Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
File:                     Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json)
Hash identifier:          /8MQIcIhCPSDw3ulEnpaDoQ19XyJCfdZzr5AdEp7DMg=
Subject key identifier:   A7:73:DD:0A:33:F2:1F:BB:FE:5D:5C:E3:83:7B:42:5A:13:FE:BD:52
Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4
Certificate issuer:       /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
Certificate serial:       019FDE3F704978CD10EC9EEDB5451282225F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
Manifest number:          19F0
Signing time:             Fri 07 Aug 2026 22:02:07 +0000
Manifest this update:     Fri 07 Aug 2026 22:02:07 +0000
Manifest next update:     Sat 08 Aug 2026 22:02:07 +0000
Files and hashes:         1: 1-871CmDX8fagFE4cCLtEOvFlaJk.roa (hash: XbD+Hd0tYqjM6KWUuuQ0xXPJOZgVOM/iQcoQQ4UP8I0=)
                          2: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: tldDXVG2y9pG4yXhj6BEKV6i3oWlHQ1S3O8EGWi9u/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:02:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:de:3f:70:49:78:cd:10:ec:9e:ed:b5:45:12:82:22:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4
        Validity
            Not Before: Aug  7 22:02:07 2026 GMT
            Not After : Aug  8 22:02:07 2026 GMT
        Subject: CN=a773dd0a33f21fbbfe5d5ce3837b425a13febd52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:11:4f:a3:3e:28:17:17:e3:3c:d8:93:5b:
                    5b:f9:29:72:1c:8d:a8:56:39:77:52:40:f6:e5:65:
                    4c:8a:18:94:53:9b:95:48:f1:03:fb:f2:77:75:f2:
                    49:26:1c:b9:d9:93:34:17:f1:ea:5d:00:4c:d2:2c:
                    29:99:15:3e:90:05:15:e0:04:29:41:55:24:cf:a1:
                    f9:0f:a1:1c:c7:ae:32:a0:8a:ea:6b:bc:1b:40:28:
                    a4:e9:42:29:7c:b2:5a:09:13:4d:79:74:59:b7:4f:
                    c0:88:51:a0:45:a5:c6:5e:f7:34:c5:61:c6:1d:79:
                    ca:56:49:f9:c6:26:36:3a:7e:92:d5:57:60:fe:74:
                    ba:9c:91:5c:05:18:ed:39:68:cf:15:82:32:bb:c9:
                    9c:15:d4:1e:3d:24:3e:7f:ff:28:de:18:1a:e8:ef:
                    cd:77:f9:ab:75:23:99:cb:a2:99:c7:ab:8c:e8:67:
                    85:b2:e2:f3:2c:e3:a1:a8:8a:cc:99:89:1d:6a:21:
                    19:3f:1e:1d:bf:d7:73:8c:2e:58:80:c9:a5:46:37:
                    3c:77:07:b6:cb:47:35:5b:62:a0:93:e6:01:37:67:
                    af:b2:99:12:99:e7:5c:d4:3e:bc:89:90:c2:b5:93:
                    2c:e0:fe:e7:c5:54:13:ab:3d:09:62:d8:38:83:b4:
                    93:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:DD:0A:33:F2:1F:BB:FE:5D:5C:E3:83:7B:42:5A:13:FE:BD:52
            X509v3 Authority Key Identifier:
                keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:19:32:dd:ba:c4:65:fb:eb:16:ec:a5:9e:bd:a1:99:4d:7a:
         5d:00:a5:98:ea:2c:c5:0c:ff:ec:44:49:0e:d1:d4:0d:9d:b6:
         c6:c7:45:ce:0e:9a:6e:05:35:f6:dd:db:4d:84:58:98:49:db:
         a8:62:c8:68:f3:06:76:e7:68:ae:76:08:2e:f2:22:fc:63:88:
         cd:d1:f6:ed:24:a9:33:10:ea:f9:94:63:f5:06:fc:c7:4a:51:
         5c:02:c4:c6:4f:63:63:dc:e0:20:8f:d0:b6:63:f8:23:ee:70:
         45:df:0c:4c:4d:44:c2:60:1f:be:d5:ee:21:03:07:c4:cb:1e:
         10:90:44:b8:b4:2a:e1:92:4a:74:0d:bc:da:70:e9:a8:1f:27:
         92:c9:9c:bb:ad:e7:8b:66:82:b5:4f:b3:5b:37:63:f9:41:14:
         e4:30:c5:b8:16:4c:6b:fc:73:c8:30:81:68:0b:3c:e8:18:42:
         ae:7f:68:88:b4:2f:49:e2:5f:39:28:5e:98:8a:c4:d6:b4:04:
         9c:30:d5:71:a0:02:17:7b:3e:e8:ce:f8:8b:d3:92:dc:33:65:
         d2:e7:37:e1:88:b1:00:29:de:81:c7:d6:4b:5e:d9:08:1c:32:
         52:33:cf:02:60:8a:15:be:c7:f9:13:fc:a3:86:4a:46:d7:80:
         f5:19:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 06:18:54 2026 by rpki-client