Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          YJXD/WScCWSs5Dxsfeo8Z5ZSADx9S5P7cha71n7cd34=
Subject key identifier:   F4:D1:52:03:6B:38:EC:82:EE:73:C6:4C:40:3F:6D:0B:82:4B:AA:5D
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       019F17C33C203C1E18E9FF1EBEE7EF98CAD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          1983
Signing time:             Tue 30 Jun 2026 09:01:38 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:38 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:38 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: sR3fBMyttXW98x55lW53iPlGMLrg7JsgAiMOQJLFpvc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:3c:20:3c:1e:18:e9:ff:1e:be:e7:ef:98:ca:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Jun 30 09:01:38 2026 GMT
            Not After : Jul  1 09:01:38 2026 GMT
        Subject: CN=f4d152036b38ec82ee73c64c403f6d0b824baa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:28:05:7d:a5:e3:2a:3a:83:02:8a:43:5b:05:
                    f7:69:4f:2f:18:d0:aa:e5:43:b9:82:3f:ae:07:2d:
                    0f:44:05:48:c6:3b:57:a2:a1:29:30:89:5b:00:8c:
                    d7:c5:6d:bb:d2:fb:c7:82:8a:12:de:b4:d8:3e:59:
                    21:0a:d3:27:65:d2:6a:e8:59:c1:a8:0c:70:5f:88:
                    3d:5d:bf:ce:f3:23:dc:47:85:a9:02:c0:0f:79:3c:
                    ca:c8:0c:11:b1:cd:51:d2:09:ba:90:e8:98:37:6a:
                    9a:e5:45:55:ba:87:ec:14:da:e0:d8:76:de:7a:86:
                    2b:d7:3e:1c:d5:ce:35:c2:bd:ed:89:78:96:ad:e2:
                    8d:21:d1:5f:a3:12:59:50:64:b8:e9:c7:b3:7d:3a:
                    62:cd:06:0a:6e:54:f9:0a:f0:03:34:99:ff:cf:44:
                    05:b5:ad:9c:a5:c0:5d:ad:5a:bd:38:da:11:ce:e7:
                    28:d6:a7:19:39:7b:04:01:fa:1b:3a:35:83:15:15:
                    80:1d:06:f4:75:44:f5:0c:df:2d:5e:0c:f6:8d:05:
                    22:5d:00:75:4b:98:3e:51:f3:1a:4d:ed:cf:72:07:
                    bf:53:d0:80:2b:8a:fc:82:b1:e9:c1:17:a2:89:87:
                    fe:95:76:ca:c0:6d:ea:28:8f:46:80:ad:96:3b:7d:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D1:52:03:6B:38:EC:82:EE:73:C6:4C:40:3F:6D:0B:82:4B:AA:5D
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:47:ee:90:79:1e:a8:08:f3:e2:8c:fc:53:02:58:4e:ce:19:
         ea:96:18:f9:7f:bf:01:ea:4f:6b:38:58:39:8a:f5:fb:df:03:
         83:38:f2:7c:1d:e0:1b:f1:2b:6a:8e:ac:9a:3e:9d:29:8a:a2:
         5c:6a:66:e9:cb:33:2c:65:38:23:99:66:a0:e6:0b:13:c4:01:
         b1:b3:12:33:51:5e:5c:98:9f:30:55:78:fb:29:5c:8a:37:23:
         63:2d:e2:48:dc:82:78:5a:89:2f:9b:ea:42:5d:57:e5:24:39:
         53:f4:57:26:e9:cf:0c:c1:dc:67:64:b4:9b:35:62:7d:66:7e:
         d6:79:c7:1b:c2:45:98:ac:61:8d:cf:52:57:d5:05:12:ca:9a:
         e5:26:dc:be:0c:be:cf:28:ac:ae:c4:e6:03:db:25:43:61:df:
         3f:a1:ec:35:c1:91:89:57:4c:31:b5:8d:3d:19:47:8e:67:78:
         db:0d:e8:6a:8d:8b:ca:d0:7f:66:92:e1:7b:31:77:a8:7d:d2:
         fc:ba:bd:77:4f:4e:57:88:26:64:f3:b7:1b:29:35:07:5b:af:
         ef:1c:b2:6d:cc:3f:ab:ad:ca:65:16:a2:74:81:38:ce:44:5d:
         03:f4:91:b0:e9:e3:2c:0e:a0:50:fa:b0:39:f4:00:7b:df:eb:
         e9:0a:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:19 2026 by rpki-client