Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
File:                     EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json)
Hash identifier:          IMQHiznD3Qk8K1Kx4mtsbrxDeh8oVJz4Cjj/uzfbU94=
Subject key identifier:   50:22:7E:CD:FD:96:44:88:2A:BB:5C:B0:CC:19:7F:38:3E:2A:F1:9D
Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D
Certificate issuer:       /CN=1003cd25315330350d73f2a3579aa95e052b718d
Certificate serial:       019F190D13268286F8E819A1D5C58FA9CD93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
Manifest number:          0DBD
Signing time:             Tue 30 Jun 2026 15:01:54 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:54 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:54 +0000
Files and hashes:         1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: MbSVUDiCmAmSlRr/UPmVSL9/wr0CTnzkX1vjjpHxrQY=)
                          2: TgSGiVpEk6VcVoLx1zlEJGOCAMI.roa (hash: QQzCSEznQp8ZFwcwq9xyZGdqpLg4dA0oXWhf8hriZug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:13:26:82:86:f8:e8:19:a1:d5:c5:8f:a9:cd:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d
        Validity
            Not Before: Jun 30 15:01:54 2026 GMT
            Not After : Jul  1 15:01:54 2026 GMT
        Subject: CN=50227ecdfd9644882abb5cb0cc197f383e2af19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:af:4a:67:11:f4:48:ee:4b:ce:e1:83:45:
                    e8:94:05:59:f0:78:a4:51:62:4e:6d:1b:de:a0:a9:
                    9b:f7:e4:d2:14:ae:a0:99:25:2d:14:10:8b:42:1c:
                    13:0d:e9:a2:10:c7:4f:a0:08:ef:60:72:1e:29:2d:
                    f4:90:e0:da:30:6c:3f:79:c5:d3:69:42:5b:d6:5e:
                    1e:2c:ea:97:cb:41:38:8c:86:74:c4:8d:fc:b2:5a:
                    85:2a:be:06:9d:d4:6a:ed:05:1c:dc:8a:86:56:0d:
                    67:52:95:39:01:f9:59:b1:c7:25:b7:11:25:e5:ff:
                    4c:d4:4f:5d:0f:27:ea:6f:2d:76:e5:29:c3:f2:26:
                    00:8c:4e:3f:3f:d1:1e:87:f4:ab:de:24:0b:da:92:
                    1f:bb:39:dc:ec:91:90:9f:d6:48:9f:4c:72:35:db:
                    0d:8a:34:2e:44:8d:ec:b9:d8:a1:c7:2a:20:34:22:
                    ef:6a:ab:1a:83:5b:39:ea:75:4a:6d:1e:4b:c8:d0:
                    f5:3e:cb:25:d1:f6:32:8f:8a:5f:aa:5f:7e:7e:88:
                    18:ea:09:b5:48:0e:11:7f:bc:a9:c2:d7:63:d2:e7:
                    d4:a6:0f:ea:57:9e:f3:c6:84:bc:d3:fb:aa:83:d9:
                    eb:f4:b5:f7:d6:6b:6c:6a:f7:74:58:a7:3a:65:32:
                    44:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:22:7E:CD:FD:96:44:88:2A:BB:5C:B0:CC:19:7F:38:3E:2A:F1:9D
            X509v3 Authority Key Identifier:
                keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d0:e0:86:54:3c:ff:c8:79:34:0d:75:1a:9c:80:c8:d8:88:
         a8:49:4f:14:fd:f6:61:92:20:c5:3b:86:1b:7f:2e:0e:ef:99:
         95:7d:74:70:4b:a0:67:51:e0:d7:b8:61:73:ca:2f:34:c8:52:
         9a:23:0b:47:81:b7:14:99:a3:f8:7e:18:77:a2:b7:a0:9a:79:
         b1:ca:84:d8:52:28:7f:3a:6b:1b:43:4b:1a:8c:a0:2c:69:8f:
         cb:a5:5a:cc:cb:a9:77:ff:69:78:5f:e6:9e:f3:9b:57:d9:9f:
         ef:f0:21:cb:30:65:e6:40:6e:ff:78:20:d0:3a:09:86:eb:ca:
         de:11:2c:1b:d4:8d:6f:d3:bd:52:55:ec:62:e3:3b:da:ae:11:
         66:ff:a9:bf:76:af:7e:bd:31:ab:ab:db:32:e3:36:34:ce:c9:
         8e:81:c2:07:38:4b:6f:74:04:6f:63:ca:c2:0e:b9:c8:81:4a:
         4c:e6:5b:23:e4:53:09:9c:91:5a:b8:d4:c3:ee:66:29:ca:e1:
         6c:5a:65:f4:98:43:24:45:a4:7a:87:93:d6:19:6f:25:cd:c7:
         e8:af:01:6d:9d:0c:c4:22:ea:29:4c:5e:ce:f9:7f:76:45:2f:
         60:79:d2:99:12:da:57:71:ed:ef:76:16:96:97:60:b7:5b:05:
         67:34:84:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client