Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
File:                     eUg4hk1oBRYmk73ySfO4rDH2gL0.mft (raw, json)
Hash identifier:          DTNqtZjTySCM8lUc0bIHEIvLK5i66LuI8N88cK88pcs=
Subject key identifier:   BE:E1:E1:01:70:C8:EE:78:44:65:B5:C4:22:51:5A:89:BE:3D:D8:25
Authority key identifier: 79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD
Certificate issuer:       /CN=794838864d6805162693bdf249f3b8ac31f680bd
Certificate serial:       019F848CFFAB6E8E802E3E0634EFCC3A1AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
Manifest number:          E1
Signing time:             Tue 21 Jul 2026 12:01:00 +0000
Manifest this update:     Tue 21 Jul 2026 12:01:00 +0000
Manifest next update:     Wed 22 Jul 2026 12:01:00 +0000
Files and hashes:         1: A7SEMudJ5a-RxrK2Uq7yONbKYeU.roa (hash: c6z7aq6nqfr5/QhRF0NBAO+wJuLKqiCCbZKtfKmmBqE=)
                          2: Lh89wnbqg7wSoE7Dn0YRpSUD1As.roa (hash: WRrXcO4RCbjFqgI5xUr9BaSA/vzn9KlystUhc3EqtKo=)
                          3: V-4o9exXOxgnx9f1kUHxySkJ_mc.roa (hash: tEGjsYNRh3AE6yXvsyEY0juLJUmlIK/5OgkjfZvSvbs=)
                          4: YghezCUU2vOijUnVGZAb_mUnkhs.roa (hash: L2GRUM87dM4BK/Wvu0iTVTzKViHXhACc4SUvy5eRPBs=)
                          5: eUg4hk1oBRYmk73ySfO4rDH2gL0.crl (hash: tLRIgE9iTKB9TGXcF3TfMXFb3pvPxBebP1xUJxlIH8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:ff:ab:6e:8e:80:2e:3e:06:34:ef:cc:3a:1a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=794838864d6805162693bdf249f3b8ac31f680bd
        Validity
            Not Before: Jul 21 12:01:00 2026 GMT
            Not After : Jul 22 12:01:00 2026 GMT
        Subject: CN=bee1e10170c8ee784465b5c422515a89be3dd825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:14:6e:04:65:ed:ee:b9:9d:fe:f1:71:7d:7e:
                    00:19:ee:09:5c:90:78:be:1d:fd:36:02:99:0d:fe:
                    cf:9d:5b:e8:75:ab:5e:9d:ab:e2:d8:16:97:b3:90:
                    8d:7e:09:a3:42:3b:77:93:46:e3:02:a9:e3:2d:2f:
                    a3:51:58:a2:a8:a8:b0:38:af:2f:06:c4:31:43:80:
                    19:04:fc:76:5a:1f:fe:10:32:fd:fa:b6:30:35:05:
                    7d:43:df:b9:a9:0f:a5:d4:53:4d:ab:67:73:26:81:
                    10:97:55:0c:01:47:17:0c:3c:62:0a:91:d3:5e:8b:
                    32:79:2d:8a:1a:62:26:20:56:0d:6d:4b:8e:09:20:
                    1e:a2:fa:41:c8:a9:4e:18:45:85:22:cd:a7:ef:68:
                    0f:73:a7:a3:10:a3:99:66:fa:3b:40:69:aa:08:cc:
                    89:9f:d0:9c:a8:b2:78:4a:3a:d9:84:da:29:0a:51:
                    44:be:40:e3:3f:d1:1b:cc:36:7a:8d:0f:70:52:74:
                    4c:c2:8f:28:a0:d0:45:b2:97:22:96:ff:74:1d:e6:
                    92:0c:ee:87:48:c7:2e:82:91:96:3c:8b:64:23:fa:
                    be:d4:cd:e0:16:5f:f4:0d:38:f4:55:0a:68:3a:47:
                    b4:31:11:ac:85:5e:90:1b:8c:3d:37:7c:1c:fa:fb:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:E1:01:70:C8:EE:78:44:65:B5:C4:22:51:5A:89:BE:3D:D8:25
            X509v3 Authority Key Identifier:
                keyid:79:48:38:86:4D:68:05:16:26:93:BD:F2:49:F3:B8:AC:31:F6:80:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUg4hk1oBRYmk73ySfO4rDH2gL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1d5ad0-4785-4046-b8e6-a0e70e5056ef/1/eUg4hk1oBRYmk73ySfO4rDH2gL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:74:ad:76:49:d5:20:6f:cb:14:02:d4:bb:5b:44:e6:e8:3d:
         b2:60:06:17:8f:8c:82:35:02:b4:43:2b:f7:e4:1a:30:21:3e:
         43:6d:7c:19:50:30:c1:08:7c:f1:9e:38:3c:22:d1:fa:15:98:
         15:16:6b:72:7d:92:5c:49:53:e5:58:a1:3a:f7:ac:73:55:e8:
         2f:f5:95:97:05:ef:80:46:72:27:70:1f:d6:bc:5b:70:81:1b:
         f7:a7:f9:2b:09:b1:2d:a1:dd:76:33:4d:80:3a:6c:b5:63:a7:
         f7:d3:92:1a:50:42:3a:1d:f7:45:b9:3e:f9:27:08:7f:79:c8:
         29:f6:13:1b:ff:9d:b9:d9:9b:61:53:85:43:20:63:d6:66:11:
         57:8a:7c:de:19:9f:cd:73:6b:92:9c:68:46:c3:8e:8e:ca:ba:
         68:0e:d8:5b:0a:d6:b5:bc:bd:96:d5:66:21:1b:a0:3d:5e:78:
         dc:a2:e8:45:10:dd:af:8e:2d:c5:d5:fc:2b:d9:df:3f:af:c3:
         0a:ed:66:0b:0c:93:a0:dd:29:33:76:ce:b7:31:44:5e:69:17:
         ac:e0:a7:eb:c4:4d:46:6f:82:78:4a:19:17:8c:bb:b6:ba:dc:
         d5:5a:61:d8:78:01:ab:eb:73:83:86:72:78:53:0d:44:77:71:
         91:16:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:34:27 2026 by rpki-client