Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
File:                     EsEUQhohU4u2vwJkmH56REyA6j4.mft (raw, json)
Hash identifier:          5uIUmDq1AE6vRC3Y5xXBid/BzqsWcKnq8gpMAENPbno=
Subject key identifier:   41:BC:C6:E1:5D:DE:E6:FC:BE:EB:A5:06:E5:26:38:AB:7B:79:D5:44
Authority key identifier: 12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E
Certificate issuer:       /CN=12c114421a21538bb6bf0264987e7a444c80ea3e
Certificate serial:       019FA2CE7BB1E277AAA3ECE148D8499DAB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
Manifest number:          9F
Signing time:             Mon 27 Jul 2026 09:01:08 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:08 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:08 +0000
Files and hashes:         1: EsEUQhohU4u2vwJkmH56REyA6j4.crl (hash: poXEoq5+blE9EB5ssA3dZQHnyx8Tte44okNZDzzqY7M=)
                          2: OR-UUzM73lSUM_hbKHEM8OHJZXo.roa (hash: kUN7qIoBO4FukILSXeAZWF7RJ65CvgOOJNH7ORJAX/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:7b:b1:e2:77:aa:a3:ec:e1:48:d8:49:9d:ab:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c114421a21538bb6bf0264987e7a444c80ea3e
        Validity
            Not Before: Jul 27 09:01:08 2026 GMT
            Not After : Jul 28 09:01:08 2026 GMT
        Subject: CN=41bcc6e15ddee6fcbeeba506e52638ab7b79d544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:95:42:38:15:30:81:ff:3b:8d:10:d7:c5:f6:
                    19:74:2c:9d:fd:1b:1c:df:1c:6e:98:25:3e:4f:dd:
                    c1:2a:e3:8b:54:6f:5e:fd:3d:0e:b1:d2:21:ae:ad:
                    a4:a7:b6:31:c8:82:6d:d9:43:3b:e4:3c:91:4f:4a:
                    8c:36:17:4e:4e:0d:6f:c3:ba:21:89:b8:13:9f:61:
                    82:9f:7a:06:ca:eb:49:d3:09:4a:a8:9f:8a:6d:c8:
                    e5:84:54:8c:b8:39:28:68:5a:57:12:fb:b3:23:d6:
                    15:16:ac:8a:93:5a:6f:20:6e:b5:d6:25:95:85:bb:
                    bc:16:f5:a8:52:9c:c9:64:a5:2f:a2:2c:89:6d:ae:
                    77:3b:d6:8c:1b:5a:d5:af:7b:5a:f8:f8:7c:39:81:
                    08:96:b9:3a:4d:af:e8:0b:6d:b2:93:4f:5c:85:a9:
                    fe:94:ce:b1:f3:be:80:82:92:53:6a:cd:71:89:41:
                    fc:8d:4b:18:2c:27:4f:14:b9:85:9d:a5:26:a0:78:
                    59:af:f5:90:ac:01:47:ff:4f:38:f3:9b:95:0e:1c:
                    41:8f:69:ea:cd:49:51:68:75:37:1e:19:2a:c8:b0:
                    55:7a:f3:5e:e8:aa:10:72:5d:5f:98:e6:be:2a:1d:
                    f7:e9:65:d4:fb:6a:59:7e:01:d6:ef:0b:14:08:d5:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BC:C6:E1:5D:DE:E6:FC:BE:EB:A5:06:E5:26:38:AB:7B:79:D5:44
            X509v3 Authority Key Identifier:
                keyid:12:C1:14:42:1A:21:53:8B:B6:BF:02:64:98:7E:7A:44:4C:80:EA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsEUQhohU4u2vwJkmH56REyA6j4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/37f686-18a3-4452-928c-777a994c8d69/1/EsEUQhohU4u2vwJkmH56REyA6j4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0a:f0:b7:18:01:6b:26:44:10:98:85:ab:6d:f2:63:c8:6b:
         5a:7a:6f:00:aa:04:81:f2:43:89:b8:7c:cd:bd:12:f4:3a:93:
         87:fc:07:23:06:1a:18:5b:c7:42:d2:e2:6c:41:89:f6:f4:4a:
         07:a4:97:25:9d:90:41:b8:07:c7:99:d6:18:7c:6b:f0:1b:c6:
         7a:80:84:8a:90:2f:67:d4:26:a3:5d:12:20:d2:fa:d5:e1:d0:
         cb:5c:ca:48:a6:7e:d7:a2:03:7f:f7:4d:d0:14:34:d4:09:b7:
         f1:fa:fa:6b:d0:e4:04:2a:4e:5a:2b:26:5d:23:5d:95:87:d9:
         92:cd:fe:28:2f:62:a1:fc:e7:00:85:c7:8c:35:90:63:aa:10:
         85:a2:83:b9:bb:7d:55:7d:50:19:f3:d0:3e:97:bc:76:e9:ff:
         50:81:8f:35:5b:9d:c9:c7:57:e5:5f:59:f0:23:7d:84:f0:32:
         e8:d3:95:01:3e:19:d3:e7:be:c7:f6:e7:ca:a3:e1:de:b9:c7:
         6f:4c:92:4a:22:a3:13:12:dc:9a:70:23:7f:d5:a5:71:e3:8c:
         1d:4e:bf:b4:a3:60:2d:b8:5b:43:42:9f:ca:82:bf:32:38:c6:
         d7:1d:0c:0d:af:8d:f1:39:0b:ce:1a:5a:74:42:24:fa:36:80:
         ff:6a:80:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iznux4neqo+zhSNhJnatVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzExNDQyMWEyMTUzOGJiNmJmMDI2NDk4N2U3YTQ0NGM4
MGVhM2UwHhcNMjYwNzI3MDkwMTA4WhcNMjYwNzI4MDkwMTA4WjAzMTEwLwYDVQQD
Eyg0MWJjYzZlMTVkZGVlNmZjYmVlYmE1MDZlNTI2MzhhYjdiNzlkNTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpVCOBUwgf87jRDXxfYZdCyd/Rsc
3xxumCU+T93BKuOLVG9e/T0OsdIhrq2kp7YxyIJt2UM75DyRT0qMNhdOTg1vw7oh
ibgTn2GCn3oGyutJ0wlKqJ+KbcjlhFSMuDkoaFpXEvuzI9YVFqyKk1pvIG611iWV
hbu8FvWoUpzJZKUvoiyJba53O9aMG1rVr3ta+Ph8OYEIlrk6Ta/oC22yk09chan+
lM6x876AgpJTas1xiUH8jUsYLCdPFLmFnaUmoHhZr/WQrAFH/08485uVDhxBj2nq
zUlRaHU3HhkqyLBVevNe6KoQcl1fmOa+Kh336WXU+2pZfgHW7wsUCNVW3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEG8xuFd3ub8vuulBuUmOKt7edVEMB8GA1UdIwQY
MBaAFBLBFEIaIVOLtr8CZJh+ekRMgOo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNFVVFob2hVNHUydndKa21INTZSRXlBNmo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zN2Y2ODYtMThhMy00NDUyLTkyOGMt
Nzc3YTk5NGM4ZDY5LzEvRXNFVVFob2hVNHUydndKa21INTZSRXlBNmo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zN2Y2ODYtMThhMy00NDUyLTkyOGMtNzc3YTk5NGM4ZDY5
LzEvRXNFVVFob2hVNHUydndKa21INTZSRXlBNmo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgrwtxgB
ayZEEJiFq23yY8hrWnpvAKoEgfJDibh8zb0S9DqTh/wHIwYaGFvHQtLibEGJ9vRK
B6SXJZ2QQbgHx5nWGHxr8BvGeoCEipAvZ9Qmo10SINL61eHQy1zKSKZ+16IDf/dN
0BQ01Am38fr6a9DkBCpOWismXSNdlYfZks3+KC9iofznAIXHjDWQY6oQhaKDubt9
VX1QGfPQPpe8dun/UIGPNVudycdX5V9Z8CN9hPAy6NOVAT4Z0+e+x/bnyqPh3rnH
b0ySSiKjExLcmnAjf9WlceOMHU6/tKNgLbhbQ0KfyoK/MjjG1x0MDa+N8TkLzhpa
dEIk+jaA/2qA/Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:11 2026 by rpki-client