Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
File:                     EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json)
Hash identifier:          yFS4uTYo5f1cil+XXhJkY4bpUlif9K5su+8pdc5S+GQ=
Subject key identifier:   CB:9E:63:BB:36:34:8A:5E:29:75:82:22:95:07:67:F6:6E:75:E5:24
Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82
Certificate issuer:       /CN=12868f5e34eefefce655c1bb8383299fa56c5c82
Certificate serial:       019FA0E10547A31BF0F94A524284FD95438B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
Manifest number:          154C
Signing time:             Mon 27 Jul 2026 00:02:09 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:09 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:09 +0000
Files and hashes:         1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: IhB2ICQvMq11B5/DvFQfR180tNNLjGRnklW7DYcCAEM=)
                          2: c3TZ80LQFPNTdNL7tvVVaimWE50.roa (hash: BloeRWk/RRwEgQcAGk6aFEwqm1qphUForCGmrYa3jto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:05:47:a3:1b:f0:f9:4a:52:42:84:fd:95:43:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82
        Validity
            Not Before: Jul 27 00:02:09 2026 GMT
            Not After : Jul 28 00:02:09 2026 GMT
        Subject: CN=cb9e63bb36348a5e29758222950767f66e75e524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:f9:90:7b:53:51:83:cd:3f:f3:6d:4a:6f:
                    e5:a0:da:d6:e9:d8:e7:44:df:94:91:50:0c:1d:e9:
                    1e:83:b3:28:04:b2:6a:b0:10:f3:f7:98:e5:b6:55:
                    f7:89:80:16:59:af:27:b9:93:da:10:97:c7:0b:ca:
                    09:f1:c0:fb:e3:2e:ff:c6:0b:28:06:81:43:c4:7b:
                    5e:db:71:59:87:df:e6:11:de:8e:0a:30:44:57:72:
                    7e:ba:05:42:07:74:65:f3:63:81:db:b9:32:13:3d:
                    9c:93:1a:b7:4d:8c:cc:b6:f1:ab:5a:f9:9e:f0:42:
                    a5:42:00:cd:f2:49:96:d8:6a:43:58:a2:1a:63:3f:
                    f7:57:39:c6:dc:15:fc:93:b2:1e:3a:66:12:99:eb:
                    99:69:da:30:4b:fd:73:a3:9d:ec:71:78:b4:ec:7d:
                    c6:8a:49:54:35:76:f2:94:0f:57:e0:e0:2c:3d:11:
                    ed:ea:23:50:9c:62:fb:44:6b:b2:15:b6:19:3a:21:
                    20:00:5f:36:c7:ab:a6:b7:c3:8b:22:54:f1:07:11:
                    79:5b:f0:b4:24:01:5d:ff:73:ee:6e:4a:00:d5:14:
                    f4:6d:b9:07:7f:69:3f:df:18:f4:9f:26:f4:10:f0:
                    b7:4c:73:59:12:39:31:89:97:dc:10:8e:05:3e:98:
                    ab:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:9E:63:BB:36:34:8A:5E:29:75:82:22:95:07:67:F6:6E:75:E5:24
            X509v3 Authority Key Identifier:
                keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:b7:43:97:89:8b:3e:ef:e6:da:fc:7e:63:64:70:90:b8:
         9f:b9:4c:1b:7c:04:66:88:63:bd:81:49:06:5b:5c:a9:5b:a0:
         55:1c:0a:2e:03:22:2d:53:ce:d1:21:2a:bb:a4:1f:c1:05:7c:
         83:0f:8d:b3:0a:22:aa:06:5c:c0:0d:a8:29:b1:47:f5:6c:c2:
         cc:41:cf:22:6e:d3:4f:61:0f:bd:61:30:29:f3:82:77:24:fb:
         08:41:91:83:14:27:69:74:a4:b8:54:14:b9:48:d0:0d:70:32:
         db:ff:d8:35:24:0a:77:7a:b9:a5:a4:1a:24:a5:58:ba:a0:9c:
         0d:50:66:58:91:12:78:f4:f0:ef:90:37:3d:8b:26:b0:dd:2a:
         a8:d0:2e:38:af:1d:57:a0:38:49:16:93:6b:e6:56:44:1a:41:
         8a:43:6e:1c:6a:8d:71:89:03:ed:6e:1e:00:ba:51:81:2e:d1:
         6b:b2:4f:b1:a7:00:ec:ee:25:bc:39:e5:71:d5:6d:ff:7c:b5:
         6d:4d:01:ad:2d:fa:c3:97:c0:d4:15:83:41:d6:9e:a7:af:7c:
         0b:20:dd:49:06:d5:60:e1:71:c7:6f:40:fa:2e:2f:c4:4c:25:
         f4:6c:af:47:66:6d:bd:14:f2:d7:72:43:ce:dc:1c:a9:4a:3a:
         e3:9c:5c:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4QVHoxvw+UpSQoT9lUOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyODY4ZjVlMzRlZWZlZmNlNjU1YzFiYjgzODMyOTlmYTU2
YzVjODIwHhcNMjYwNzI3MDAwMjA5WhcNMjYwNzI4MDAwMjA5WjAzMTEwLwYDVQQD
EyhjYjllNjNiYjM2MzQ4YTVlMjk3NTgyMjI5NTA3NjdmNjZlNzVlNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCz5kHtTUYPNP/NtSm/loNrW6djn
RN+UkVAMHekeg7MoBLJqsBDz95jltlX3iYAWWa8nuZPaEJfHC8oJ8cD74y7/xgso
BoFDxHte23FZh9/mEd6OCjBEV3J+ugVCB3Rl82OB27kyEz2ckxq3TYzMtvGrWvme
8EKlQgDN8kmW2GpDWKIaYz/3VznG3BX8k7IeOmYSmeuZadowS/1zo53scXi07H3G
iklUNXbylA9X4OAsPRHt6iNQnGL7RGuyFbYZOiEgAF82x6umt8OLIlTxBxF5W/C0
JAFd/3PubkoA1RT0bbkHf2k/3xj0nyb0EPC3THNZEjkxiZfcEI4FPpirQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMueY7s2NIpeKXWCIpUHZ/ZudeUkMB8GA1UdIwQY
MBaAFBKGj1407v785lXBu4ODKZ+lbFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTIt
MWYzNGVmYjViN2QxLzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTItMWYzNGVmYjViN2Qx
LzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOq3Q5eJ
iz7v5tr8fmNkcJC4n7lMG3wEZohjvYFJBltcqVugVRwKLgMiLVPO0SEqu6QfwQV8
gw+NswoiqgZcwA2oKbFH9WzCzEHPIm7TT2EPvWEwKfOCdyT7CEGRgxQnaXSkuFQU
uUjQDXAy2//YNSQKd3q5paQaJKVYuqCcDVBmWJESePTw75A3PYsmsN0qqNAuOK8d
V6A4SRaTa+ZWRBpBikNuHGqNcYkD7W4eALpRgS7Ra7JPsacA7O4lvDnlcdVt/3y1
bU0BrS36w5fA1BWDQdaep698CyDdSQbVYOFxx29A+i4vxEwl9GyvR2ZtvRTy13JD
ztwcqUo645xc1w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:29 2026 by rpki-client