Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
File:                     ecmMuzf-ounJputvkoh8BaTFBpE.mft (raw, json)
Hash identifier:          bzqtdAnJy6nzE+OoPckWQ32LjOQAuDddQsyz9hpWZtY=
Subject key identifier:   5D:4B:66:36:70:1B:AA:DC:73:39:BA:2A:BB:CE:16:25:A5:16:6C:0A
Authority key identifier: 79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91
Certificate issuer:       /CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
Certificate serial:       019FA03A90C5902409D11B9531F071563196
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
Manifest number:          19CE
Signing time:             Sun 26 Jul 2026 21:00:20 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:20 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:20 +0000
Files and hashes:         1: cE-16L2hAxXo5HgqO2yQ2GX0mF4.roa (hash: WvhQ4UNcSImErueaFnqr3pwKPQOpTYhrBBdy/1NvzHc=)
                          2: ecmMuzf-ounJputvkoh8BaTFBpE.crl (hash: EPGJFlmAemuP4vdIC3J4FM0ze3kw71grWc+rXOASvD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:90:c5:90:24:09:d1:1b:95:31:f0:71:56:31:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79c98cbb37fea2e9c9a6eb6f92887c05a4c50691
        Validity
            Not Before: Jul 26 21:00:20 2026 GMT
            Not After : Jul 27 21:00:20 2026 GMT
        Subject: CN=5d4b6636701baadc7339ba2abbce1625a5166c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:05:96:85:48:67:71:e6:a3:9d:16:1d:c1:
                    57:24:23:6e:6f:78:8b:49:42:30:03:cc:a8:54:cf:
                    1f:fc:89:d6:27:5f:5b:07:23:f0:42:d8:ec:d3:8f:
                    86:aa:5e:02:28:51:f7:df:b4:1c:c8:b6:01:ff:28:
                    66:3c:01:4d:bc:f3:23:5a:3d:d4:6d:ce:8d:4d:97:
                    b6:5a:70:ce:a5:3f:6e:cd:50:8c:44:69:83:46:17:
                    e7:2d:73:e1:2a:09:d5:c3:14:53:04:b3:90:54:6a:
                    8e:e7:3f:0b:d1:33:f4:27:40:0a:fc:3e:eb:35:a1:
                    0b:75:93:29:84:ad:c9:ae:97:6a:36:84:df:b0:33:
                    92:fe:35:b9:66:5f:27:1f:37:02:1b:64:17:05:08:
                    4d:e3:6f:13:8c:9f:16:3d:42:9c:de:56:a8:65:92:
                    6a:f3:0d:69:6d:0c:81:ee:e8:d5:c7:b2:9c:aa:66:
                    46:91:7d:8f:6d:d4:d1:18:18:dc:c1:b7:31:ec:26:
                    ce:aa:5b:4c:a7:0d:96:d8:70:79:34:13:54:f1:a8:
                    fb:c3:c5:b2:d5:6a:b1:05:51:db:66:71:c7:a3:1a:
                    24:65:8f:94:2a:19:11:80:6f:db:37:e6:d0:08:15:
                    12:ec:27:eb:e9:94:40:94:2a:44:4e:55:33:8a:cf:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4B:66:36:70:1B:AA:DC:73:39:BA:2A:BB:CE:16:25:A5:16:6C:0A
            X509v3 Authority Key Identifier:
                keyid:79:C9:8C:BB:37:FE:A2:E9:C9:A6:EB:6F:92:88:7C:05:A4:C5:06:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecmMuzf-ounJputvkoh8BaTFBpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/58fee9-3830-4da4-b144-915175e36e8e/1/ecmMuzf-ounJputvkoh8BaTFBpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d6:08:6a:e0:44:aa:69:5d:f4:67:03:f1:05:6f:6a:c7:c6:
         7d:49:df:ef:87:91:4e:f3:5f:93:8a:4f:74:2c:7d:dc:a6:f8:
         4d:a2:6c:df:0f:f6:89:44:8f:e5:76:85:dc:ea:13:73:e6:80:
         cd:70:a4:4f:d7:f8:ea:ff:05:75:29:11:74:4e:d8:37:57:59:
         22:53:68:1c:4d:0a:04:0d:f8:75:b5:db:12:e2:62:95:d5:b0:
         96:83:79:9a:e0:15:4c:c9:11:27:14:a4:fd:43:d7:df:66:f4:
         f7:89:de:08:b4:69:7b:e9:58:79:ef:67:0e:b7:0b:ee:61:50:
         97:92:4a:5a:15:02:cb:43:5b:2c:42:1f:9d:81:13:4b:b3:d6:
         2a:c5:1e:ba:68:d3:8b:68:1c:cb:d3:31:20:d4:44:1d:0f:c1:
         c1:19:3a:d8:55:2c:c3:80:d9:91:2d:a1:fc:f2:c3:a0:24:da:
         6a:31:b5:0c:4b:c5:d7:ae:38:a6:79:17:97:8b:2a:61:b9:63:
         42:11:b4:b7:0e:41:5c:8f:43:0a:1e:32:73:95:45:ea:8f:f4:
         b8:eb:4d:46:98:3c:0d:2e:97:bf:f1:5e:78:65:8f:fc:69:24:
         0c:89:e4:7f:af:26:6a:12:fd:ed:ae:c8:a7:63:b7:ef:6b:f9:
         e2:a1:c7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:42:09 2026 by rpki-client