Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          mKfKwvIpT/k+WgWWvaML93KimV+ByIucWRinMcoyK6E=
Subject key identifier:   4B:C8:3F:5E:14:8B:04:54:32:A3:84:95:7A:A1:35:A1:39:2C:F3:0B
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       019F946DEF5E4517688516ED027CE7E34962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          1946
Signing time:             Fri 24 Jul 2026 14:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 14:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 14:01:00 +0000
Files and hashes:         1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: u5+9Kt4LkCyNPMyKciU7qUxpmVNhmHIF398VEqaKPRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:ef:5e:45:17:68:85:16:ed:02:7c:e7:e3:49:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Jul 24 14:01:00 2026 GMT
            Not After : Jul 25 14:01:00 2026 GMT
        Subject: CN=4bc83f5e148b045432a384957aa135a1392cf30b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:8e:af:7a:5d:09:40:f3:aa:7d:5b:a6:5d:
                    17:a1:37:07:15:e2:4d:30:e6:c6:62:4c:2d:72:c9:
                    48:4c:ed:1f:a5:b7:3c:fd:ad:5a:38:fe:9f:61:69:
                    e3:ab:05:ec:03:f2:89:75:f9:f9:ca:85:9d:48:4d:
                    fb:1f:22:73:f6:4e:c2:98:37:4a:10:c6:87:92:78:
                    d1:65:94:d2:f7:d5:e9:b4:d4:d1:4f:8e:31:17:93:
                    b4:86:a9:d3:78:08:bb:cf:db:35:f2:a6:11:1d:c6:
                    8b:40:92:19:46:c2:bd:96:dd:29:0e:b3:22:c8:be:
                    93:fa:99:9a:d4:ea:bf:f9:ff:d2:4f:1d:24:4c:03:
                    b5:5b:2a:a1:17:35:b7:a2:dc:ff:2c:64:25:3c:ce:
                    ce:d2:ae:8f:6a:99:a2:fa:7a:b8:01:9b:8b:11:69:
                    4a:5a:da:33:48:bd:79:fa:0b:88:55:79:16:0f:3e:
                    9f:af:95:2a:87:29:a5:ab:33:4d:ca:65:3e:88:18:
                    92:c7:25:31:e7:ab:29:df:8e:ab:03:9a:16:a4:35:
                    9d:a0:38:be:fe:22:77:0a:fc:61:a8:2b:da:f8:ac:
                    07:48:e1:06:10:d3:85:c9:4d:92:43:e2:e3:6d:f4:
                    7d:a1:cd:94:b4:82:5b:e8:c5:54:ee:f8:01:67:b3:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C8:3F:5E:14:8B:04:54:32:A3:84:95:7A:A1:35:A1:39:2C:F3:0B
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f9:df:ff:25:80:d7:ae:d0:45:b9:0e:8b:ef:d6:d9:0c:a4:
         31:4d:1c:c3:1a:d0:bf:a6:ae:1a:d8:5c:28:88:70:d8:7b:7d:
         b3:c2:65:a0:68:c3:a0:4b:f5:35:83:d8:00:2a:4a:62:b0:2a:
         e9:b2:21:69:4c:de:80:da:67:00:10:10:8c:d8:df:0c:5b:68:
         00:73:68:81:eb:b2:4d:0b:b6:4a:a6:0e:ef:00:c1:9b:d5:b7:
         5d:66:e5:b2:36:8c:8f:9b:fc:a5:22:01:be:4a:13:cb:0c:46:
         be:17:59:f2:4d:48:8b:6d:2c:6c:f2:75:53:c2:22:e0:e4:95:
         3c:c3:28:44:b8:8e:42:05:b3:cb:2b:56:b7:0c:59:55:79:1a:
         c9:50:c6:5a:73:4b:17:70:e7:2d:34:d3:d0:dd:c7:14:14:a7:
         f8:85:1d:39:c9:31:24:8a:f6:b7:46:2c:2d:4e:47:d6:a4:26:
         3f:d1:84:3e:0e:27:1c:c1:dd:63:50:7e:19:4f:bd:93:40:3d:
         ee:79:29:ba:8b:c1:19:d1:ca:a2:54:46:f3:7c:89:05:bf:2f:
         46:a2:46:de:d8:ca:40:69:55:b8:24:ba:ea:32:73:2d:a5:b1:
         36:33:e1:1c:e9:bb:73:d0:0a:96:c6:4b:56:72:5e:78:7c:f7:
         c3:81:78:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:31:03 2026 by rpki-client