Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          0JZFHAW+/RUKq5/oToCwHgfuxVVoQ1TQJBIGziaMptA=
Subject key identifier:   8E:95:15:FB:3C:21:0B:34:4B:28:1A:33:43:8A:7D:54:D5:64:0E:15
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019F97375B3C4E11B2B0EB735FF665694A44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          11E7
Signing time:             Sat 25 Jul 2026 03:00:15 +0000
Manifest this update:     Sat 25 Jul 2026 03:00:15 +0000
Manifest next update:     Sun 26 Jul 2026 03:00:15 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: 1wlp2lrtEQ7CXuWOrON+nzmvn/D2bRtj7x79A7NTUpQ=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:37:5b:3c:4e:11:b2:b0:eb:73:5f:f6:65:69:4a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jul 25 03:00:15 2026 GMT
            Not After : Jul 26 03:00:15 2026 GMT
        Subject: CN=8e9515fb3c210b344b281a33438a7d54d5640e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:18:10:7f:7f:b5:81:80:88:a2:6d:bc:a5:
                    d7:6d:92:ed:50:31:fb:ef:77:b4:b5:ef:89:3c:53:
                    2e:4a:34:3e:7f:77:6d:fa:a8:32:c3:b1:99:bc:2c:
                    77:85:b6:df:0b:da:bf:8b:6a:60:7a:ee:7f:d4:4a:
                    48:4f:a0:aa:ef:08:73:a1:74:f3:cf:e8:34:84:66:
                    5d:8f:27:32:56:58:67:0b:b0:de:05:55:0f:6e:c1:
                    c3:71:8f:b6:61:1e:ca:dd:bc:35:ed:4d:6c:80:48:
                    7b:03:5f:43:76:40:a0:2e:48:51:d3:2f:5a:56:85:
                    d9:ac:eb:7a:35:99:80:b7:0a:1c:83:05:e9:9d:ab:
                    af:78:22:22:4d:80:78:19:21:fe:e1:23:bc:6b:9f:
                    2a:19:a9:7c:9b:b6:59:8d:c5:62:02:f3:6d:c6:99:
                    b7:c8:e4:cc:5e:78:96:2a:e4:6a:cd:90:de:18:58:
                    be:33:45:6a:c7:4c:fe:53:5f:15:2e:3b:0c:7c:7c:
                    bb:9e:52:c7:88:b9:6d:3d:c3:30:e8:72:9e:f4:a1:
                    80:5f:65:63:df:f3:5a:cb:6f:6f:70:09:59:b0:ba:
                    da:4e:dd:ee:86:cb:fc:0b:1f:e3:95:c5:4c:b6:23:
                    20:43:63:c1:1f:23:86:a5:38:9c:b0:03:c0:4c:af:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:95:15:FB:3C:21:0B:34:4B:28:1A:33:43:8A:7D:54:D5:64:0E:15
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:72:a7:98:36:bd:3a:e0:b6:51:50:7e:c6:0e:cc:21:c1:4c:
         90:3e:80:a9:05:7c:80:85:b9:1b:db:c4:ed:9e:b3:03:70:af:
         0f:1b:06:c8:43:22:f9:d7:81:f1:c1:27:cd:60:5b:07:53:77:
         8d:1a:7f:9b:d8:5e:b9:05:65:c9:a5:c3:95:33:4c:44:11:58:
         48:7d:1d:17:16:3d:ef:bc:a1:f6:21:13:2e:70:55:4e:fd:36:
         2b:25:ae:92:49:05:8b:7d:4a:a3:68:16:e4:7d:59:f9:6f:9d:
         7d:d8:ab:cf:3f:64:f2:7e:99:f1:98:2a:64:ef:d2:36:b1:04:
         24:3e:39:a2:fd:7f:cf:8f:96:0a:07:10:e6:3b:7b:33:5a:df:
         73:86:04:6d:12:96:74:50:88:87:9e:1f:92:f9:06:41:d6:d9:
         df:03:f3:da:db:21:e8:20:ac:80:f2:f4:e3:0b:98:c7:4b:12:
         63:05:1d:62:71:f5:d1:81:d8:d2:36:07:e2:c9:59:0e:88:b8:
         61:da:b4:f2:bd:08:b6:5e:82:e9:0c:c3:47:38:91:2c:7c:4e:
         c8:37:75:a7:a9:8b:22:26:77:53:94:27:30:b2:3d:83:13:67:
         5b:5c:9b:e3:3c:82:9e:24:ae:d4:99:d2:31:1c:2f:73:ea:1e:
         ba:73:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 05:13:11 2026 by rpki-client