Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft
File:                     EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft (raw, json)
Hash identifier:          8SqGhT7Ot3td9onJH7SR86WclHPmQUCj3+aqTyeSSmw=
Subject key identifier:   52:E5:D0:9B:38:4A:A1:08:17:D2:D4:44:F6:A2:5A:EE:38:BC:DF:DC
Authority key identifier: 10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC
Certificate issuer:       /CN=1036d59074fef412115f428b978222e47b8219cc
Certificate serial:       019F9EF1B012AC531EA57BEC82BD333B731D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft
Manifest number:          47
Signing time:             Sun 26 Jul 2026 15:01:07 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:07 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:07 +0000
Files and hashes:         1: EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl (hash: YeI7Nh9Q5BA/HFc+TXmGJocuU1joqDoG+owdWle2uHA=)
                          2: OYRXuwprzKG_D7waylC4kGrOTog.roa (hash: K2KXacyz+N3Ly0q/yZtnOMfVu6KxcPZFzACR1xpiat0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:b0:12:ac:53:1e:a5:7b:ec:82:bd:33:3b:73:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1036d59074fef412115f428b978222e47b8219cc
        Validity
            Not Before: Jul 26 15:01:07 2026 GMT
            Not After : Jul 27 15:01:07 2026 GMT
        Subject: CN=52e5d09b384aa10817d2d444f6a25aee38bcdfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:45:28:db:7f:39:77:72:09:05:2c:c8:76:
                    d4:a6:d3:6f:79:82:fd:00:d0:44:53:27:71:1a:dc:
                    9e:d1:fd:9b:e4:20:31:d7:bb:b9:93:3d:60:ee:1a:
                    2a:47:a0:78:b9:b3:83:fd:6e:56:14:3c:2a:13:1a:
                    4f:79:23:a0:03:e0:15:4a:bd:c7:a5:6e:1b:58:a3:
                    af:eb:12:d8:87:6b:b0:14:9d:50:4e:d4:d5:4e:9f:
                    7d:c7:dd:cb:41:e1:ed:4d:68:1b:ad:14:a0:1b:d2:
                    d3:41:a7:83:b7:e4:29:75:77:05:33:a3:46:9a:01:
                    e5:7b:40:39:61:0c:f5:27:c7:49:e5:5f:37:c5:0b:
                    8b:82:25:83:f7:26:cc:38:ff:57:f4:3e:8c:2a:f3:
                    31:cd:1f:7b:4d:ef:ee:ad:d4:ab:35:3c:3b:7c:a9:
                    7d:ad:5b:db:61:87:a7:9d:fb:53:69:f5:48:dd:f4:
                    43:06:a0:bb:be:36:42:66:1c:2b:ad:51:6e:ed:17:
                    74:48:dc:85:0c:5c:e6:bd:e6:bb:2e:c8:25:23:d2:
                    64:03:02:2d:90:03:de:a2:5c:7c:34:9c:3c:fa:95:
                    81:71:15:c3:c6:fd:38:17:a1:d1:fa:d0:c7:27:40:
                    02:05:46:1b:54:4a:0d:9c:0b:c4:97:88:ea:85:a8:
                    06:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E5:D0:9B:38:4A:A1:08:17:D2:D4:44:F6:A2:5A:EE:38:BC:DF:DC
            X509v3 Authority Key Identifier:
                keyid:10:36:D5:90:74:FE:F4:12:11:5F:42:8B:97:82:22:E4:7B:82:19:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5eab77-8917-467a-8613-418c80443bac/1/EDbVkHT-9BIRX0KLl4Ii5HuCGcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5d:ea:ed:50:f8:76:f5:f5:4c:e1:be:be:e0:c5:93:ae:c3:
         c3:1e:03:ee:67:d4:44:af:be:68:41:36:db:4f:80:c3:55:be:
         cb:12:68:cb:b8:16:19:7f:26:4d:d5:18:89:10:39:4d:9f:1b:
         08:cc:bf:23:f7:b2:cc:4f:05:bb:a4:24:13:27:86:7d:a8:99:
         7d:4a:1d:c9:f7:4d:27:19:c5:af:b4:a5:9b:14:10:ba:d0:e8:
         92:57:45:2d:94:a0:9e:d6:42:4f:78:89:b3:eb:d0:41:e1:b1:
         f4:2a:33:3d:0b:c4:68:7b:52:e0:2c:a3:a9:9e:41:fd:00:a9:
         01:32:7b:c2:5f:0f:6c:7e:ed:2e:21:05:d6:5f:21:c8:d5:4c:
         d1:17:a1:dd:b9:1c:ef:35:29:2d:e1:38:c8:75:a3:b7:a1:4e:
         2b:95:8b:80:86:c1:0e:ee:af:40:8d:c8:65:5c:c3:0e:01:e6:
         cb:ff:42:3f:77:b2:0f:92:be:f6:69:3d:ea:5f:56:f2:f3:c9:
         77:e4:af:da:1a:33:a6:47:dd:34:25:cf:a4:7b:76:39:1c:bf:
         36:2f:2b:95:bc:51:62:b0:da:b9:95:e1:f9:5f:4c:d3:4b:9d:
         10:0a:24:4a:81:cc:93:e5:50:ab:4e:91:81:32:50:08:60:3e:
         11:06:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:43:47 2026 by rpki-client