Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
File:                     EJU-YHZw_3OO7mprV32MiygE4eE.mft (raw, json)
Hash identifier:          gqTFow0VOoLrVJ2I0Dwb0HY/l27C3yFatyYO6Ckf2Mw=
Subject key identifier:   23:40:CE:8B:32:47:4B:38:D0:CB:C1:CD:CE:E1:E7:0C:04:62:03:01
Authority key identifier: 10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1
Certificate issuer:       /CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
Certificate serial:       019FA03AAF50A86CB897F6453259DCB9E88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
Manifest number:          1718
Signing time:             Sun 26 Jul 2026 21:00:28 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:28 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:28 +0000
Files and hashes:         1: EJU-YHZw_3OO7mprV32MiygE4eE.crl (hash: Il8CbBroF2EuLdABVlXF26mVFcZwYatJSsqF4+MH5Xw=)
                          2: Gw1I1cMSfmj9txsMtdMmjIau-Yk.roa (hash: A9JkF2YIBDsb9U5w0rInQubmdVk1rDCgtqhI9Yk4Xps=)
                          3: XT9M4nz7U78zyaKpNd8OOHO8Qog.roa (hash: SiIj+CtkRszsmzTVR/Ptsuqx6GVfhtUG2CmisEl+iio=)
                          4: eh4veodx92qLlbRds_FdhFYGXUY.roa (hash: Lu4cjet76Xm54FMH5x8nZEK5D9qX3aYtuOYuw1rQxqE=)
                          5: qloA7aGwDDMf0Ro9CGFQNJI5uVs.roa (hash: GNTNvRk+NISvdL5uVY3h8ds7WhRg+ACYEl8vBkQaLDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:af:50:a8:6c:b8:97:f6:45:32:59:dc:b9:e8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10953e607670ff738eee6a6b577d8c8b2804e1e1
        Validity
            Not Before: Jul 26 21:00:28 2026 GMT
            Not After : Jul 27 21:00:28 2026 GMT
        Subject: CN=2340ce8b32474b38d0cbc1cdcee1e70c04620301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:48:99:33:b9:c7:d9:3e:46:5a:4d:7e:d2:e7:
                    af:18:f5:5c:7f:f4:a2:c3:62:0f:e6:b4:98:d0:52:
                    24:cd:3f:ab:fa:ad:f2:0a:6d:35:36:6e:e4:47:c5:
                    f9:2d:c8:11:c4:41:a5:21:b8:fc:63:d5:5e:18:b8:
                    d2:d1:07:62:ff:a9:7a:aa:0e:a0:13:9e:2a:e0:37:
                    74:77:13:a4:a3:c1:8a:eb:cf:b9:cf:1f:70:82:e8:
                    90:be:4e:e7:69:ef:ca:6a:a2:83:65:7f:5e:2b:71:
                    89:3e:d8:3a:95:ea:4e:fa:33:4e:6d:70:55:a2:9d:
                    e0:22:a3:45:38:5a:f6:c7:1b:47:34:a9:95:23:67:
                    ba:36:68:9d:f9:36:36:85:8d:ef:df:41:e6:e2:69:
                    95:e8:d3:05:33:1c:ce:40:c8:ed:e6:47:7c:9c:c1:
                    2a:0d:ca:65:1b:f2:cc:58:eb:e2:f0:03:9c:22:07:
                    8f:e1:4a:bc:eb:9d:57:0b:4b:a7:63:a1:2d:68:60:
                    7b:2b:e3:f7:73:62:ab:8e:85:a9:db:cd:c3:0d:76:
                    f3:11:5e:0d:25:b4:82:cd:0e:79:90:f8:12:41:c8:
                    db:22:e5:a4:60:6b:5f:f7:2a:7c:d9:bd:65:cf:bd:
                    bb:c6:f0:46:ad:c9:0b:ed:67:d7:53:83:eb:1b:f7:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:40:CE:8B:32:47:4B:38:D0:CB:C1:CD:CE:E1:E7:0C:04:62:03:01
            X509v3 Authority Key Identifier:
                keyid:10:95:3E:60:76:70:FF:73:8E:EE:6A:6B:57:7D:8C:8B:28:04:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EJU-YHZw_3OO7mprV32MiygE4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a99355-2d01-4da5-8e73-1bc552c00dd7/1/EJU-YHZw_3OO7mprV32MiygE4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:bb:f4:bc:44:72:b3:5b:b6:31:2d:d7:15:91:9b:1f:06:
         51:aa:85:3f:79:ff:f5:c9:23:78:ec:92:6d:14:be:69:ed:fb:
         83:01:1a:92:24:0f:cf:71:5f:14:22:89:73:9f:9a:b2:ef:6f:
         f4:62:77:c2:dc:d3:d5:e8:85:63:9b:2e:c0:ef:cb:ff:62:0d:
         02:ca:27:6a:ab:e4:0a:0d:e4:6b:20:2e:4d:d9:bb:ef:b7:95:
         6c:6b:fa:8e:7c:da:cc:9e:cf:1c:83:9c:2f:2b:b4:fe:cf:59:
         d4:3f:a0:13:34:28:de:1f:2e:75:89:ba:8f:6b:7c:cb:25:ca:
         41:d7:40:0f:6e:33:67:e6:a0:84:00:61:40:da:ee:ac:25:db:
         8a:3c:ac:4c:b9:00:45:a1:ba:b2:0e:09:f3:07:78:7f:b1:bc:
         00:28:bd:6a:6c:cb:0b:58:10:10:6b:b2:f6:96:f7:cf:8b:e3:
         38:9a:16:fc:b7:64:f8:9b:3c:b8:59:85:26:10:a6:ae:23:6a:
         2c:e0:1a:a3:dd:8e:24:67:aa:e3:b0:a7:cd:ae:34:5a:6d:50:
         6b:c0:e8:22:90:44:d7:33:5c:e5:a1:4f:51:91:b9:91:99:f5:
         0e:10:2e:37:dd:ea:f1:99:29:46:c8:06:ee:32:b6:50:b3:c7:
         c2:21:81:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:00:11 2026 by rpki-client