Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          +zlgapK2+IC37/5aQq6IPda2Vy8j/f46aCkoffzYFWQ=
Subject key identifier:   0A:76:4C:50:6A:AB:C8:16:22:37:E9:48:91:85:DD:C4:87:1E:53:6F
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       019F17C2E0F5ADB6810EB44A5D6758E9A296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 09:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:15 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: VSlMGjCKtTEu5rdfCmcInluSBX6zllDPTUyOdFPJrHI=)
                          2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:e0:f5:ad:b6:81:0e:b4:4a:5d:67:58:e9:a2:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Jun 30 09:01:15 2026 GMT
            Not After : Jul  1 09:01:15 2026 GMT
        Subject: CN=0a764c506aabc8162237e9489185ddc4871e536f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:a1:ff:fc:4b:0b:d2:1d:66:7b:18:d5:61:
                    96:7b:3a:ef:ad:0a:dd:f6:e7:eb:23:e3:d5:83:e8:
                    d1:a7:5e:ba:df:ed:68:7c:86:b2:23:42:c1:f2:97:
                    d3:04:81:f2:38:68:4d:c2:d3:fb:cc:c6:9c:f3:c8:
                    4d:e8:e0:60:15:f5:39:3a:5d:69:4a:94:cd:a1:8b:
                    bc:ef:27:8f:f8:a4:d8:8f:7c:c4:01:59:e3:e0:98:
                    13:3f:d3:ab:cb:15:a4:89:8f:d7:65:cb:c6:e0:b7:
                    d4:87:f9:48:70:fe:4e:70:85:e7:de:7c:b2:3e:61:
                    26:8d:7f:e9:54:76:a7:22:55:09:86:71:a5:d0:4a:
                    db:47:b3:80:72:6f:0f:97:a8:6c:7d:aa:b2:f5:24:
                    a8:ff:f7:87:f2:53:dd:2b:8c:e7:cd:cb:80:80:95:
                    10:d4:c7:0c:f7:9d:91:65:55:7c:9f:91:fb:55:f9:
                    ed:45:a1:39:4a:a4:29:ae:4b:98:61:74:71:ba:df:
                    45:73:1c:ae:a4:58:c2:b1:1b:f3:eb:58:a4:19:8e:
                    60:28:d8:88:17:6d:1c:eb:3c:ce:f5:cf:20:61:7b:
                    9d:e7:02:cf:dd:e8:cf:4d:a8:a6:a7:f8:fe:fa:8e:
                    11:84:5d:e9:e2:2b:05:25:96:4b:2d:52:0a:13:b0:
                    32:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:76:4C:50:6A:AB:C8:16:22:37:E9:48:91:85:DD:C4:87:1E:53:6F
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:13:8b:b0:37:59:4a:75:09:83:4c:ab:18:a1:bb:05:ed:e3:
         69:af:1d:82:28:d5:b7:1f:55:2f:41:51:c5:4a:56:e7:ea:b6:
         a6:1d:3d:a9:fd:0c:2e:0e:e8:c9:79:0f:e0:89:5c:bf:40:33:
         1e:70:de:c6:3d:fd:09:0f:0c:67:1e:f3:aa:c2:a5:e7:44:62:
         b7:3d:37:38:28:53:a0:f9:d7:32:bb:54:4a:b7:d1:c0:53:78:
         f5:3f:76:b3:95:94:d1:b1:98:61:89:12:28:b4:3e:cb:53:2a:
         b2:6c:a6:de:47:2e:84:20:0c:c0:8b:fe:13:da:82:a5:cc:df:
         e1:ed:6c:1e:a8:6e:e9:a4:2d:bc:01:fa:ab:4c:55:2a:53:74:
         6f:32:1d:96:1d:e0:de:24:7c:3d:da:8a:25:ce:0c:37:09:29:
         e4:67:bb:52:13:ec:39:e1:ef:eb:d2:4a:20:21:34:b2:ab:f5:
         50:b5:89:6c:35:2e:4d:50:af:17:4c:20:14:a2:4a:33:11:1a:
         c2:c5:50:73:4c:d9:2a:44:1c:4f:e0:03:c1:70:30:ec:9a:3f:
         a4:f3:fb:ed:a8:99:76:da:80:aa:80:37:bf:22:ea:77:cb:5d:
         ca:05:d7:a6:e8:93:c3:0b:61:de:c8:69:b5:ae:76:ae:2f:85:
         5c:41:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:53 2026 by rpki-client