Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
File:                     EHIerWpFdWQ8twMGLAlodV6Cges.mft (raw, json)
Hash identifier:          EPti/1BwAMvV2sT9iKhoa8m9boZ4Xif4IyXGmsD+Mvs=
Subject key identifier:   04:B3:3C:31:02:91:08:B5:89:4F:20:45:8F:2C:45:D2:AC:6C:C1:23
Authority key identifier: 10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB
Certificate issuer:       /CN=10721ead6a4575643cb703062c0968755e8281eb
Certificate serial:       01A0005CB2943EADFB064837C6F07E83DD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
Manifest number:          1276
Signing time:             Fri 14 Aug 2026 13:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:09 +0000
Files and hashes:         1: 1-rET-TrbL0N0PmSCeeqaK3f307A.roa (hash: 3mf7fKWr4vRI4ELzbIBegjtJk+mkQEPMj+4jcV/D7Z4=)
                          2: EHIerWpFdWQ8twMGLAlodV6Cges.crl (hash: 8hUsm0rglSsLFXjOdxYbpDgjoeqplOzlQQsKrBlNPqQ=)
                          3: OYfq_lWnAQ_tUxH83Vafk3m1hAU.roa (hash: jPa4kfq6v0aw3m5eHQ43ps6ZzHtlfC/2MPYqiPwryT8=)
                          4: OklpCWAYtSxGFSO6LoyURgrDbcQ.roa (hash: 1mSZtPwrR8rsCOpqJ4xfUkwL5UPo6V6cd8N6AZWROk0=)
                          5: adft9gClh_5cLRsjg_tIKsse5c8.roa (hash: mOJk0iIwfTDt5ixEea0GhZ9TZ+LmcfXcF0RkG7cTHPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:b2:94:3e:ad:fb:06:48:37:c6:f0:7e:83:dd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10721ead6a4575643cb703062c0968755e8281eb
        Validity
            Not Before: Aug 14 13:01:09 2026 GMT
            Not After : Aug 15 13:01:09 2026 GMT
        Subject: CN=04b33c31029108b5894f20458f2c45d2ac6cc123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:37:24:9d:94:0e:d8:d3:32:47:83:17:5d:29:
                    c9:aa:14:81:2f:e3:05:eb:d4:fb:c3:98:09:6b:ee:
                    ed:97:0e:30:fd:4b:9f:aa:a0:7e:88:65:ec:d6:41:
                    2c:12:f7:47:8c:ed:7c:d0:37:1d:d4:35:2d:19:e6:
                    80:80:0d:7b:2d:da:84:38:da:66:d5:52:17:5f:8a:
                    bc:10:09:fc:f7:24:9f:99:9b:1c:dc:b5:21:d0:86:
                    f3:bf:ff:c3:66:63:70:18:63:ab:5f:b6:ef:42:b3:
                    bc:9e:75:95:e6:66:1f:5f:30:4e:64:2f:fc:8f:ee:
                    a9:bb:b4:a1:e9:21:00:98:e9:17:f9:ab:c1:be:80:
                    97:1b:c0:6f:4b:50:45:41:7c:8b:41:4d:9d:b5:40:
                    d4:ac:31:4f:f8:71:32:f0:1a:20:f7:a5:c8:de:aa:
                    20:d4:1c:f4:8d:c6:6b:15:53:dc:9a:60:69:84:33:
                    20:79:7a:d6:13:48:d3:e9:04:89:14:d0:d0:20:a3:
                    58:7a:a9:79:b2:34:80:1d:be:94:4a:d3:84:5e:05:
                    2e:eb:40:93:66:d5:71:ce:16:75:0d:ff:f1:87:9f:
                    49:cd:31:49:ce:e3:56:84:73:d7:20:a8:b8:e1:17:
                    00:8e:c7:12:26:c0:46:d2:6f:62:fa:66:fe:f3:ec:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B3:3C:31:02:91:08:B5:89:4F:20:45:8F:2C:45:D2:AC:6C:C1:23
            X509v3 Authority Key Identifier:
                keyid:10:72:1E:AD:6A:45:75:64:3C:B7:03:06:2C:09:68:75:5E:82:81:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHIerWpFdWQ8twMGLAlodV6Cges.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/ca935b-2484-4020-b814-3d4ae80fc45d/1/EHIerWpFdWQ8twMGLAlodV6Cges.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:27:82:cc:0c:37:cc:c8:a8:ed:80:41:6e:73:1f:1c:87:41:
         55:13:e5:e3:3e:6b:8e:6c:1a:91:94:4c:93:38:f9:0d:c9:d9:
         ed:8b:4f:7b:9e:e8:02:64:9f:48:0e:41:a2:3d:71:dd:ba:a7:
         6d:d5:ec:34:f8:3e:01:8d:e4:55:4a:d1:b3:be:1d:24:8b:a6:
         d6:09:2f:cf:33:8f:26:3e:6a:78:7e:a3:db:f6:1a:c5:4e:f1:
         26:eb:32:b8:d0:1c:db:62:8a:74:6f:56:2b:02:2f:22:e1:7c:
         05:77:9d:e2:c6:d3:16:c9:ea:a3:95:89:9b:ee:53:bf:40:d7:
         e3:a6:45:ff:3f:bc:8b:91:62:7a:a9:92:d5:e1:12:db:50:61:
         44:2d:ff:56:42:f8:c8:83:18:29:e8:99:1e:fb:44:36:4f:ac:
         c1:ea:ce:e7:dd:24:21:96:7d:ee:e2:6b:14:7f:60:26:6d:15:
         79:51:ad:f5:83:b0:a3:c1:33:a0:a3:da:3b:8f:70:02:79:04:
         6b:20:54:49:10:85:a5:44:33:ad:f6:8e:bf:a8:3c:07:6b:3e:
         80:66:a4:17:68:5a:97:18:b8:65:16:ff:20:f2:9a:19:e2:33:
         e0:cc:ed:39:c6:db:d1:9b:43:ee:fb:b4:ab:a5:95:8a:6b:1b:
         d4:9b:32:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:36 2026 by rpki-client