Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
File:                     EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json)
Hash identifier:          bOleI7dHpn+3ejaIi967KEMlGagmxPS0fWl6A0ZlqKM=
Subject key identifier:   F3:0A:74:6A:B7:A6:7E:52:B7:FF:ED:C2:1A:00:D1:BD:73:7E:27:86
Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39
Certificate issuer:       /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
Certificate serial:       019FA0A8DB909DF666462819A8FFF47353E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
Manifest number:          19D0
Signing time:             Sun 26 Jul 2026 23:00:48 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:48 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:48 +0000
Files and hashes:         1: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: Qu2gXwUiXA6vs3juwFD7uV+7On5dHrBwu5wA7UD55kk=)
                          2: axUwYQFpI_H0PGZ-1hLTsPluQlw.roa (hash: jYCTtZ3yrS3nW17v+JIWdi31GQ0OQwoHbk+cXhltHjA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:db:90:9d:f6:66:46:28:19:a8:ff:f4:73:53:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839
        Validity
            Not Before: Jul 26 23:00:48 2026 GMT
            Not After : Jul 27 23:00:48 2026 GMT
        Subject: CN=f30a746ab7a67e52b7ffedc21a00d1bd737e2786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:70:4f:08:85:57:0b:89:ba:e9:e9:7e:79:
                    8b:5b:13:eb:b9:0c:41:09:34:44:76:36:47:37:24:
                    66:17:60:9b:82:8b:5e:18:25:ba:bb:df:fb:e3:d4:
                    f3:4f:59:f1:05:83:21:55:f1:e9:b4:b9:c0:20:e3:
                    cd:2f:69:0d:8d:27:a1:ae:05:8e:1f:45:d5:40:c3:
                    48:72:f8:86:f5:91:ae:8c:52:8f:a6:95:ad:a0:20:
                    8b:2b:0e:7f:e8:e7:fd:0c:39:d2:5b:b8:a4:90:0b:
                    ce:ad:94:aa:a7:93:aa:23:e1:ce:8c:f1:ab:2b:d1:
                    89:c4:4c:f9:7c:c1:74:3f:fe:54:1f:55:88:6a:f6:
                    c0:92:c3:0c:a3:a3:66:af:0b:bd:34:36:6d:10:25:
                    90:f2:4c:5d:74:77:63:ca:4e:cc:d9:c3:26:53:87:
                    bf:81:91:23:ad:ef:43:8d:62:60:cb:8c:21:6f:47:
                    d5:39:69:57:93:82:1e:e7:81:a9:77:98:1c:c9:11:
                    de:7a:c9:9d:38:af:32:0f:da:c9:a9:5f:26:91:e4:
                    97:1b:f7:01:a2:22:ad:4a:ff:0d:dd:75:cf:df:74:
                    ce:af:12:f3:12:7a:b6:7b:c9:fc:31:43:da:71:23:
                    3b:61:76:59:ec:51:1f:ac:f0:f3:e4:2c:b4:45:75:
                    4c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0A:74:6A:B7:A6:7E:52:B7:FF:ED:C2:1A:00:D1:BD:73:7E:27:86
            X509v3 Authority Key Identifier:
                keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:c3:46:f0:76:c5:7d:f2:92:00:f1:ef:f2:4e:3c:d7:dd:93:
         10:fb:c8:0e:7e:d7:fc:85:4e:ac:6d:52:45:11:2a:ee:c4:2a:
         5d:3e:d2:12:f9:69:fa:26:44:be:8e:76:66:8d:6e:4f:8c:3a:
         5b:43:1f:d6:a9:e4:19:f7:8d:f8:d5:9a:ce:c1:e3:7e:25:5d:
         3e:5d:4b:ac:d7:08:ab:bc:bf:3b:5e:ff:c2:9f:32:3e:2d:5a:
         aa:74:76:e3:1c:d7:31:f6:a2:c0:82:3e:cf:b5:b4:fb:62:2b:
         43:90:dc:41:a5:c8:f1:cf:7e:47:bc:d9:85:ec:a2:27:4b:9c:
         4e:e6:53:2e:89:df:b5:94:0c:cb:fb:a7:32:4e:b6:fe:e4:a3:
         15:e3:b0:67:d2:ee:fd:96:bd:31:55:e8:02:9f:f1:2a:29:10:
         29:93:ad:e3:0b:3e:fc:51:b2:b8:e6:2b:c8:cf:37:0b:78:f6:
         5d:35:5b:e2:07:6c:ee:39:5f:47:34:a3:5e:0a:10:e3:09:82:
         26:6f:06:3f:f2:b8:0f:68:c3:d9:cf:e5:4d:b8:35:c1:4d:b1:
         10:0e:f1:6f:7b:e5:a1:7d:44:cb:b8:8a:03:8a:c2:ab:cb:99:
         9d:2b:5b:d9:42:aa:ee:01:6d:ab:22:17:33:df:89:31:ae:d5:
         8c:bb:c7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:34 2026 by rpki-client