Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          fOIdS2b3rRibU4/zAm/Jlvl/H4DQkucN10vRNtd9x7w=
Subject key identifier:   83:55:D5:D0:1D:AA:F0:A7:A2:4D:7B:33:50:CC:A0:E1:02:6D:D2:2D
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019F84C39DAC3DD865711B863DAA784C625F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 13:00:40 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:40 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:40 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: 4Bz8Wzmru2FmqTzfnDUQIsi7FRM0YCpeCg9pzqws9GY=)
                          2: qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (hash: tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:9d:ac:3d:d8:65:71:1b:86:3d:aa:78:4c:62:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Jul 21 13:00:40 2026 GMT
            Not After : Jul 22 13:00:40 2026 GMT
        Subject: CN=8355d5d01daaf0a7a24d7b3350cca0e1026dd22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fb:69:4b:f5:ec:55:cb:4b:d4:0a:12:4f:f3:
                    38:c2:fc:6b:09:4e:2d:67:24:b7:0f:c4:8e:77:e5:
                    c3:6a:bb:c5:7e:62:cf:a0:6e:77:81:eb:0b:27:06:
                    82:1b:d6:43:cc:9b:bf:80:b2:7a:9d:ad:bd:12:f7:
                    f4:05:32:cd:ff:cc:00:db:37:f0:d5:f4:09:92:59:
                    b8:cd:e1:f3:f5:63:ea:20:81:c1:a6:31:1e:47:18:
                    fa:2f:a9:5d:db:a8:6c:20:74:b1:30:16:ad:87:94:
                    d2:ad:25:78:f9:96:8b:7c:db:7b:9a:7f:5f:a1:b2:
                    0b:4b:04:3c:17:d9:e9:1b:74:1d:e9:f2:be:d6:e5:
                    88:bb:ab:d2:a0:1b:be:ee:9d:58:57:35:fc:ba:50:
                    73:67:d9:f4:11:cc:b7:41:d6:fb:2d:f4:1a:d4:7c:
                    19:99:4c:19:01:5e:ef:77:be:2d:cf:3f:48:2b:fb:
                    f7:61:64:a8:94:d5:e5:13:bb:de:3f:05:c9:bc:e2:
                    b9:46:9c:45:2c:1b:64:e3:3b:d8:c9:44:fc:48:4a:
                    a5:3d:aa:35:26:f2:f6:dd:e8:a9:20:29:60:dc:09:
                    cc:22:0e:2e:0b:12:3a:81:8f:d7:1c:92:59:34:7f:
                    d5:ea:6c:86:68:43:b3:ee:bf:7c:58:df:26:ac:7c:
                    67:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:55:D5:D0:1D:AA:F0:A7:A2:4D:7B:33:50:CC:A0:E1:02:6D:D2:2D
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:a5:dc:1e:0f:9a:67:56:69:aa:a7:2b:36:05:f8:50:cc:
         ee:f6:e4:08:1e:bb:b1:f9:77:96:39:78:a6:dd:a7:4c:b3:10:
         f7:c9:34:21:71:3f:36:5c:dc:e2:70:53:a8:82:8f:b3:ef:56:
         01:e1:86:16:9f:84:97:aa:7b:92:ab:ab:4d:2e:fc:89:5d:28:
         de:a4:01:f9:fa:24:47:cf:03:e6:a6:82:af:2c:34:0d:72:8d:
         ce:90:3c:8f:dc:44:6f:82:6b:1b:bb:f3:a4:b0:ee:d4:5d:d0:
         de:65:31:99:ed:9d:bb:f1:03:77:78:11:bb:19:7f:e7:16:85:
         67:ca:03:30:c8:18:f8:fe:d9:b3:1d:31:73:2b:f3:0e:59:54:
         39:24:b8:ff:93:eb:ef:72:b3:71:f5:86:78:63:dc:80:65:6c:
         4c:cf:f7:63:52:69:4f:3d:d3:3f:fa:e0:d5:36:17:2f:af:85:
         25:5d:4e:53:cc:b4:7f:68:24:e0:ec:a2:f1:93:a2:cf:2a:24:
         33:ff:06:5b:68:ed:a8:a8:ba:be:20:85:ba:6b:31:7e:72:0a:
         2f:26:04:ef:b0:9d:89:50:20:d4:fe:7e:15:3b:6c:55:1d:cd:
         94:bd:ff:6d:ee:47:1f:28:97:ad:91:8a:be:b0:71:ae:88:b0:
         26:16:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:29 2026 by rpki-client