Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          uIm/6yyiXgrE1xvV9lW804ULHtm3usH34k1T0Vhym84=
Subject key identifier:   08:27:1B:71:C0:6E:AE:58:7F:90:BF:B5:6B:CF:AF:D5:1B:9F:E8:10
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019F86B24CE4113E55B3D36F05E394C4E639
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0AFE
Signing time:             Tue 21 Jul 2026 22:00:59 +0000
Manifest this update:     Tue 21 Jul 2026 22:00:59 +0000
Manifest next update:     Wed 22 Jul 2026 22:00:59 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: HuNG+gxW2vv71VyneHgB2fCSBUAZ/Y5h10WaW2P7R0o=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 22:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:4c:e4:11:3e:55:b3:d3:6f:05:e3:94:c4:e6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Jul 21 22:00:59 2026 GMT
            Not After : Jul 22 22:00:59 2026 GMT
        Subject: CN=08271b71c06eae587f90bfb56bcfafd51b9fe810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:e1:4b:e3:db:68:6a:82:f3:d4:4a:58:80:
                    e4:1c:57:a0:ef:9f:6b:ef:cb:00:9b:53:f3:c4:8b:
                    0b:b1:2a:60:07:b8:e9:3c:c8:a6:a7:ea:25:7e:fc:
                    44:1e:51:be:69:48:94:5e:5d:75:c9:b4:42:b8:a7:
                    31:87:ea:b9:b0:ce:fd:0e:d6:a3:1b:5b:fa:ef:24:
                    7c:62:68:f2:21:3e:e4:5b:08:c7:f9:e2:0e:b4:dd:
                    0c:71:cb:59:19:a1:10:f8:50:97:22:c6:78:9e:5a:
                    04:af:c5:ea:4b:ef:50:e5:e0:9d:15:dd:7b:3e:ab:
                    e8:5c:f1:74:d3:39:fa:95:99:fc:5f:f3:c2:14:5d:
                    8d:4d:e6:6b:e5:43:c9:38:a6:9f:1c:22:38:55:ee:
                    a3:2d:3d:6b:c7:2c:69:b8:57:ef:c5:db:50:76:dc:
                    dc:b5:5f:98:e1:04:9f:71:91:1e:e3:f4:88:db:77:
                    c0:ac:2b:d4:7f:cb:e6:12:4c:3e:57:28:28:b9:d9:
                    f9:05:c5:53:b3:1d:dc:6b:71:fa:f3:e7:50:54:15:
                    a9:8c:91:a5:4a:17:05:16:78:f2:c9:c1:e3:0a:3e:
                    e7:64:fe:fd:c1:cc:5d:b9:28:15:bb:45:09:74:af:
                    8e:df:19:5d:8d:6d:43:12:74:cc:93:52:75:11:8a:
                    fe:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:1B:71:C0:6E:AE:58:7F:90:BF:B5:6B:CF:AF:D5:1B:9F:E8:10
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d9:17:d8:d9:e3:83:3f:c2:57:fe:e7:bd:f4:c8:c9:4e:d4:
         be:ec:b5:32:88:23:d5:bd:f0:82:78:62:b2:eb:f0:e6:41:49:
         42:a8:36:24:52:b2:67:c7:7c:de:6f:aa:99:71:3d:09:58:5f:
         cd:e9:7f:72:ef:8b:f2:40:7d:10:5a:bd:08:48:46:0e:b1:2d:
         3c:9a:30:1e:ef:d7:89:ea:26:7e:d9:43:84:b3:e6:a4:17:51:
         52:21:ff:88:b3:f7:9d:05:b2:78:ff:f6:3c:6a:e7:14:0f:d1:
         c2:24:ab:2c:f6:d7:0b:03:ca:84:25:0c:8a:91:6c:c3:2a:39:
         e4:7c:4e:15:07:51:7c:9c:4a:b4:b3:89:4c:09:15:24:3a:83:
         c3:33:cc:47:a9:45:33:0a:fd:86:3d:4b:7f:68:1e:26:35:da:
         6e:c5:62:ea:b6:76:14:31:18:8d:12:70:93:a5:06:d1:20:e9:
         3e:73:1d:cd:18:d3:2c:62:10:1c:e9:37:7c:66:a7:5d:02:98:
         e7:d2:04:e8:c1:45:eb:b5:8a:5c:0d:42:e5:0c:aa:b1:ef:87:
         65:64:ea:5a:6d:b4:8d:a5:06:65:5b:ee:36:96:8b:2e:31:68:
         e5:d3:77:08:b0:67:81:f3:c5:42:ee:eb:48:20:26:d9:cd:b6:
         fd:2f:9b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:03:26 2026 by rpki-client