Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          1SutWtu4Hz+FDciu4f8c0YeXBKyCgGnPOxN0UjykRX0=
Subject key identifier:   71:C2:6A:63:31:24:EE:45:10:C4:8B:FF:50:EE:E5:0C:F3:5D:F8:EF
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019F159DE418A7E1354BE18C0B7DA512DE45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 23:01:36 +0000
Manifest this update:     Mon 29 Jun 2026 23:01:36 +0000
Manifest next update:     Tue 30 Jun 2026 23:01:36 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: viYsrOCrj5NRKixCAtkrh5DBafXREFy9yY+WxEtEgJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 21:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:9d:e4:18:a7:e1:35:4b:e1:8c:0b:7d:a5:12:de:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Jun 29 23:01:36 2026 GMT
            Not After : Jun 30 23:01:36 2026 GMT
        Subject: CN=71c26a633124ee4510c48bff50eee50cf35df8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ce:77:fb:0b:1e:ed:f2:20:9a:09:4a:fc:de:
                    34:d2:f5:0f:b7:31:9c:c5:d0:be:da:7c:7b:ce:0a:
                    a0:57:6e:a7:e8:85:3e:5f:60:08:b0:af:05:97:56:
                    e7:be:d3:99:d3:05:17:65:50:38:47:80:68:1c:de:
                    97:0a:13:3c:04:2b:3f:7d:3a:2b:ec:b2:9f:65:7c:
                    41:00:e8:03:74:80:03:56:7f:f0:48:a2:fd:2b:1e:
                    f2:af:55:b5:ce:76:a5:c5:f9:36:3d:da:fc:36:e5:
                    9d:05:65:fd:5d:2f:98:08:0d:0f:94:04:a0:97:96:
                    35:1b:a0:de:f4:e5:8d:4f:57:15:91:b0:f9:37:c8:
                    24:20:8c:56:b1:89:16:e3:5c:76:8c:4a:6f:c5:cc:
                    d4:11:63:71:c7:ec:41:94:81:4f:82:f1:43:f7:ce:
                    87:42:f2:d7:ee:06:48:5f:b4:12:6d:ba:dd:99:e9:
                    74:5a:fe:ba:0c:b0:0f:d7:45:04:ba:5b:e8:75:a3:
                    87:d3:77:e5:67:6b:a8:40:63:cb:11:2b:36:81:bf:
                    40:89:5b:12:a2:39:3c:55:0b:20:e4:2f:74:dd:26:
                    ad:ef:28:5f:cf:b1:a9:91:01:d1:ea:38:9c:ac:94:
                    98:fe:62:c9:93:f1:04:67:89:ea:fc:2b:d5:80:c7:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C2:6A:63:31:24:EE:45:10:C4:8B:FF:50:EE:E5:0C:F3:5D:F8:EF
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:07:cf:95:a5:fb:19:05:9a:44:2f:aa:86:f8:b0:f8:9c:
         eb:c3:3a:b6:e2:cd:68:84:4b:a1:25:b2:5e:e7:da:46:86:7f:
         b8:ab:eb:ee:81:ad:cf:3c:2a:ba:41:fd:03:8b:c0:21:df:58:
         63:00:44:b2:c3:9c:e4:26:fc:72:a7:b8:87:6e:aa:95:2e:08:
         ca:2d:4e:6a:e0:27:af:9e:6e:30:ef:4e:24:f9:b5:2a:11:c5:
         c4:2b:c0:88:d5:28:d1:da:43:ae:03:b3:96:f2:3e:84:f2:63:
         de:44:67:e0:5d:59:1b:0c:5c:a6:bd:b9:84:36:1b:4e:d2:7a:
         81:ae:ea:8c:71:31:13:c8:0b:c3:e4:8e:db:71:72:1e:f0:5c:
         9d:81:02:16:48:9b:b0:41:59:da:66:83:a0:85:03:e3:d2:18:
         73:f1:db:7c:7f:3c:61:de:39:8f:5c:b1:33:ad:13:61:82:cd:
         d4:3d:e6:f0:8c:d9:29:98:85:91:1d:6f:52:1a:78:12:8f:c5:
         72:56:26:10:24:d5:10:30:1d:20:b2:fc:70:b5:66:71:b4:c6:
         a5:4b:0f:ac:82:4f:4e:ff:f5:16:7d:fd:ed:91:4c:b6:db:73:
         64:25:4a:a0:b2:e8:62:69:8e:4c:fa:ea:21:2b:08:11:08:97:
         5f:bf:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 07:22:07 2026 by rpki-client