Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File:                     ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier:          A486+kKRgSJRpe1lZuYVRX6j1cy/TEn5TnCVzv32sl4=
Subject key identifier:   8C:33:84:98:E7:1D:17:B9:2E:79:C8:4D:35:FA:7F:89:FE:EA:7A:AB
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer:       /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial:       019F48784F22EC6ED3A4E1DDB40555B07BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number:          19A1
Signing time:             Thu 09 Jul 2026 20:01:11 +0000
Manifest this update:     Thu 09 Jul 2026 20:01:11 +0000
Manifest next update:     Fri 10 Jul 2026 20:01:11 +0000
Files and hashes:         1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=)
                          2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: gAISaDPpzNd/lTy2JUbSn5/R2vzB9DY+vsGzmqRTqmQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:48:78:4f:22:ec:6e:d3:a4:e1:dd:b4:05:55:b0:7b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
        Validity
            Not Before: Jul  9 20:01:11 2026 GMT
            Not After : Jul 10 20:01:11 2026 GMT
        Subject: CN=8c338498e71d17b92e79c84d35fa7f89feea7aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0e:5d:e3:bf:11:57:74:ec:4c:d5:34:81:92:
                    de:02:1c:d0:bd:8e:12:52:77:c6:39:3c:40:cf:90:
                    93:d6:b8:70:b1:90:5a:e8:75:c2:f6:9a:24:d8:60:
                    46:61:5c:d6:e6:1f:c2:43:5c:6b:56:bd:fa:d5:2e:
                    8f:bc:55:f3:13:10:8c:30:44:a6:f1:e5:be:08:02:
                    1b:78:ea:ff:6b:8a:87:6d:8d:aa:11:ca:5d:73:44:
                    18:7e:86:83:f8:3c:40:0b:9a:24:0d:36:b2:1f:af:
                    ed:4d:ee:1f:e0:56:0c:6e:8d:4e:49:eb:ab:89:55:
                    71:23:bf:bc:71:ad:1c:45:c9:0f:91:ad:2e:4c:29:
                    cd:f1:0a:87:84:67:f8:f1:32:8d:d2:f4:29:97:7e:
                    6f:c5:24:f9:c0:df:e6:75:da:fa:f8:b0:eb:4c:85:
                    94:1f:3a:1a:f4:ec:cc:01:8e:a9:33:a4:02:74:8d:
                    c4:c2:c7:5b:1a:06:16:15:d1:82:49:1e:85:46:14:
                    0a:a4:d8:fb:af:7d:6e:6a:72:bb:ab:4c:5f:77:cc:
                    10:1b:2e:34:c8:78:16:48:d3:4f:d8:02:db:75:4b:
                    16:eb:74:68:54:82:3f:cf:1b:83:40:d1:2f:cb:e6:
                    62:0c:d4:af:d5:55:6f:39:6f:6d:7a:48:75:9f:3d:
                    3a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:33:84:98:E7:1D:17:B9:2E:79:C8:4D:35:FA:7F:89:FE:EA:7A:AB
            X509v3 Authority Key Identifier:
                keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:87:d1:30:72:ab:c3:54:c6:68:de:2b:88:2b:7e:f2:a6:87:
         8d:16:6f:00:68:db:70:6d:89:11:e5:44:05:70:21:73:a0:2f:
         80:9b:4c:74:ea:af:3a:86:fe:00:35:38:15:4d:16:4d:94:7f:
         8e:56:0a:5c:4d:99:e4:ea:83:f3:4c:c3:12:93:75:35:b7:74:
         cb:be:d6:8d:40:9c:7d:1b:e7:a6:2e:32:c4:ed:1d:16:72:e3:
         96:15:83:31:d9:5e:8f:43:ca:e9:81:1b:b8:8f:27:5d:36:da:
         e4:87:09:f1:87:52:9a:f6:de:c2:fd:2d:5e:9e:e3:8a:d8:83:
         a0:eb:f4:2d:51:4c:ee:09:e1:42:84:84:da:66:8b:8b:3a:08:
         fa:b1:6c:66:fb:9a:75:9b:44:8f:77:bd:eb:bb:9b:62:dd:8f:
         9a:6a:cf:fd:85:be:41:9f:c1:77:7e:cd:35:d0:0c:49:aa:6e:
         59:4d:a7:95:26:4d:ee:fa:cf:54:45:9d:2b:6e:ab:c2:a7:f1:
         1d:02:cd:37:ee:f1:4a:35:10:4d:a0:a2:b1:71:db:b9:f1:de:
         1b:05:36:7c:ef:6a:2f:88:1c:4b:64:9a:5c:f3:03:db:68:33:
         93:36:47:06:fb:22:f5:fd:e3:d8:f0:58:43:bb:1a:44:e7:7f:
         1e:b7:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 00:06:04 2026 by rpki-client