Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
File:                     EKjG6TCLsACDEAFx4A27YUD09YA.mft (raw, json)
Hash identifier:          zFnIoO243mSFdBHo1plxQsGfg83MV8CJWB16WHs3e80=
Subject key identifier:   31:CF:7F:3D:A6:B0:E8:95:C1:03:CA:AF:68:25:26:26:2C:4B:3A:3E
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Certificate issuer:       /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial:       019FA4183FFFE5D5B6556FB7851C0DCE8CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
Manifest number:          19D5
Signing time:             Mon 27 Jul 2026 15:01:20 +0000
Manifest this update:     Mon 27 Jul 2026 15:01:20 +0000
Manifest next update:     Tue 28 Jul 2026 15:01:20 +0000
Files and hashes:         1: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (hash: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784=)
                          2: EKjG6TCLsACDEAFx4A27YUD09YA.crl (hash: L0xFDXi3f04lpRrmGKRAzrgvC4hdt8oBDM0tMpvHQwE=)
                          3: IiIOqEC2i8Kn3pwHdsNueJQiX8o.roa (hash: b2TJ8DWoax+zX+jq6uzbhSSPpoR4UPspESjwpSfojeU=)
                          4: VyGXcLXLR7aE-sDxtLP4io6t1tc.roa (hash: gURrYwXKEDvB9SMdTVcuAN6Si8eouAWukW6eTK+MJTo=)
                          5: plhSuqqJa0jwOYQK5HTONg70a4M.roa (hash: cKDU2K6sGfkO/N88v+vmRc1FSMIHeKN+UvIPHCWpjco=)
                          6: yL1p9BGlippA5i5iVucMVBM9S4Q.roa (hash: oRvpMIJ5EsAuSoZty3HeQ0Lgu38Q+0FUJoGBlWaTjec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:18:3f:ff:e5:d5:b6:55:6f:b7:85:1c:0d:ce:8c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
        Validity
            Not Before: Jul 27 15:01:20 2026 GMT
            Not After : Jul 28 15:01:20 2026 GMT
        Subject: CN=31cf7f3da6b0e895c103caaf682526262c4b3a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fd:bf:37:0c:4f:48:db:8a:aa:67:f4:02:96:
                    a4:d8:3b:70:ba:ab:06:72:de:93:45:37:2f:3f:d1:
                    22:d4:3a:a8:21:02:71:df:9a:1c:49:50:dd:ac:d2:
                    da:20:dc:ef:3a:12:9e:9d:93:9a:52:9c:bf:bf:7d:
                    4c:19:33:69:46:a2:32:c6:f0:8b:5d:80:b5:1c:22:
                    39:fd:d5:9a:42:ef:42:fb:5a:1b:55:b3:72:51:7f:
                    d0:e2:01:cd:e5:dd:f5:c5:7a:04:5e:b5:e6:50:09:
                    e4:a4:c9:e8:ca:9d:87:8d:89:03:ae:30:bc:de:64:
                    93:b9:0b:5b:40:8c:fe:81:28:b6:96:22:46:c8:7c:
                    4a:f0:70:bb:52:85:d1:00:9e:10:f8:dc:d2:ff:4e:
                    8a:7c:74:3d:2a:89:d6:57:e5:8b:9c:99:59:66:9f:
                    0a:dc:cf:61:2d:1d:d6:c7:3a:5e:fb:de:b7:11:25:
                    fb:ff:68:c0:18:52:45:18:a3:8b:e8:af:95:43:e0:
                    a2:a6:c4:0f:5d:18:ee:32:7f:38:a2:9e:9c:8f:74:
                    06:c1:39:d3:2b:4d:c1:83:11:0e:f9:3f:0f:cf:b0:
                    1b:7e:b2:78:86:3a:ab:a8:86:95:15:18:50:52:c9:
                    97:64:66:13:ad:0b:ce:80:bb:24:bc:65:98:1e:e7:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:7F:3D:A6:B0:E8:95:C1:03:CA:AF:68:25:26:26:2C:4B:3A:3E
            X509v3 Authority Key Identifier:
                keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:52:4a:2c:fb:83:d8:4e:7e:e0:01:a0:54:a2:6a:67:8c:
         2f:72:c3:7c:c5:b7:d6:8e:d8:0d:9b:4f:be:c5:14:7a:8c:0d:
         8c:45:32:1f:78:71:36:2d:a6:3a:4f:47:9e:7f:8a:6b:24:42:
         62:23:a1:1c:83:ab:9b:ae:61:28:b2:56:5c:b6:46:4f:7c:20:
         75:c9:2d:1d:80:44:5c:8f:cf:d6:38:5e:74:62:67:db:a8:15:
         33:86:50:45:69:7a:55:b1:36:43:7b:6d:66:ba:d0:38:df:5f:
         10:75:44:9b:f6:14:07:26:59:96:d7:f0:5f:c8:00:9d:95:a5:
         a6:a3:32:04:7b:c8:61:7a:77:bf:0d:a4:4a:61:34:b0:59:0b:
         d9:93:ba:09:fb:74:f3:ad:a9:64:ef:1e:75:b5:eb:4b:51:93:
         12:1c:34:92:73:5e:fc:4b:04:17:5d:5d:6b:02:af:84:5b:f9:
         87:de:e5:65:c8:d6:56:2c:5d:38:39:9d:1f:49:5f:f6:fb:d1:
         85:96:95:f1:bd:61:dc:35:b5:42:e6:fb:8e:d9:09:f8:37:a6:
         47:4b:90:07:94:05:92:19:9e:9a:32:7e:42:b0:ef:0d:0d:be:
         09:a5:1d:eb:45:b4:f9:2b:0b:27:5b:75:f1:0b:54:f0:3f:94:
         ae:dc:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:18:30 2026 by rpki-client