Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
File:                     eJkRG_1wuRdE36Skn_kDs5HFwzI.mft (raw, json)
Hash identifier:          6VVdKRuNqxUbmgvAWyKDp63RXXxRPCrVNYHWegYx3Bw=
Subject key identifier:   92:5E:5C:68:B4:A0:E1:4E:AE:AD:80:4C:90:91:D5:D0:2A:16:AC:21
Authority key identifier: 78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32
Certificate issuer:       /CN=7899111bfd70b91744dfa4a49ff903b391c5c332
Certificate serial:       019F9FCD5323DBB94D2DA505F78E9DADC72E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
Manifest number:          015B
Signing time:             Sun 26 Jul 2026 19:01:01 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:01 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:01 +0000
Files and hashes:         1: SKxfM8vS1jvBfGto0Ag-UhpANXY.roa (hash: WZ4CjS7lVOS4kiwT/i3rrLplH1i4HTFPFyS0A+9Y2ZQ=)
                          2: eJkRG_1wuRdE36Skn_kDs5HFwzI.crl (hash: IBXm/3i/XQNboYWSsOPvzMcu4CumdVfXFj9cJHsRjnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:53:23:db:b9:4d:2d:a5:05:f7:8e:9d:ad:c7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7899111bfd70b91744dfa4a49ff903b391c5c332
        Validity
            Not Before: Jul 26 19:01:01 2026 GMT
            Not After : Jul 27 19:01:01 2026 GMT
        Subject: CN=925e5c68b4a0e14eaead804c9091d5d02a16ac21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:8e:87:12:8b:75:27:f0:0e:82:e2:19:de:
                    95:6b:82:74:af:dc:72:56:8c:66:8a:38:8f:2c:71:
                    52:ed:74:a8:66:b8:55:af:c8:65:c2:4b:2a:c9:90:
                    8d:38:e9:b2:6e:f2:15:a6:28:05:42:c9:b8:ea:5b:
                    be:7a:2e:b5:c3:ee:68:16:82:f1:85:83:44:de:48:
                    f0:a5:06:40:08:ad:15:88:ac:bf:2e:4e:de:36:bb:
                    c9:5e:bf:b6:f4:35:b0:5c:66:9f:08:3e:82:43:26:
                    6a:6e:ef:18:9b:ec:12:2b:1c:53:71:c5:d6:fd:02:
                    89:00:57:9a:fc:b6:ee:33:76:60:4a:7d:4c:e8:78:
                    fa:6d:da:48:d1:a7:7f:95:25:58:4e:7e:99:35:31:
                    28:c3:ed:bd:05:90:78:2e:55:b7:17:c3:b5:fc:38:
                    ec:23:d2:e7:18:ab:98:eb:5a:9d:67:e0:17:fc:a3:
                    dc:7c:51:fc:a1:e9:9b:54:ab:86:50:92:55:e0:31:
                    ee:4f:7e:21:f7:ab:d6:00:ba:35:2c:d7:98:4e:42:
                    2a:83:84:39:b0:22:a9:29:17:25:61:38:1d:45:e1:
                    35:ec:8e:49:6d:2a:52:4c:fb:f2:c8:6c:b4:d1:8e:
                    3e:7a:f3:01:7a:7f:13:ab:f9:d4:d5:a4:e3:b6:92:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5E:5C:68:B4:A0:E1:4E:AE:AD:80:4C:90:91:D5:D0:2A:16:AC:21
            X509v3 Authority Key Identifier:
                keyid:78:99:11:1B:FD:70:B9:17:44:DF:A4:A4:9F:F9:03:B3:91:C5:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJkRG_1wuRdE36Skn_kDs5HFwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0070f9-d64f-4796-8428-fa924407401f/1/eJkRG_1wuRdE36Skn_kDs5HFwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:47:a9:03:ec:ee:fa:8a:b2:f1:23:95:69:14:99:ba:31:d9:
         9c:2f:1b:07:45:80:dd:e0:bd:00:ea:f4:a8:4d:90:98:b5:62:
         dc:a9:22:29:70:83:fd:db:88:8b:99:ef:5e:c5:11:2a:5a:f1:
         d2:8c:8f:a3:d8:6f:fd:8f:40:5e:06:f2:24:0a:1a:3f:16:8d:
         98:4d:c2:26:c6:a3:23:d7:90:f9:ec:7e:4f:25:6e:a4:f3:ed:
         37:18:5e:91:bf:4b:c4:ca:d6:7e:be:a4:21:6c:4b:2e:57:9c:
         95:32:fd:df:1c:82:e2:61:3f:e4:8e:ef:6a:35:88:f1:1d:c5:
         22:52:85:6c:7e:b1:18:bc:53:95:fd:0d:01:44:eb:ec:71:34:
         3a:40:cc:2c:c9:cb:62:28:3a:04:dc:a0:83:4a:d5:37:89:71:
         1f:f7:9e:e2:a5:a9:b8:5b:14:83:61:09:12:6b:52:c5:f0:5a:
         6c:e6:b5:c6:41:c2:40:a0:77:c4:e7:1e:a5:d3:6b:09:0d:41:
         e8:9c:36:0f:94:c9:8d:8b:2d:0e:10:5b:ea:fa:0f:69:e6:fa:
         6c:41:f2:4b:3c:f1:28:c2:a7:b5:5b:9b:76:10:8d:7b:ba:ad:
         e3:40:1a:30:86:68:79:e3:e9:50:99:a8:d7:e7:49:4c:e0:54:
         a5:d1:0b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzVMj27lNLaUF946drccuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4OTkxMTFiZmQ3MGI5MTc0NGRmYTRhNDlmZjkwM2IzOTFj
NWMzMzIwHhcNMjYwNzI2MTkwMTAxWhcNMjYwNzI3MTkwMTAxWjAzMTEwLwYDVQQD
Eyg5MjVlNWM2OGI0YTBlMTRlYWVhZDgwNGM5MDkxZDVkMDJhMTZhYzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNiOhxKLdSfwDoLiGd6Va4J0r9xy
VoxmijiPLHFS7XSoZrhVr8hlwksqyZCNOOmybvIVpigFQsm46lu+ei61w+5oFoLx
hYNE3kjwpQZACK0ViKy/Lk7eNrvJXr+29DWwXGafCD6CQyZqbu8Ym+wSKxxTccXW
/QKJAFea/LbuM3ZgSn1M6Hj6bdpI0ad/lSVYTn6ZNTEow+29BZB4LlW3F8O1/Djs
I9LnGKuY61qdZ+AX/KPcfFH8oembVKuGUJJV4DHuT34h96vWALo1LNeYTkIqg4Q5
sCKpKRclYTgdReE17I5JbSpSTPvyyGy00Y4+evMBen8Tq/nU1aTjtpLdcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJeXGi0oOFOrq2ATJCR1dAqFqwhMB8GA1UdIwQY
MBaAFHiZERv9cLkXRN+kpJ/5A7ORxcMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0Mjgt
ZmE5MjQ0MDc0MDFmLzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMDcwZjktZDY0Zi00Nzk2LTg0MjgtZmE5MjQ0MDc0MDFm
LzEvZUprUkdfMXd1UmRFMzZTa25fa0RzNUhGd3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgkepA+zu
+oqy8SOVaRSZujHZnC8bB0WA3eC9AOr0qE2QmLVi3KkiKXCD/duIi5nvXsURKlrx
0oyPo9hv/Y9AXgbyJAoaPxaNmE3CJsajI9eQ+ex+TyVupPPtNxhekb9LxMrWfr6k
IWxLLleclTL93xyC4mE/5I7vajWI8R3FIlKFbH6xGLxTlf0NAUTr7HE0OkDMLMnL
Yig6BNygg0rVN4lxH/ee4qWpuFsUg2EJEmtSxfBabOa1xkHCQKB3xOcepdNrCQ1B
6Jw2D5TJjYstDhBb6voPaeb6bEHySzzxKMKntVubdhCNe7qt40AaMIZoeePpUJmo
1+dJTOBUpdEL8Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:16:39 2026 by rpki-client