Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
File:                     EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json)
Hash identifier:          +n2dcp0NDywiJgXk80DIji/UecqbpQ//CFKqoQnK8h8=
Subject key identifier:   B0:0E:C5:72:28:BD:3F:3C:B2:ED:B6:36:F2:E0:E3:59:0E:49:28:31
Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Certificate issuer:       /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Certificate serial:       019F984ACB0B8C2349330E16306D8925448B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
Manifest number:          0C72
Signing time:             Sat 25 Jul 2026 08:01:06 +0000
Manifest this update:     Sat 25 Jul 2026 08:01:06 +0000
Manifest next update:     Sun 26 Jul 2026 08:01:06 +0000
Files and hashes:         1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: isc/ozAMfoKrZZkDD9g1vN9sFvTO92uh+gQXvv8PECA=)
                          2: EZyVvJ5bgJq-P7qECfwi4jRgjOI.roa (hash: aArOh7D2m0R/tR8bRjsgJKmh1qSOBK7Sx7lK9wOrfn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:4a:cb:0b:8c:23:49:33:0e:16:30:6d:89:25:44:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
        Validity
            Not Before: Jul 25 08:01:06 2026 GMT
            Not After : Jul 26 08:01:06 2026 GMT
        Subject: CN=b00ec57228bd3f3cb2edb636f2e0e3590e492831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:e3:d1:81:fd:e6:2b:46:a3:dc:79:15:8e:
                    1f:58:6f:b5:e8:3d:6a:15:d5:13:8d:58:3c:97:34:
                    7d:13:cf:f3:ea:19:e7:83:ec:7d:c2:26:e3:21:7b:
                    1e:11:25:3e:2b:01:37:ec:b1:9b:fd:07:56:63:8a:
                    5c:a4:03:7e:29:66:80:f5:88:90:0a:10:e1:c3:27:
                    56:3c:f9:07:b3:dc:76:6b:ae:9f:71:f2:07:9e:70:
                    ac:03:89:01:51:a8:32:5e:e3:4a:46:e4:36:b0:e3:
                    7d:71:20:1c:ca:4b:46:74:f8:a4:7d:d7:56:82:bd:
                    ed:a5:08:52:e6:9a:dc:cf:23:fd:d6:86:8a:71:89:
                    60:8a:51:5b:23:5d:c5:7a:e2:81:c3:97:f3:f9:17:
                    3e:54:fb:3b:8a:2b:74:4a:10:0f:d8:d6:05:56:6c:
                    64:5f:7f:6f:89:4c:70:45:33:09:ab:0b:da:98:c9:
                    38:94:54:0a:94:98:40:c5:b7:b0:44:2d:a7:62:1e:
                    9e:2c:40:76:a8:02:a1:93:04:97:e2:9e:2f:b9:ce:
                    bc:c9:aa:7f:6d:2f:99:69:1c:f6:28:ff:72:72:22:
                    eb:2a:9b:f2:64:57:e3:55:79:c5:3b:43:80:9a:4b:
                    31:ba:16:23:c4:4f:a3:46:17:3a:3f:21:d8:95:7a:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:C5:72:28:BD:3F:3C:B2:ED:B6:36:F2:E0:E3:59:0E:49:28:31
            X509v3 Authority Key Identifier:
                keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:23:08:e5:cf:ed:ff:1a:7c:53:3c:e8:5f:79:e5:15:f1:fb:
         45:70:82:dc:23:d8:a1:43:e7:a8:29:05:1f:d8:16:aa:c3:f5:
         34:1e:6d:31:10:68:09:5c:f0:d2:06:19:69:f6:f7:8a:c9:73:
         48:f5:8c:05:55:c9:73:03:71:93:3b:eb:45:80:21:29:c7:b1:
         2f:82:b6:28:76:b3:f2:44:22:36:4c:0f:ab:a1:c2:97:6e:33:
         26:dd:3d:36:9d:df:71:a6:a6:3e:30:af:cb:3a:b8:7c:65:ef:
         0b:bb:d6:43:c7:ad:9f:e5:89:05:c0:0d:b7:6e:de:91:8d:77:
         83:5c:5f:96:72:79:c1:73:a9:72:cf:71:9a:5e:89:75:48:e7:
         91:c3:ac:4f:18:4e:6a:8a:01:4c:43:cf:60:a0:0d:ce:67:82:
         23:90:83:f2:fa:7f:d1:6c:44:95:0c:34:54:cb:23:d3:ab:06:
         fe:1f:f6:56:13:ac:4e:35:11:82:a9:21:06:e4:f2:dc:22:15:
         c6:f6:4f:ee:01:61:ff:a6:5d:14:be:99:73:13:67:4b:92:15:
         df:a1:7c:ec:1e:05:e4:de:79:56:ad:03:0d:8e:cb:f0:64:46:
         12:8b:35:58:8f:1a:5a:7b:8f:bf:d8:04:90:a0:09:be:6f:1e:
         23:fa:65:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 10:26:25 2026 by rpki-client