Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
File:                     EHTblkAv9c8YdWRWDqjxPu61_-s.mft (raw, json)
Hash identifier:          8cozlnucUu04m2+zU1mW8JEursCtsaDT00oJNH8Hip0=
Subject key identifier:   EE:52:BF:F2:C3:AB:23:D5:09:88:5C:AB:80:93:0B:6B:8B:9A:1C:0B
Authority key identifier: 10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB
Certificate issuer:       /CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
Certificate serial:       019FA2CECC9C8746BA9034B4F462A9BB5991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
Manifest number:          1A11
Signing time:             Mon 27 Jul 2026 09:01:29 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:29 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:29 +0000
Files and hashes:         1: EHTblkAv9c8YdWRWDqjxPu61_-s.crl (hash: q/w/6196xLm/ZMAtjba/9DP3tEBd9H9EpbaK+4Meub0=)
                          2: oGSX6Be2A4gMsymfO3IeIELxVGc.roa (hash: 9nynO0eaDCEM38Kekr3tOs/yAPJlXITpxT9ftUpbs/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:cc:9c:87:46:ba:90:34:b4:f4:62:a9:bb:59:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1074db96402ff5cf187564560ea8f13eeeb5ffeb
        Validity
            Not Before: Jul 27 09:01:29 2026 GMT
            Not After : Jul 28 09:01:29 2026 GMT
        Subject: CN=ee52bff2c3ab23d509885cab80930b6b8b9a1c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:55:d4:e0:13:31:71:c6:69:e1:00:86:b3:
                    d6:7e:ec:a7:59:8d:51:c4:61:02:1d:0a:18:73:26:
                    cf:d2:dd:d6:10:d5:a6:50:b9:4e:21:d7:3f:77:9f:
                    99:48:8a:83:d5:11:40:9c:8d:c6:08:7a:b6:2c:f0:
                    06:9e:86:71:9e:b6:fe:cf:80:c3:a1:16:b7:c1:9f:
                    5d:80:f5:6a:e9:1a:f2:3c:77:b1:9a:88:fe:30:72:
                    e6:d2:de:65:2d:82:74:a2:b4:c8:1a:6a:1e:83:c3:
                    0d:b3:f1:21:8a:7a:12:9a:e8:ff:c0:14:89:08:65:
                    c0:63:8d:cb:ba:e4:e0:d9:52:e3:66:ae:08:07:e3:
                    27:ab:fe:b0:57:1f:6c:41:6d:76:3e:fa:99:26:f7:
                    ce:64:70:35:fa:76:d4:5e:f2:8c:a0:f8:04:e4:ad:
                    06:ff:09:bf:89:3e:34:6c:13:cf:21:14:eb:72:e1:
                    61:13:4f:6f:4a:3f:95:7a:29:7f:d5:db:64:e3:b6:
                    62:e9:c4:5f:5f:63:0b:8c:56:24:01:8b:18:1d:c2:
                    47:8f:f2:a5:0b:78:5f:19:16:0d:e1:ef:b4:9d:2c:
                    f2:b4:d2:15:70:01:7a:38:ee:cc:9c:98:f4:41:3f:
                    39:08:d4:b2:76:49:a3:02:da:1d:b5:dc:3c:8e:d5:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:52:BF:F2:C3:AB:23:D5:09:88:5C:AB:80:93:0B:6B:8B:9A:1C:0B
            X509v3 Authority Key Identifier:
                keyid:10:74:DB:96:40:2F:F5:CF:18:75:64:56:0E:A8:F1:3E:EE:B5:FF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHTblkAv9c8YdWRWDqjxPu61_-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/1e1d69-0bfd-40af-88b1-ab40b58a2892/1/EHTblkAv9c8YdWRWDqjxPu61_-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:12:da:99:30:e3:76:c7:4d:65:62:5a:01:02:96:69:86:cb:
         8f:05:dc:11:80:ea:8b:bb:80:3e:8d:ac:3d:a3:7e:f5:b8:98:
         f2:3d:27:a3:c4:74:5d:dc:bf:48:b6:17:17:58:5f:c7:a3:60:
         50:b2:c9:3d:4b:bc:df:91:98:03:2c:fb:29:74:7a:80:a2:f3:
         3e:3e:de:52:77:71:03:44:7e:56:54:89:b2:60:03:45:36:b1:
         f2:7b:02:43:74:ad:61:de:ac:b7:26:a6:4f:6a:c2:2e:38:ad:
         2c:cc:ec:bd:ff:8a:db:87:2f:63:ce:75:0c:6e:f6:14:6d:17:
         c4:e4:c9:2d:9b:1d:3b:33:d8:2f:9a:3c:18:f3:34:b4:71:a3:
         82:39:75:b6:e3:78:b0:bf:0c:97:ca:b4:8b:e1:a7:05:c0:ff:
         c8:6d:0f:87:23:5d:7f:9d:ca:3d:a6:e1:39:5e:58:93:76:83:
         90:31:52:06:4c:94:75:9f:f6:53:66:8d:e0:5c:2b:eb:dc:59:
         ba:99:34:9e:4f:4c:eb:65:61:05:b9:c5:6c:7a:e4:42:c4:63:
         db:33:13:54:40:8c:bc:e5:8b:d1:ae:4e:24:7e:62:77:a3:7a:
         20:1f:5f:6d:0b:43:59:6c:82:db:d2:dc:6a:66:93:98:d8:72:
         39:2e:66:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:47:13 2026 by rpki-client