Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          rYMTut8oV4NSnZ0xaaj994fWqr/X6ljutKuW0xdm7h0=
Subject key identifier:   E5:86:E9:9B:7F:DB:8C:11:4A:E9:10:0D:58:66:DA:7A:ED:51:37:40
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       019F90914612BDA6657084C95622AA3327E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0EA5
Signing time:             Thu 23 Jul 2026 20:01:07 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:07 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:07 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: rPJoGKAQOBBDAC41w7xYtdfgpTN8j1sB7RYE16ZfGAU=)
                          2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:46:12:bd:a6:65:70:84:c9:56:22:aa:33:27:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Jul 23 20:01:07 2026 GMT
            Not After : Jul 24 20:01:07 2026 GMT
        Subject: CN=e586e99b7fdb8c114ae9100d5866da7aed513740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:22:7a:2d:e1:48:8d:f2:b1:23:bb:32:8f:f8:
                    df:f7:67:2d:3c:3d:da:20:ae:c9:38:06:c9:fe:22:
                    8f:22:46:bb:4e:2e:3f:5c:b2:ce:5e:e4:60:2f:88:
                    b4:8f:60:06:b9:e1:5b:24:53:4f:da:d6:7c:3f:77:
                    89:e3:be:b3:c5:a5:69:94:f0:96:e8:91:fc:fe:ab:
                    4c:79:29:60:ee:6c:93:a3:5c:21:d6:0b:74:60:30:
                    b6:cf:15:ac:f3:3f:96:4c:5a:b4:bc:c6:da:92:6f:
                    ac:88:14:cd:00:62:76:1c:ad:a5:73:a0:8f:26:c1:
                    e3:7e:de:b4:fd:56:0c:62:c1:8a:74:9f:b4:c0:2b:
                    96:af:70:e3:bd:a9:18:2d:09:99:3f:4a:d0:d5:cc:
                    8d:7e:0c:61:2d:5c:7e:cb:68:21:67:8e:c4:c1:94:
                    9e:04:5c:be:e5:5b:fa:bc:14:bb:13:07:6d:c1:70:
                    d1:b1:ed:12:e5:f2:5a:91:f8:32:4b:7b:46:02:4b:
                    fb:5a:08:e2:24:e6:47:3f:ae:58:f2:6a:d0:1c:f4:
                    1d:d5:b8:66:04:80:a1:01:91:3a:30:94:ff:4e:5d:
                    ab:15:80:32:03:d6:63:3a:f9:76:b8:2b:1a:91:e1:
                    aa:ec:a7:79:4c:a7:d3:26:90:4f:30:ef:47:3b:cd:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:86:E9:9B:7F:DB:8C:11:4A:E9:10:0D:58:66:DA:7A:ED:51:37:40
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:93:fb:31:a1:99:d1:93:2c:7e:6e:fe:74:11:cb:33:e0:74:
         73:8e:07:b1:f5:78:50:7b:8a:32:3d:72:69:6d:1d:b8:3d:29:
         a5:75:85:3b:71:9e:32:ef:8d:f3:98:74:00:53:ff:2e:13:b5:
         52:ef:0e:75:2a:7c:fb:8a:19:8f:dd:2e:f7:a1:22:61:41:29:
         61:25:bc:ab:8b:20:0f:d1:c0:5a:87:d4:81:f8:04:df:e9:35:
         d7:47:af:7e:fb:ee:a1:03:d8:2b:47:28:5f:fe:f0:37:2f:14:
         e1:61:b5:c5:2b:2e:97:b1:d1:80:39:35:db:06:49:b2:30:07:
         00:6c:c2:9b:0a:98:1b:1b:36:36:e7:cc:b9:6b:cf:07:9f:9e:
         bb:f5:97:60:23:93:c2:b1:31:47:34:16:74:d9:ff:8d:63:3a:
         d8:05:24:18:45:13:62:75:c7:cf:72:9b:5d:97:88:ec:c5:41:
         b5:8e:e4:93:de:6a:f9:8a:fb:05:98:75:43:a0:c5:8e:7d:a3:
         f2:b9:56:61:1b:d5:1d:c4:15:a3:35:f9:a2:40:ee:37:20:c1:
         36:88:22:64:2b:c1:09:73:f5:e0:a2:59:af:62:3d:9b:ae:d0:
         a8:c7:13:62:9e:26:43:1c:5c:80:80:5d:52:8d:af:9f:1d:1a:
         b9:26:52:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:57:47 2026 by rpki-client