Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
File:                     ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json)
Hash identifier:          Jiayp1+/QQpHYNrvZ7O6mBIFwwLG0N6nkhNPhMksjKQ=
Subject key identifier:   98:18:BB:F8:32:DE:D6:C7:E1:8C:18:0C:36:F1:F9:4A:66:46:AF:7F
Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17
Certificate issuer:       /CN=1027a8a61299b80a3e71d1a981427ec00b849d17
Certificate serial:       019F90C780C965EF4BBCB7E4A28B67330AEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
Manifest number:          091C
Signing time:             Thu 23 Jul 2026 21:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:21 +0000
Files and hashes:         1: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: tOuniFPc0ZlQyy7AD2WIJu31ib18kfMw0SsLZyQtXB8=)
                          2: GopW9XoJL6Ypu9PWinwmSTBcV5k.roa (hash: 7tI9fa5JE+5E+2k/J0Jt01aGm4si+69+ihdJ7wHZgjw=)
                          3: MM7pgiUkNhrRZtXrgMvTdH1mZbM.roa (hash: w/6ncUVh+7s29fgIvXgidq6wk2lNJOLgEH8f2l92rB4=)
                          4: NOejcwmPh5BJOHrok8-5R_pK-VA.roa (hash: U6upQkLae5Oi+4csWaNnpSyW7MitDHPojVhGt/0UX1M=)
                          5: _BcnufwZCW7iXb3pQbGLXXwf_xo.roa (hash: GSjQZe7rnL/Y2iRKRElHvN0TAcPhSGgI4zSSehXhXpI=)
                          6: fthEES7ULueds3FNvYJDhxIkkoY.roa (hash: an/1lrGy32ibi55SrdxYeDyCH0x0JUXmE2+DfK+SDWY=)
                          7: ia3F-LgyjS2O_SDcYVaJOR4gNYk.roa (hash: KOIBwS2FoeIdHxBdEglt6oXyrVyFY6fE/gEORDqk87o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:80:c9:65:ef:4b:bc:b7:e4:a2:8b:67:33:0a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17
        Validity
            Not Before: Jul 23 21:00:21 2026 GMT
            Not After : Jul 24 21:00:21 2026 GMT
        Subject: CN=9818bbf832ded6c7e18c180c36f1f94a6646af7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3f:e7:54:65:e4:64:63:1b:ef:26:57:bb:f5:
                    4c:92:ef:29:da:0e:71:a2:50:d2:8b:c0:d6:a8:67:
                    4d:f7:98:f8:d4:94:f5:0c:a1:6a:9d:53:42:75:61:
                    fa:b5:7e:49:39:b4:69:88:30:e1:22:24:8b:d4:06:
                    a8:84:2c:a2:8d:93:56:b5:6c:16:87:e3:84:75:f2:
                    78:0b:14:f6:87:73:71:99:02:6a:0a:98:08:0e:14:
                    a9:be:91:b3:25:55:a4:94:44:4f:80:c8:91:6d:db:
                    d1:07:78:be:ac:2d:22:5b:ef:12:10:6d:b6:c3:a4:
                    5e:cc:a8:1f:f0:9c:46:a9:75:5a:fd:14:b2:7c:37:
                    9e:df:09:de:4d:67:50:e8:d6:ae:43:f8:0c:fa:36:
                    2c:c3:85:65:bc:c3:6e:df:39:f3:2b:fc:b1:de:52:
                    3e:4a:35:45:45:7a:c2:ba:54:be:f0:c6:de:a6:e7:
                    68:fc:8c:86:a5:e8:92:f0:cf:eb:53:75:3f:4e:59:
                    e9:a7:61:30:4a:8f:54:70:33:bb:e6:82:05:1c:5c:
                    98:ef:41:1a:86:3a:8f:79:14:17:da:5c:b1:b3:e9:
                    ab:c0:90:d2:04:ee:e8:b9:cf:36:73:92:99:9a:4b:
                    72:2c:ad:00:d0:ac:3e:3a:2b:7a:1f:b6:1d:b7:e9:
                    8b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:18:BB:F8:32:DE:D6:C7:E1:8C:18:0C:36:F1:F9:4A:66:46:AF:7F
            X509v3 Authority Key Identifier:
                keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:28:39:98:ca:65:bd:0c:dd:4c:1a:c1:2a:8a:53:06:2d:91:
         c2:45:77:c4:09:0a:2b:a8:1f:70:c7:13:95:94:9f:00:a4:b5:
         7e:d9:9c:14:36:33:ed:67:f3:fc:6e:8c:ba:5e:51:e5:8e:0b:
         8a:38:13:b0:de:81:9a:ad:1e:8d:cf:9d:d9:98:58:95:8f:56:
         8d:f8:00:65:0b:17:e5:e3:99:78:83:e3:f4:1e:f0:58:fe:5c:
         46:25:19:23:42:e5:03:82:c5:54:93:76:01:19:ae:67:b3:3f:
         40:54:bf:33:35:3a:90:09:91:15:31:9e:0e:ec:7d:da:34:c0:
         b2:46:2a:43:b0:0a:e8:e2:da:85:6a:98:99:ab:77:23:a4:41:
         16:33:b2:3e:bd:5f:ed:42:0c:a4:34:2f:b8:ff:fa:e5:b3:7f:
         6c:ed:17:61:32:aa:e9:5c:17:16:bd:9c:eb:a1:27:11:dd:16:
         1d:fb:99:1e:06:75:8e:05:1c:33:d1:7d:aa:e1:e5:30:fa:35:
         97:65:f0:c5:1c:36:0c:b4:b2:4a:51:4f:a1:cc:8a:78:29:ce:
         28:4c:00:3b:51:52:e0:9f:8c:ed:4b:74:f3:7d:72:50:0b:ef:
         0e:24:21:15:ea:38:53:a8:32:21:99:d9:d0:9b:1d:55:77:2d:
         9b:6c:ac:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx4DJZe9LvLfkootnMwrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4
NDlkMTcwHhcNMjYwNzIzMjEwMDIxWhcNMjYwNzI0MjEwMDIxWjAzMTEwLwYDVQQD
Eyg5ODE4YmJmODMyZGVkNmM3ZTE4YzE4MGMzNmYxZjk0YTY2NDZhZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj/nVGXkZGMb7yZXu/VMku8p2g5x
olDSi8DWqGdN95j41JT1DKFqnVNCdWH6tX5JObRpiDDhIiSL1AaohCyijZNWtWwW
h+OEdfJ4CxT2h3NxmQJqCpgIDhSpvpGzJVWklERPgMiRbdvRB3i+rC0iW+8SEG22
w6RezKgf8JxGqXVa/RSyfDee3wneTWdQ6NauQ/gM+jYsw4VlvMNu3znzK/yx3lI+
SjVFRXrCulS+8Mbepudo/IyGpeiS8M/rU3U/Tlnpp2EwSo9UcDO75oIFHFyY70Ea
hjqPeRQX2lyxs+mrwJDSBO7ouc82c5KZmktyLK0A0Kw+Oit6H7Ydt+mLCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgYu/gy3tbH4YwYDDbx+UpmRq9/MB8GA1UdIwQY
MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt
OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm
LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECg5mMpl
vQzdTBrBKopTBi2RwkV3xAkKK6gfcMcTlZSfAKS1ftmcFDYz7Wfz/G6Mul5R5Y4L
ijgTsN6Bmq0ejc+d2ZhYlY9WjfgAZQsX5eOZeIPj9B7wWP5cRiUZI0LlA4LFVJN2
ARmuZ7M/QFS/MzU6kAmRFTGeDux92jTAskYqQ7AK6OLahWqYmat3I6RBFjOyPr1f
7UIMpDQvuP/65bN/bO0XYTKq6VwXFr2c66EnEd0WHfuZHgZ1jgUcM9F9quHlMPo1
l2XwxRw2DLSySlFPocyKeCnOKEwAO1FS4J+M7Ut0831yUAvvDiQhFeo4U6gyIZnZ
0JsdVXctm2yszg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:22 2026 by rpki-client