Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
File:                     eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft (raw, json)
Hash identifier:          3gxJe9cnLcPo1GUNWCbdau6cayvOfLLADZumbf6S/T8=
Subject key identifier:   D4:74:F9:2C:C9:C8:2A:F8:26:1E:7E:CA:87:5B:4A:45:B5:07:2F:35
Authority key identifier: 79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B
Certificate issuer:       /CN=79e376c8e490d28620c24f97e2b933d62fd0238b
Certificate serial:       019FA0A8E0FDB6E085DEAE9F7771D7937F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
Manifest number:          0B22
Signing time:             Sun 26 Jul 2026 23:00:49 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:49 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:49 +0000
Files and hashes:         1: eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl (hash: jZostoMt2VcOVsfF/mRRJ25uRHadalQV4UWHSwKtaLY=)
                          2: kSFjelNK2nrw1yJcIllugBR2YRw.roa (hash: qC1YqVbi0emgXtAjk78XAWNuJjURPxEoZ1zs9JXTtbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:e0:fd:b6:e0:85:de:ae:9f:77:71:d7:93:7f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79e376c8e490d28620c24f97e2b933d62fd0238b
        Validity
            Not Before: Jul 26 23:00:49 2026 GMT
            Not After : Jul 27 23:00:49 2026 GMT
        Subject: CN=d474f92cc9c82af8261e7eca875b4a45b5072f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:0b:7a:b3:27:b3:39:9a:c4:27:f4:fc:51:
                    f7:a6:2d:23:d1:aa:74:50:94:e0:58:b0:34:34:45:
                    34:ee:1e:e8:fe:08:81:99:55:57:ac:01:1f:38:a4:
                    21:82:56:9e:99:7f:59:57:a3:86:0f:e8:82:43:7c:
                    d5:9e:27:ee:92:2e:09:0e:10:5a:86:8d:20:8d:8b:
                    f2:3f:fa:3c:22:9e:49:9f:f1:19:3e:a2:28:86:96:
                    b5:7b:6a:c6:f6:c6:06:30:ef:8f:32:ac:29:49:01:
                    0c:f5:ad:e6:37:2d:0d:fc:77:04:0a:b5:f7:64:d8:
                    6e:cb:10:a2:d5:fa:d4:6f:64:24:e5:98:84:33:39:
                    dd:19:43:5e:5a:56:cb:a8:f9:06:ae:2a:4c:5a:ef:
                    01:38:25:46:9a:d3:57:e4:fe:6d:98:32:40:9d:20:
                    86:d2:84:14:39:27:c3:8f:02:3d:0e:75:ab:11:24:
                    37:a8:ee:2c:55:71:eb:57:1a:90:44:5f:87:53:6f:
                    26:8a:18:44:d8:99:39:d1:f6:dd:53:dc:30:f1:61:
                    fb:e8:f1:3b:9f:d5:5b:85:17:0d:17:e4:52:43:71:
                    60:fe:f5:0b:df:f3:a6:f3:de:f9:59:5e:ba:92:07:
                    bf:da:84:11:95:0f:89:60:61:16:66:eb:46:9b:4b:
                    d3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:74:F9:2C:C9:C8:2A:F8:26:1E:7E:CA:87:5B:4A:45:B5:07:2F:35
            X509v3 Authority Key Identifier:
                keyid:79:E3:76:C8:E4:90:D2:86:20:C2:4F:97:E2:B9:33:D6:2F:D0:23:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e8b85a-f375-4771-af3d-125e1e1f159b/1/eeN2yOSQ0oYgwk-X4rkz1i_QI4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:73:7e:17:54:b5:e4:6c:07:1b:cd:c3:c9:4c:9a:de:95:f7:
         ed:22:c7:23:88:d8:7c:60:d0:46:3c:a2:6c:c0:1f:a8:6c:77:
         f8:9c:4f:e9:3a:ca:cb:ca:21:b9:7b:de:a0:62:8c:8e:a7:f1:
         6b:bf:bc:74:e1:13:35:23:75:19:d5:2c:81:b2:79:a6:e4:e9:
         d3:2d:02:87:b2:b4:0d:4b:31:43:33:57:f9:fa:bb:ee:15:99:
         d2:08:52:fc:97:e9:ca:b3:5c:e8:1a:93:15:0b:bb:c7:c4:00:
         cf:bc:32:6b:4f:02:b8:83:a7:32:9b:94:fc:70:23:52:48:1d:
         7f:b3:41:f2:bf:1a:11:69:c5:11:86:e1:a9:cb:c1:9d:89:54:
         b7:3b:09:16:75:50:3c:74:e8:03:10:3e:d6:f6:90:b1:55:66:
         bf:f9:bf:a3:d9:d1:45:30:60:2d:de:f4:47:32:3f:db:06:fc:
         bd:5a:7d:9d:09:ac:3a:f0:3e:94:51:39:26:be:1e:00:fa:64:
         aa:b0:bc:e3:3a:1a:ef:6d:8b:2f:ee:31:45:16:0b:3a:4d:e3:
         0a:21:24:02:f3:70:65:c4:8f:d2:08:7a:d6:da:ae:b7:5b:42:
         73:86:94:19:23:5e:a2:18:3e:a2:ec:16:43:8a:2c:74:88:42:
         63:f0:1a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:37:26 2026 by rpki-client