Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
File:                     ieXrHhIJiXh0XVQNypbP8N5HBNo.mft (raw, json)
Hash identifier:          jt87+SwLMFM3anMjBhXQKFgWHcSUADo+GHOVfauaYjA=
Subject key identifier:   37:51:0B:28:4C:18:20:43:01:BA:2A:BC:E8:D0:F9:D5:1F:51:52:30
Authority key identifier: 89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA
Certificate issuer:       /CN=89e5eb1e12098978745d540dca96cff0de4704da
Certificate serial:       019F9512637C46991E6E5718F37C05DD52FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
Manifest number:          0E3E
Signing time:             Fri 24 Jul 2026 17:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:38 +0000
Files and hashes:         1: ieXrHhIJiXh0XVQNypbP8N5HBNo.crl (hash: pSE7c056FrBYf8cCIhmcNO2e+iYom8hI8p+pzRoubGg=)
                          2: mdTsNfdOLmAj5Ib0bSI7RIV96g0.roa (hash: xAGPZrEW2fEUSd+UrPEI5hWaivVab8Rku87e+bOIo2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:63:7c:46:99:1e:6e:57:18:f3:7c:05:dd:52:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e5eb1e12098978745d540dca96cff0de4704da
        Validity
            Not Before: Jul 24 17:00:38 2026 GMT
            Not After : Jul 25 17:00:38 2026 GMT
        Subject: CN=37510b284c18204301ba2abce8d0f9d51f515230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:f0:50:81:e6:84:8e:33:90:0e:1a:5a:11:
                    81:34:fd:0a:e6:0c:5a:a3:90:fa:1e:9b:26:88:7c:
                    ee:1a:1f:14:c3:fe:a7:9d:18:d6:ae:3b:4a:27:80:
                    17:fd:96:11:59:14:83:4b:7e:1d:0d:21:34:c9:3a:
                    10:ac:a4:9f:f7:20:14:49:0b:70:61:e9:52:fc:25:
                    a5:a6:ce:c8:56:47:8a:a1:f8:98:5f:d5:ee:4c:88:
                    1f:13:df:b1:94:bc:ca:ed:88:a1:5c:a3:4b:7a:cc:
                    a0:3f:5e:93:41:4b:fa:67:88:6e:60:38:e4:55:5b:
                    cc:25:e8:e6:69:1a:d0:85:9e:0b:40:76:f2:65:32:
                    26:b2:66:71:8f:5f:97:df:5e:d9:27:f2:31:6a:8d:
                    17:c5:70:c7:f3:48:cf:27:38:14:23:30:1a:88:4a:
                    6f:4a:e3:f7:e0:50:aa:3f:84:39:39:f5:24:5b:71:
                    bb:5c:d9:cd:49:6a:60:9b:8c:a6:15:bf:79:15:f6:
                    ca:1f:a2:19:5a:76:d9:bf:c8:f6:46:55:33:3b:8f:
                    a3:04:e6:0f:a1:11:60:65:2b:5a:64:c9:8e:ca:52:
                    72:49:1f:02:ef:de:98:0f:30:d7:07:61:2f:37:2e:
                    94:eb:bc:29:2a:c7:89:6f:10:12:99:9d:4b:54:04:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:51:0B:28:4C:18:20:43:01:BA:2A:BC:E8:D0:F9:D5:1F:51:52:30
            X509v3 Authority Key Identifier:
                keyid:89:E5:EB:1E:12:09:89:78:74:5D:54:0D:CA:96:CF:F0:DE:47:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieXrHhIJiXh0XVQNypbP8N5HBNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e13b32-1ba9-4db9-a569-4aca09564fa8/1/ieXrHhIJiXh0XVQNypbP8N5HBNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:44:5f:17:d6:fa:87:98:a4:31:47:0d:9f:4e:3b:a8:ae:
         96:8a:6b:4b:66:f9:ee:7e:d1:1b:8a:0f:27:a7:a3:39:e4:3f:
         12:89:09:d5:bc:2d:43:88:ab:50:1f:58:cf:8a:6e:d4:2d:9b:
         4a:7d:43:1c:be:09:c2:63:4a:0a:98:cd:c6:a7:ec:4d:b6:57:
         ad:e8:e2:46:a3:fb:a1:9e:1d:49:4f:2e:42:3e:de:74:06:83:
         fc:8a:64:00:9e:f5:90:4c:48:50:ba:96:d5:60:8d:67:33:3e:
         2a:9a:2d:be:62:49:f1:56:d2:62:a0:ab:6c:3b:15:1e:4f:44:
         aa:6c:c1:1d:74:d1:9a:00:15:86:51:af:68:0d:f8:da:22:87:
         a2:9d:56:d9:4e:ef:5a:b8:22:0b:70:b2:36:09:46:3d:c8:32:
         05:13:3f:5d:16:f2:67:1d:9d:e9:6a:fa:b8:ba:fd:eb:10:89:
         2e:b5:9f:05:a9:dd:1f:e3:5e:b0:c2:21:70:cc:fd:00:27:f6:
         3b:d0:04:2f:fc:3d:9d:66:1c:ac:35:ef:4f:16:66:c6:86:64:
         13:30:3e:e6:d7:a0:aa:fa:43:42:d5:7a:c6:2b:ef:95:8a:4d:
         30:4d:74:99:3f:8f:3d:7d:d2:8b:d2:1e:8e:57:f3:fa:4d:ab:
         91:36:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:17:38 2026 by rpki-client