Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
File:                     EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft (raw, json)
Hash identifier:          c/rhJk72b4/Zn4FMR4YYkRYcHisPv5kFkNU1T5eOXec=
Subject key identifier:   8E:4A:D0:31:6D:A7:B3:22:E8:0B:8A:CF:FC:92:9F:CE:FE:47:ED:AD
Authority key identifier: 12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A
Certificate issuer:       /CN=12d82a254867a52e680e411bbff5abc20acd623a
Certificate serial:       019F32CCDD2402542D12257A076FD363D508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
Manifest number:          0F
Signing time:             Sun 05 Jul 2026 15:01:54 +0000
Manifest this update:     Sun 05 Jul 2026 15:01:54 +0000
Manifest next update:     Mon 06 Jul 2026 15:01:54 +0000
Files and hashes:         1: 0CXMCUKQ4CdjBlvAt5pm0hEnETo.roa (hash: q7VCvKAGi9XQDJti9raevgXGzbHYgG1g/0cCScoRD+k=)
                          2: 2Z06w-6aRdtV0QK4J8t70JdDrjs.roa (hash: k7e4lEr8W/EMx7CcjgiyyJjZ/itKU+JMkO7hCLhiTdA=)
                          3: EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl (hash: BEay4xVMJR6YDELO96XFUCS+7WtD/t8ktyISEvflHyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 Jul 2026 15:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:32:cc:dd:24:02:54:2d:12:25:7a:07:6f:d3:63:d5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12d82a254867a52e680e411bbff5abc20acd623a
        Validity
            Not Before: Jul  5 15:01:54 2026 GMT
            Not After : Jul  6 15:01:54 2026 GMT
        Subject: CN=8e4ad0316da7b322e80b8acffc929fcefe47edad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8a:cf:49:b7:48:8f:34:99:af:4d:a9:e2:6f:
                    8b:1d:86:9f:0a:8d:ad:fc:52:4a:86:7f:35:1c:6e:
                    7b:75:e0:d3:60:b1:61:65:68:8c:a6:48:9b:17:a4:
                    a0:63:b1:8f:20:5d:e5:0e:ff:57:3d:f0:33:dc:73:
                    d5:a1:74:e5:40:1a:18:ad:79:af:7b:a7:aa:78:89:
                    c3:d8:83:9e:1d:a6:93:74:6c:88:d6:30:bf:f6:1b:
                    34:a1:1a:02:cd:f3:5e:03:d8:ac:3b:d1:cb:ab:b6:
                    f3:67:63:b5:a3:60:69:cc:97:ec:c4:aa:f1:83:27:
                    27:4d:2d:fd:ea:ce:0f:9a:e4:c3:e7:e1:67:74:07:
                    ad:91:7e:53:b8:00:77:5b:b5:94:36:d1:27:a6:8a:
                    f4:f7:c2:ae:2a:a5:4a:02:ff:3a:c3:fc:ae:fe:31:
                    8b:af:9e:96:08:c2:21:38:b6:86:31:fc:26:cc:6f:
                    e5:56:81:19:e7:40:3e:5e:7d:56:e7:bc:e3:1b:53:
                    9e:aa:98:1a:dd:28:ca:e3:69:32:04:c9:01:4c:45:
                    51:b4:e9:e8:20:d6:10:45:ce:92:e1:c9:c3:e6:3b:
                    fd:a4:54:0a:66:37:50:98:e0:9e:27:41:71:ca:8b:
                    fb:2a:f5:95:ed:64:5c:77:30:a0:0a:de:48:3b:c9:
                    9d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4A:D0:31:6D:A7:B3:22:E8:0B:8A:CF:FC:92:9F:CE:FE:47:ED:AD
            X509v3 Authority Key Identifier:
                keyid:12:D8:2A:25:48:67:A5:2E:68:0E:41:1B:BF:F5:AB:C2:0A:CD:62:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EtgqJUhnpS5oDkEbv_WrwgrNYjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/EtgqJUhnpS5oDkEbv_WrwgrNYjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:b7:4f:51:c4:78:4e:57:38:c4:e5:0c:2b:0a:ff:31:cd:da:
         61:f3:9e:df:b9:a7:9f:fe:14:c2:13:b9:cb:5f:13:b9:7a:4e:
         69:a8:3d:56:db:a7:ea:8d:92:a6:fd:86:55:15:62:d2:41:f1:
         a6:45:f7:90:bd:3e:8d:18:be:97:a7:31:0d:37:2c:5c:4d:55:
         76:9b:9f:08:81:d3:be:ca:ad:8e:6e:36:ed:d8:34:02:12:92:
         fc:0c:91:91:9e:d2:67:b7:1c:f1:9b:84:e2:11:ba:6f:3c:24:
         53:a3:4c:60:10:c1:f4:fa:0a:4b:ba:56:24:dd:36:5a:e6:e8:
         7f:14:81:21:0d:9a:11:b8:d6:c4:3c:89:85:2c:b0:34:14:3d:
         0b:da:bf:d7:0e:57:be:17:cb:22:ba:90:7b:b3:80:f1:02:48:
         f3:e0:7e:f5:88:ab:a0:e5:74:1b:16:e4:37:1d:cb:2f:bf:67:
         2b:8a:cb:f3:e4:13:89:43:a4:04:f5:ee:90:c5:0d:c6:ce:f7:
         e2:9e:eb:4c:a9:a6:05:9c:ad:d4:84:f6:fe:86:31:1b:0e:44:
         9a:ec:ee:fb:15:55:a7:1c:62:c3:2f:27:d1:02:89:b9:25:be:
         a1:2a:de:90:e1:19:a1:9e:cb:93:9a:2e:5a:56:29:dc:59:00:
         68:d8:36:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 19:57:06 2026 by rpki-client