Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
File:                     ejUNAkrwH46vElcXyqA6r60YTh0.mft (raw, json)
Hash identifier:          7ESlx2o9h6AS4POuTkWZse6yx2phqGH1X41TIwPJc4Q=
Subject key identifier:   24:FE:19:6E:CD:85:62:31:85:0D:15:4C:59:01:44:3D:EA:4D:42:88
Authority key identifier: 7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D
Certificate issuer:       /CN=7a350d024af01f8eaf125717caa03aafad184e1d
Certificate serial:       019F946DD2CF1D060B5D1ACA9F2280AFA5B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 14:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:53 +0000
Files and hashes:         1: 1-r7_fUEpPJ7LUjRWlFNkAxAOLSs.roa (hash: QA7GMjXjaXuTwdxfPne5d0+pqwIBxuYEEIDse7vYIO0=)
                          2: ES59hOIvPLDzVlJ0I-0JDt9aHrQ.roa (hash: uICrLcYcQwJ8TrC2iTXXi0SFYCmHd+cO9NYWiYi1hEQ=)
                          3: LyXo3omYYFGu0x-1vxCVc0jOXXk.roa (hash: tP3+/CoTgyHttLpNnNbTKpXPtaBjJcLwdaSRY8FXziI=)
                          4: Ux0GK8vhew9-6Io06jn8phMnWko.roa (hash: nIk3ffbMCGpJ8s89KtcodgQ7duWnbnupf2+qt/z+NVY=)
                          5: XOGzJgiv8zAvESFhap-saZBvegs.roa (hash: eulsgNSz45FKPDyCpVhnxj2XCa1xVua9poOew9IQNuQ=)
                          6: ejUNAkrwH46vElcXyqA6r60YTh0.crl (hash: KXOFAtapQVtW26MveMUOCbGrTkfCn78m/ROo5SDdXwE=)
                          7: npu-xEBPXBXxkjcFkM42ClvBry0.roa (hash: oFDGroXu7G/kMj4/zbhdw+C0K6I1N4oL3NK6l6o4+Dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:d2:cf:1d:06:0b:5d:1a:ca:9f:22:80:af:a5:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a350d024af01f8eaf125717caa03aafad184e1d
        Validity
            Not Before: Jul 24 14:00:53 2026 GMT
            Not After : Jul 25 14:00:53 2026 GMT
        Subject: CN=24fe196ecd856231850d154c5901443dea4d4288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:a6:9f:fa:c2:a9:59:b0:8d:c7:68:a1:3b:
                    50:f3:82:ff:d1:79:65:67:83:05:23:55:f1:63:58:
                    e4:62:db:02:75:7d:84:73:72:30:19:75:55:24:98:
                    ad:b2:3d:60:64:45:9b:68:bb:14:30:03:0e:9c:43:
                    fe:4c:1c:0f:23:21:39:7e:74:f4:3e:06:aa:4f:91:
                    66:df:14:51:09:f5:3c:50:fd:cc:83:0b:1a:fb:98:
                    69:65:1c:4c:de:97:a2:4a:35:9e:0d:67:d7:52:4b:
                    11:ae:cc:d8:c5:5e:ca:0f:ed:eb:3f:c4:a7:71:ec:
                    7a:13:4d:f2:66:7b:e4:17:e0:a7:10:4c:4d:10:5d:
                    2a:f3:12:c9:bb:82:ec:f6:c6:5c:c4:7a:5c:93:52:
                    8e:ce:18:85:39:7b:79:c7:c8:7c:12:0e:51:6b:fa:
                    50:32:40:ef:6b:5f:89:83:c6:6d:7c:60:a9:c1:51:
                    12:e3:e6:d7:18:c1:4f:cf:8e:2d:ac:01:79:9c:ee:
                    f5:8a:cd:ac:69:bf:41:16:e5:19:0d:ee:3e:59:11:
                    d1:17:fc:7c:9b:6c:ac:b4:04:45:e3:fa:07:b0:2c:
                    29:b6:03:f7:0c:f1:d7:29:46:2a:ea:74:98:a6:90:
                    a8:8d:24:a3:9d:63:cb:6f:64:4f:c8:c5:ec:63:01:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FE:19:6E:CD:85:62:31:85:0D:15:4C:59:01:44:3D:EA:4D:42:88
            X509v3 Authority Key Identifier:
                keyid:7A:35:0D:02:4A:F0:1F:8E:AF:12:57:17:CA:A0:3A:AF:AD:18:4E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUNAkrwH46vElcXyqA6r60YTh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/7966ae-9c88-43e9-b899-d003e56fe753/1/ejUNAkrwH46vElcXyqA6r60YTh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:3c:81:39:6f:19:dd:84:67:15:7c:24:6e:da:04:37:88:da:
         7f:c8:8c:5d:02:19:d2:8c:9d:2c:5b:a9:18:92:76:13:b5:d0:
         e8:56:f9:ca:fd:b6:63:04:b2:bb:de:52:9a:37:d3:72:17:4d:
         6b:9b:f3:0c:95:f9:a8:d5:a4:d2:0c:5d:1f:41:98:3a:a3:99:
         05:34:23:b2:66:a0:6d:62:20:1b:c6:ea:b7:2b:ae:b7:75:79:
         42:b6:6e:35:92:88:35:47:83:f4:31:0c:02:d5:ed:9b:57:33:
         25:cc:5a:1c:a5:b9:9d:f3:38:10:c0:5d:5b:30:10:be:a4:b4:
         b0:ea:de:16:20:94:06:0e:4e:87:42:9e:a8:49:9e:98:4b:a8:
         c3:e4:b6:82:8e:8e:1a:86:0c:f2:e3:ba:5d:9e:c1:9f:59:12:
         e7:f1:1a:e4:6c:ee:bd:0f:35:2d:31:45:42:3e:84:aa:6f:35:
         5a:ed:5b:e5:06:45:23:2c:b0:8b:29:10:4c:d6:a3:c5:b0:d4:
         95:c1:f1:b6:44:1c:d9:6a:9b:ae:ba:dc:07:78:ed:07:72:8d:
         6e:8b:14:cf:c6:ab:a4:df:06:60:71:97:70:16:36:fc:2e:35:
         99:82:0a:92:63:76:1f:c5:c2:2c:5c:3c:86:dd:b3:8a:c2:4b:
         3b:c0:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:44:22 2026 by rpki-client