Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          fBZmlvHe6IuHlAczuxmfZRDdefSmJPM2iU+xJViV/bc=
Subject key identifier:   55:0B:C0:37:52:F6:90:15:48:D5:FE:B9:DE:29:87:6D:96:A0:EC:04
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019FA33C42FA4FFACBBB670AF8FB67F703C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 11:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:03 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: hmnO++SvXtVktwYDX8dDQ2PoQchxEjaWcfcTVrorzXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:42:fa:4f:fa:cb:bb:67:0a:f8:fb:67:f7:03:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jul 27 11:01:03 2026 GMT
            Not After : Jul 28 11:01:03 2026 GMT
        Subject: CN=550bc03752f6901548d5feb9de29876d96a0ec04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:76:04:06:f5:56:ba:af:3b:f3:bc:a6:48:a9:
                    1f:a9:2c:0a:78:ab:38:ae:56:9b:05:05:1d:bf:ab:
                    c8:d6:fe:43:20:04:8d:cf:49:6e:74:92:a2:d1:4c:
                    10:ca:a3:b5:a0:c4:28:a3:a6:49:a4:7b:8c:a1:4f:
                    aa:8c:43:10:8c:4b:f6:66:14:cb:aa:3b:fa:8b:17:
                    97:d3:57:38:02:2e:b2:91:f4:f3:5c:9c:fa:b2:2e:
                    9f:b2:6a:a2:37:92:e6:8e:f7:e0:ca:21:2d:71:d9:
                    ba:d9:f7:ab:09:1b:ef:89:ae:0e:b1:f4:20:8f:02:
                    29:00:cf:85:a8:c5:bb:28:90:dd:7b:73:d9:b8:0f:
                    89:01:59:90:a9:f5:07:9c:75:78:f8:53:1d:21:b3:
                    eb:55:ec:ef:db:05:c8:03:06:d2:2c:d0:4d:35:24:
                    84:9b:01:d0:f1:96:be:d9:20:a4:a0:99:24:d9:26:
                    6d:9d:dd:ef:ae:ab:e5:bf:cd:c2:d9:fe:74:70:d5:
                    90:17:da:5b:70:a8:9c:02:af:b4:80:59:b8:b2:40:
                    2b:4f:bb:1b:4f:4c:a1:06:76:4f:5f:a1:72:2e:2e:
                    f2:4a:5e:ed:c6:2f:23:c5:00:44:57:ab:a8:ff:f2:
                    89:b5:aa:34:b5:b3:e0:07:99:6a:5e:9c:8d:83:74:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0B:C0:37:52:F6:90:15:48:D5:FE:B9:DE:29:87:6D:96:A0:EC:04
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:8a:8a:ec:8f:85:50:aa:83:d3:f8:e4:19:f3:77:1b:f3:
         eb:ec:9c:38:36:bd:81:e2:db:f9:1d:69:3d:58:8a:b0:23:18:
         a3:93:0c:4e:2f:44:4b:c2:0b:55:d0:0f:b3:bd:23:6b:cf:d9:
         3d:87:ee:69:bc:a0:28:1f:77:33:77:a1:e7:1a:e4:c1:af:55:
         a0:d0:b0:38:17:87:b0:29:ab:73:94:b4:6a:29:a7:75:02:52:
         47:5a:ff:64:25:dd:48:1b:99:af:e5:30:4f:f9:af:15:60:d4:
         6c:cd:9c:2a:22:f7:6a:91:1f:98:aa:cd:f5:de:c8:e2:99:4c:
         40:63:ed:f5:36:2b:13:db:6e:7d:f4:cf:96:2a:a7:64:4a:e7:
         e4:75:ee:b6:27:25:23:c8:0a:8e:9a:db:cb:55:c9:0d:40:d3:
         11:5e:a1:d6:b3:88:64:97:3d:f8:21:3a:95:db:66:a0:ba:43:
         b6:24:e7:8e:a6:d4:bf:0c:f9:fb:41:d3:1b:bf:ee:92:ac:4b:
         09:e0:68:27:58:b7:7e:ca:d8:7b:8f:12:6e:07:79:37:24:57:
         46:5c:06:98:6e:a0:9c:c0:d9:97:ea:4e:ca:5a:e7:71:ed:75:
         6c:fb:bb:d5:4c:a8:d6:38:7a:e3:4d:6c:34:75:3d:5b:4a:d8:
         7e:34:56:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:04:27 2026 by rpki-client