Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File:                     eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier:          rGPjtIReEffu1l8bENDWBiG1Pm1+ykEtraiX/9lt790=
Subject key identifier:   65:38:37:19:87:B2:67:4F:1A:95:AA:60:1B:A6:66:CD:CC:61:67:99
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer:       /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial:       019FA004028862AB3BD88B9FABF77D8A434D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number:          02E8
Signing time:             Sun 26 Jul 2026 20:00:44 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:44 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:44 +0000
Files and hashes:         1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
                          2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: cKlAAFUYoVkq4HLMavZjVAB98hZ0RtMep6znbG6x4dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:04:02:88:62:ab:3b:d8:8b:9f:ab:f7:7d:8a:43:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
        Validity
            Not Before: Jul 26 20:00:44 2026 GMT
            Not After : Jul 27 20:00:44 2026 GMT
        Subject: CN=6538371987b2674f1a95aa601ba666cdcc616799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4c:7a:4e:59:1d:42:0a:20:20:9c:f8:d3:e8:
                    24:26:40:c1:70:2b:5f:67:1b:3f:53:8f:a1:6c:b4:
                    1e:7d:e7:7e:d0:c5:5e:0e:eb:c9:91:c8:19:e8:1b:
                    44:5b:d7:a4:8f:fa:ef:26:eb:38:b1:98:ac:ba:2c:
                    02:a2:ea:d3:7f:f6:3d:c5:87:e8:2b:fd:b3:15:08:
                    61:b9:10:2a:3c:0a:2e:ee:f5:06:2d:97:7a:49:f5:
                    b8:e6:d3:3b:f5:de:bc:e0:f0:98:91:9f:e1:f3:5a:
                    f8:9d:1f:ee:c2:88:18:bb:72:d8:a2:24:2a:74:d2:
                    2d:df:91:ff:f3:49:e9:58:12:e6:09:07:d8:f8:fe:
                    ba:cd:7b:1d:40:ee:80:f4:f4:35:32:89:99:7c:24:
                    85:e6:34:0d:ad:bc:87:77:91:14:b2:db:a0:f2:ef:
                    17:3a:a7:ab:e2:d7:af:fe:18:c3:a1:27:9b:d7:dd:
                    58:39:c5:85:7a:b7:fb:8c:27:2a:a0:39:61:cb:e7:
                    9c:b5:39:13:da:4d:63:80:32:71:25:b8:7d:54:56:
                    e3:3b:19:23:4d:85:7c:3d:a4:e8:5e:92:6e:82:21:
                    ea:ce:6e:6c:89:5f:27:8f:a3:0f:81:fb:7a:a1:aa:
                    64:83:c3:60:7b:fc:ac:de:08:6a:e8:df:fa:a5:6e:
                    73:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:38:37:19:87:B2:67:4F:1A:95:AA:60:1B:A6:66:CD:CC:61:67:99
            X509v3 Authority Key Identifier:
                keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b2:41:26:b3:b6:d6:9f:36:4a:a4:60:7f:e6:dd:89:61:3a:
         f0:6b:3c:70:0e:3b:47:f7:ae:2b:77:a2:3a:ae:e3:d8:a1:e8:
         64:80:ee:6d:e4:71:ff:3b:5c:d7:49:3f:41:83:5b:c3:d0:12:
         fc:ef:c2:4b:15:ad:c0:0c:a4:f0:17:50:b7:e0:7a:c0:18:c2:
         2a:3e:9d:8f:cd:b0:90:bb:aa:89:75:17:29:23:ad:06:f2:73:
         6e:da:32:a4:c0:3c:8c:25:8a:7b:41:1c:8a:fd:ce:9a:ad:36:
         7b:e3:0d:92:92:7f:64:6c:d1:fd:96:b7:1a:3e:7f:71:b5:1b:
         41:8e:a5:cc:bf:e5:ba:dd:e8:15:19:34:9b:62:91:ec:76:6b:
         55:72:50:e1:ce:34:43:2d:39:0c:db:42:b3:66:29:72:1e:5e:
         8f:a1:1c:0c:39:75:de:ef:55:77:a2:e2:96:21:74:24:fc:55:
         9d:39:0e:f8:15:1c:d2:7b:ec:16:ee:bc:1b:ef:d2:28:57:ba:
         d2:30:4b:2f:d5:bc:ce:5d:5f:e9:9e:49:ed:9d:28:51:0e:44:
         d5:75:3a:ae:22:86:da:45:9a:e5:65:79:6a:5d:70:11:e7:65:
         a1:1a:e0:27:3e:b3:30:5a:4f:71:32:dd:9f:e3:df:02:41:b1:
         05:d8:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:09 2026 by rpki-client