2026 07:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:34 +0000
Files and hashes:         1: IkSWs7EkuQhyXRbP9F6EHBtTz1o.roa (hash: Byu4YYkguBqvjzQYm5SoI51Ex0ZiZOLUbV6kTS2GuBk=)
                          2: eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl (hash: kBwJI29wAwMGMEH0IXPg46bxAgqU/m7BeGOWdXXMc5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:19:08:ae:f4:aa:d9:8d:82:59:0a:92:61:f2:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78c236580cc2ee193dbdcc3126df4170cc117cd2
        Validity
            Not Before: Jul 27 07:00:34 2026 GMT
            Not After : Jul 28 07:00:34 2026 GMT
        Subject: CN=a5ded79f61c5ff67f9b53cadbc40c75d7cd59074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:9a:6d:f9:dc:8c:25:55:3b:7b:59:18:d8:
                    48:a2:7b:7c:6c:8d:e4:55:89:a9:87:c1:d8:97:0d:
                    16:9e:6e:3f:a7:93:ee:3b:c4:88:f3:4f:4d:c6:52:
                    fd:09:32:af:00:04:60:0d:52:70:3f:17:a8:69:00:
                    64:6f:7f:50:0c:40:ca:51:18:c8:8b:0c:a8:75:6f:
                    28:5a:4d:ff:d2:68:11:f5:13:4b:2b:04:01:4e:ab:
                    5a:62:9a:b9:87:a0:11:55:6f:3e:57:a1:b8:8e:f3:
                    47:59:ff:bc:a6:90:d3:42:ef:51:95:5d:be:1f:ef:
                    15:1d:0a:15:b6:0b:fa:d7:32:51:f1:96:71:ee:1a:
                    ed:be:54:bd:3e:d1:09:79:16:57:54:c9:d6:f9:ee:
                    4d:e3:9c:8e:6a:18:80:45:f5:29:0c:e3:39:e2:af:
                    a8:c1:8f:05:ca:13:22:d1:ee:37:8b:9d:a3:ab:4f:
                    ab:5e:7c:f5:8f:17:4d:9f:20:e6:9f:4a:1c:55:69:
                    0c:05:bc:e8:98:c1:8a:be:e5:b7:00:71:8a:16:fb:
                    c2:8f:10:43:83:ce:86:d6:f0:a9:33:b0:1e:4a:78:
                    1a:39:ca:bb:8e:f3:85:49:8c:eb:95:35:93:4c:95:
                    ab:b4:0a:9a:27:cc:d4:0e:07:b9:73:9a:2c:02:30:
                    65:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DE:D7:9F:61:C5:FF:67:F9:B5:3C:AD:BC:40:C7:5D:7C:D5:90:74
            X509v3 Authority Key Identifier:
                keyid:78:C2:36:58:0C:C2:EE:19:3D:BD:CC:31:26:DF:41:70:CC:11:7C:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eMI2WAzC7hk9vcwxJt9BcMwRfNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/69ce2b-aa36-4bab-b65e-f9e6539bbe6b/1/eMI2WAzC7hk9vcwxJt9BcMwRfNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:a2:b3:36:b9:be:ea:db:8c:7d:be:d7:99:df:17:70:59:
         25:ac:0c:da:90:fc:2b:fa:cd:6e:5e:b2:0e:75:90:ec:23:a2:
         02:29:89:e7:3a:67:b5:ba:bd:40:2c:5e:d6:27:32:a6:6f:16:
         e2:76:24:3e:35:dc:a9:87:a4:7b:a6:ca:2d:c7:2b:b8:37:34:
         21:0c:eb:26:0c:bf:2d:b8:3c:28:30:d2:49:92:dd:e2:f2:0c:
         77:f2:ed:1a:24:c9:bc:3b:27:7f:68:18:c8:41:a4:b8:c8:7d:
         f0:f4:ed:d2:91:e8:33:76:07:a6:50:6d:96:d7:bd:79:e5:36:
         c1:e9:95:26:99:bc:28:73:e9:e6:38:8a:eb:48:fa:3f:07:94:
         72:9b:9c:da:a4:74:44:6f:a3:2d:dd:4d:2c:a9:db:ec:99:80:
         73:65:6d:27:2f:aa:41:d0:23:f4:5d:b4:f1:81:4a:bd:a6:11:
         07:e5:b2:c0:30:1d:29:0e:23:1b:d3:14:4b:36:55:39:fb:7d:
         9c:ce:e4:93:ca:d5:6c:aa:3c:91:a9:8b:e4:46:f5:c1:c2:ea:
         1f:7b:2b:51:b7:cf:8f:92:8e:85:ed:5a:82:17:71:08:7e:96:
         85:ec:5b:a4:32:49:b4:72:d2:f2:15:a5:9e:94:12:ba:45:6a:
         6a:98:9c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYBkIrvSq2Y2CWQqSYfI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4YzIzNjU4MGNjMmVlMTkzZGJkY2MzMTI2ZGY0MTcwY2Mx
MTdjZDIwHhcNMjYwNzI3MDcwMDM0WhcNMjYwNzI4MDcwMDM0WjAzMTEwLwYDVQQD
EyhhNWRlZDc5ZjYxYzVmZjY3ZjliNTNjYWRiYzQwYzc1ZDdjZDU5MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJCabfncjCVVO3tZGNhIont8bI3k
VYmph8HYlw0Wnm4/p5PuO8SI809NxlL9CTKvAARgDVJwPxeoaQBkb39QDEDKURjI
iwyodW8oWk3/0mgR9RNLKwQBTqtaYpq5h6ARVW8+V6G4jvNHWf+8ppDTQu9RlV2+
H+8VHQoVtgv61zJR8ZZx7hrtvlS9PtEJeRZXVMnW+e5N45yOahiARfUpDOM54q+o
wY8FyhMi0e43i52jq0+rXnz1jxdNnyDmn0ocVWkMBbzomMGKvuW3AHGKFvvCjxBD
g86G1vCpM7AeSngaOcq7jvOFSYzrlTWTTJWrtAqaJ8zUDge5c5osAjBlPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXe159hxf9n+bU8rbxAx1181ZB0MB8GA1UdIwQY
MBaAFHjCNlgMwu4ZPb3MMSbfQXDMEXzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUt
ZjllNjUzOWJiZTZiLzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS82OWNlMmItYWEzNi00YmFiLWI2NWUtZjllNjUzOWJiZTZi
LzEvZU1JMldBekM3aGs5dmN3eEp0OUJjTXdSZk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQaisza5
vurbjH2+15nfF3BZJawM2pD8K/rNbl6yDnWQ7COiAimJ5zpntbq9QCxe1icypm8W
4nYkPjXcqYeke6bKLccruDc0IQzrJgy/Lbg8KDDSSZLd4vIMd/LtGiTJvDsnf2gY
yEGkuMh98PTt0pHoM3YHplBtlte9eeU2wemVJpm8KHPp5jiK60j6PweUcpuc2qR0
RG+jLd1NLKnb7JmAc2VtJy+qQdAj9F208YFKvaYRB+WywDAdKQ4jG9MUSzZVOft9
nM7kk8rVbKo8kamL5Eb1wcLqH3srUbfPj5KOhe1aghdxCH6WhexbpDJJtHLS8hWl
npQSukVqapicgw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:49:06 2026 by rpki-client