Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
File:                     eGCL8SwARclj5JAZWkWLzeKl7eA.mft (raw, json)
Hash identifier:          dWfWCir7+O6MIX8JLK4CM/PMcYytnN5mLXyhWrexGus=
Subject key identifier:   CF:59:94:82:3C:59:1E:BF:2F:2B:F1:DE:C3:89:AD:D7:B3:E3:40:13
Authority key identifier: 78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0
Certificate issuer:       /CN=78608bf12c0045c963e490195a458bcde2a5ede0
Certificate serial:       019FA25FFDC27AABD3BCAB365FA6B2E994C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
Manifest number:          01A9
Signing time:             Mon 27 Jul 2026 07:00:27 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:27 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:27 +0000
Files and hashes:         1: eGCL8SwARclj5JAZWkWLzeKl7eA.crl (hash: bI+a9cXK3DST71g/k0I/oLV7tR2dTMdLiTTV5OXHLbU=)
                          2: p1cZ4lTIkN7h1Vk_nxgPIsEtqYc.asa (hash: mepnLt+8zOfJCBxRiQ+xvHsTE4OxwHdGEhUmPD5Z3p8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:5f:fd:c2:7a:ab:d3:bc:ab:36:5f:a6:b2:e9:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78608bf12c0045c963e490195a458bcde2a5ede0
        Validity
            Not Before: Jul 27 07:00:27 2026 GMT
            Not After : Jul 28 07:00:27 2026 GMT
        Subject: CN=cf5994823c591ebf2f2bf1dec389add7b3e34013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1a:9d:06:23:42:ca:84:f4:7e:4d:1f:0f:70:
                    0e:08:b7:ba:16:3a:4a:cd:51:6d:c1:da:09:eb:26:
                    b0:be:c4:d6:cd:11:cd:09:dd:d0:fe:f8:eb:44:4e:
                    47:bb:26:5a:92:7d:45:31:99:0e:31:15:41:1b:64:
                    11:ae:e1:5b:72:23:4b:22:56:d1:6a:05:5f:8d:ba:
                    9d:7b:db:e7:2e:ae:38:fc:13:ac:b5:54:49:4b:12:
                    1e:ac:f2:cd:46:16:5b:31:59:e9:40:e2:2c:61:f7:
                    91:1b:b2:34:16:0e:13:10:d2:29:a2:90:18:14:06:
                    4d:52:89:4c:05:dd:61:2d:90:bd:0e:77:23:95:5c:
                    51:58:ee:08:a3:81:99:69:99:03:62:7c:7b:f5:91:
                    c9:68:fa:64:e0:d1:ee:94:38:75:3d:51:d4:55:24:
                    f6:06:8e:23:d5:76:99:b4:0e:c0:f5:64:81:40:45:
                    5e:5f:87:53:e2:04:a9:37:79:e8:95:59:b7:21:cd:
                    58:f4:3d:d1:e8:64:b2:d3:8d:a5:27:18:20:33:08:
                    a1:ec:bb:47:ee:55:19:71:02:06:79:e2:dd:96:80:
                    73:64:0d:13:10:79:4e:8e:9d:8f:38:60:a6:50:d7:
                    10:85:24:8c:e6:09:d4:07:f2:52:ac:d1:89:42:84:
                    90:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:59:94:82:3C:59:1E:BF:2F:2B:F1:DE:C3:89:AD:D7:B3:E3:40:13
            X509v3 Authority Key Identifier:
                keyid:78:60:8B:F1:2C:00:45:C9:63:E4:90:19:5A:45:8B:CD:E2:A5:ED:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eGCL8SwARclj5JAZWkWLzeKl7eA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/b9dc0d-7057-4656-8228-874aace4627f/1/eGCL8SwARclj5JAZWkWLzeKl7eA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:1e:c1:ef:41:8b:3a:bc:21:70:3f:53:90:a5:99:d4:96:
         2d:10:90:22:57:59:f3:8a:b0:e0:62:48:0b:99:20:63:51:1f:
         16:02:bc:03:0b:da:80:c4:e0:b7:53:8b:c6:d4:ff:c5:2b:62:
         12:57:ce:a3:14:c8:2a:73:53:4f:c6:85:36:94:97:5c:ce:6c:
         f1:5a:b7:6e:0d:c8:54:9a:0f:58:21:31:43:df:a1:aa:93:75:
         3a:18:1f:e9:b5:00:c1:9d:9e:79:1f:41:dc:50:a5:ca:dd:d4:
         a8:f5:4c:e2:fb:d9:25:d6:cc:22:01:73:0d:1e:5e:b9:2b:8f:
         23:45:f3:59:01:e7:ae:b3:b5:5e:3e:a3:0e:cb:29:60:f3:ab:
         93:f9:ae:47:5a:f9:e2:0e:aa:2a:0f:c5:79:7d:e2:e1:77:0a:
         85:97:91:6f:6e:f0:a3:6d:e7:7b:ec:97:38:51:17:98:24:d0:
         51:c3:1c:59:b2:c1:cb:40:28:8d:cd:e8:ac:17:05:aa:c4:b7:
         8f:d1:d9:84:f1:a4:01:d4:57:c1:e3:6a:96:4b:6c:af:99:4c:
         4c:25:0f:d0:40:46:6f:9b:d8:82:1f:01:0a:ac:54:9d:6e:e9:
         e0:d6:96:99:2f:95:a4:97:5a:a9:0b:c8:11:a6:c2:6f:f5:f7:
         f7:43:06:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:19 2026 by rpki-client