Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          iiGM6xaygUJcL51xRwlJ1IRtfnpu/y8yNvPPYv8chUg=
Subject key identifier:   9A:62:EC:28:85:1E:83:AA:59:40:B3:E4:72:2B:D7:58:D6:CD:B7:C6
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       019FA14DC0470F800186D0B3A9C0ED255CBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          1963
Signing time:             Mon 27 Jul 2026 02:00:54 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:54 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:54 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: DsBz8hxqgKXIyQT1rnxHRJly8k+cZ55cRZANwdT31sA=)
                          2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:c0:47:0f:80:01:86:d0:b3:a9:c0:ed:25:5c:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Jul 27 02:00:54 2026 GMT
            Not After : Jul 28 02:00:54 2026 GMT
        Subject: CN=9a62ec28851e83aa5940b3e4722bd758d6cdb7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9d:f8:0c:e9:20:1e:c6:3f:63:a6:d9:9a:68:
                    a2:d0:e4:29:7e:5d:dd:59:bd:fd:0a:4b:33:ac:35:
                    ca:c3:c9:50:ad:b2:5d:6d:d8:b9:71:19:5b:4e:a5:
                    94:cc:fa:fb:5f:f1:be:73:b9:0f:a0:eb:3c:16:00:
                    95:e1:a5:e0:6e:b9:bd:b5:3b:55:8c:5c:d8:f6:aa:
                    31:a9:b4:a5:5e:f5:d1:f3:ac:a9:e7:c0:ae:77:3f:
                    e2:eb:05:4e:b4:4a:c6:aa:85:60:b3:5b:c2:de:1c:
                    40:11:9d:24:c0:40:d4:df:61:aa:62:9d:5e:75:ba:
                    3e:bb:f1:9f:13:a6:17:60:40:2f:04:19:93:cd:6d:
                    db:c1:20:21:d6:29:f5:bc:ea:ca:e5:51:b7:af:28:
                    f0:85:74:42:fd:10:58:7e:89:36:c4:da:ef:ed:60:
                    b1:6d:90:33:0b:10:b5:f0:b8:15:f7:61:7f:fc:1f:
                    59:4c:fe:d2:bb:64:69:c1:d1:c2:6a:b4:f4:7f:99:
                    75:c9:b9:26:13:81:68:11:ec:c0:7a:ef:f8:db:4d:
                    5c:2f:0b:21:24:76:cd:9b:2a:81:d5:3c:a5:9e:c6:
                    7d:c8:41:8d:bd:2f:b6:99:0b:99:c8:e8:8c:bb:82:
                    72:9d:91:53:73:40:e1:05:ad:dd:d7:65:ab:4c:aa:
                    33:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:62:EC:28:85:1E:83:AA:59:40:B3:E4:72:2B:D7:58:D6:CD:B7:C6
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:12:af:79:c7:30:24:7a:0e:94:72:7c:86:7f:90:f5:22:
         ff:b0:a4:b2:28:ec:b3:cc:16:ed:01:7a:31:32:9e:fb:0f:dd:
         9a:4d:a6:71:6f:3d:bc:88:a9:14:fe:9f:f5:b3:12:2b:5a:98:
         06:95:1d:bc:71:09:a2:6e:7e:ed:2a:2c:ca:39:17:63:3f:bf:
         0c:59:03:52:63:4f:89:18:a8:c3:db:71:a9:ff:82:f7:fa:52:
         1e:f2:f1:d7:3e:46:bc:6f:bb:75:0e:16:20:10:ad:dd:75:dd:
         ac:1a:f3:b0:1d:46:15:19:cc:93:f4:4c:09:aa:5e:65:ef:6e:
         e3:a8:1d:d3:e2:03:31:99:46:62:b6:fd:23:fb:39:6d:fa:67:
         7f:0b:c9:87:0b:fb:06:32:21:29:3f:50:63:96:c9:5a:b1:3f:
         b6:83:b2:08:06:fe:9f:26:18:78:1c:aa:60:57:89:d0:17:27:
         a0:1a:e1:af:68:8b:2c:28:0a:a3:b2:d9:e1:0b:89:18:fc:be:
         57:fc:7a:c4:97:ff:65:16:f0:69:34:9f:32:27:00:44:b7:c5:
         06:30:2f:01:1a:95:b0:b1:a4:04:ee:c9:17:37:3a:aa:bc:3c:
         4e:d4:51:59:57:e9:1c:88:f3:f6:5b:82:7f:f7:88:8d:db:29:
         84:16:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:21 2026 by rpki-client