Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          lV10zKSg5yUFJoycYvUzXnqRJRZTPENnMe3HMRJnfEQ=
Subject key identifier:   6B:C2:14:85:04:29:A6:02:3E:26:18:34:FD:BB:BF:8C:3B:8D:17:74
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       01A0016FFA21694653642BBC0DA7F80E5728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          19FC
Signing time:             Fri 14 Aug 2026 18:01:50 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:50 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:50 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: 3s8aTcVyTA4YmsJFnIZGQHT+7V+As7RmSlbzcdTwlek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:fa:21:69:46:53:64:2b:bc:0d:a7:f8:0e:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Aug 14 18:01:50 2026 GMT
            Not After : Aug 15 18:01:50 2026 GMT
        Subject: CN=6bc214850429a6023e261834fdbbbf8c3b8d1774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:64:9e:36:be:47:60:c9:6f:50:20:b0:5f:
                    03:d2:66:57:3d:0e:4d:0a:05:19:44:36:a4:48:5b:
                    38:6a:02:0e:b6:6d:07:bf:6f:6c:67:f3:4c:93:2f:
                    92:4e:a3:65:66:ad:c5:d4:e8:aa:15:61:2f:35:94:
                    2d:9d:fc:04:0b:7d:84:47:26:ea:3d:2c:df:27:17:
                    19:98:45:51:02:d4:f0:bb:8b:b8:c0:ae:67:eb:76:
                    1f:8b:c0:50:28:8e:50:4b:38:93:34:a9:af:7c:8e:
                    8f:69:3c:6e:ca:d0:54:0d:77:53:df:c7:de:d6:6a:
                    c1:38:56:cd:58:c0:0c:b0:29:ef:4f:d8:d2:81:88:
                    06:b3:f1:92:c7:f0:8b:a0:fd:d9:61:42:e6:99:ef:
                    3c:b1:0e:b1:b7:26:30:74:f3:98:85:40:f7:f9:5d:
                    de:90:15:68:52:47:32:f5:92:e5:8c:79:0a:39:8b:
                    7d:f9:b1:7b:a8:40:49:81:92:33:3d:9a:b9:5d:ac:
                    d2:87:f3:62:15:3d:08:9b:01:e8:8b:a2:ca:7f:75:
                    b9:82:77:9f:cf:5e:0c:16:f6:a3:a3:49:b3:6c:53:
                    66:a1:7d:f9:2b:c6:79:12:5a:ce:2a:4c:d3:24:a4:
                    78:12:35:2d:11:3c:1d:64:70:c9:36:b1:64:9c:13:
                    09:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C2:14:85:04:29:A6:02:3E:26:18:34:FD:BB:BF:8C:3B:8D:17:74
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:58:ce:56:64:4e:16:8b:28:04:c0:9c:cd:37:ac:84:ca:66:
         c3:9f:27:79:79:8d:13:04:2d:6c:c2:9c:48:6a:a9:21:45:62:
         ab:49:86:2b:f1:9a:5c:91:62:bc:2b:21:ed:bb:6a:bb:06:6d:
         8b:c9:e2:c6:bd:92:b0:44:f8:bb:97:0d:94:07:2c:e1:18:9c:
         25:6c:32:85:6c:f4:65:4e:c1:26:70:b3:fa:e1:e8:91:6f:59:
         61:93:bf:4c:13:18:2d:9f:0c:23:18:a0:8d:18:dc:48:b4:4d:
         65:75:42:a2:57:3a:87:93:a2:19:85:ae:62:7b:f7:72:55:05:
         16:bf:eb:b4:9a:4e:cc:4a:81:5b:73:68:3e:da:db:59:ec:be:
         22:50:fd:33:d9:58:c4:83:95:7c:a8:55:a3:d1:45:4c:72:9b:
         2e:88:4b:07:44:f0:a6:29:7e:f1:20:82:45:16:ac:a3:77:fe:
         55:f3:8e:05:cd:f9:71:a0:23:ce:9e:e6:2b:ae:4c:87:d4:64:
         6b:bf:90:c4:93:17:75:76:50:a4:91:a4:0a:6b:50:9b:ce:df:
         07:8b:04:40:da:2a:8e:dc:ed:80:01:e2:9a:8b:e4:a3:c2:c4:
         a7:a9:9b:f5:4a:8c:05:7f:87:54:b6:a7:e3:4c:4e:e7:0b:ec:
         39:7b:97:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:23 2026 by rpki-client