Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
File:                     EjIwPRY44HNSQEkaqp5CsYh62so.mft (raw, json)
Hash identifier:          CLiRZa7zKYVqRzIqaSjoQCOUN/xvoSqnUl4Lzsve3pg=
Subject key identifier:   4E:18:F2:38:27:4F:D7:D0:63:FB:33:87:40:36:1E:B7:90:DA:28:CE
Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA
Certificate issuer:       /CN=1232303d1638e0735240491aaa9e42b1887adaca
Certificate serial:       019F93FFFDC05757B1F4E20FC7F3E91678B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
Manifest number:          19E8
Signing time:             Fri 24 Jul 2026 12:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:55 +0000
Files and hashes:         1: 1N0Tquv34EniQ5Ndo3qkKU2TXrU.roa (hash: GSji7vKxqKL5BrP7KjCJdEr6rUnL66eW/IvNJy35ZDs=)
                          2: EjIwPRY44HNSQEkaqp5CsYh62so.crl (hash: hNamIfHFyZD432kPnSStzrdK/L9eI3O/qmGV/8+k7PA=)
                          3: V2Mz7lpEZqdnJnZt9Swv1vCrDfY.roa (hash: SpJKlMHIP1jKpgIyEhNcs3LX1OPy0pKLU5ZQbriXEB4=)
                          4: X1Ccfwu0f8o1S3I__oAjVih9pOs.roa (hash: BOF7vZ8IxC3rdADiLdeYXZTXBlmG6yDKryNzv+AIWEU=)
                          5: gWB4iaMM96HatxSBLmxCY8CzZxE.roa (hash: XwPX3f6mTdmL46PvAX+CuulPFlnUy0yUOKFFavRIR4I=)
                          6: vUEAM-YPMOE_bnpwdo0XUZOektc.roa (hash: zwIeH3cOS34rB1Ez6T+f1Zfu0JaPz2Ntp3EY+zq8h/o=)
                          7: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (hash: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:fd:c0:57:57:b1:f4:e2:0f:c7:f3:e9:16:78:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca
        Validity
            Not Before: Jul 24 12:00:55 2026 GMT
            Not After : Jul 25 12:00:55 2026 GMT
        Subject: CN=4e18f238274fd7d063fb338740361eb790da28ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:12:43:e1:ce:7b:b6:40:e5:cd:64:32:83:
                    f2:b4:bf:d6:7c:47:43:01:90:bc:72:da:a1:63:f2:
                    18:6e:59:04:ad:0b:ee:4f:2f:75:c8:64:00:7c:d3:
                    99:b7:e1:12:52:04:dd:b3:a1:16:d0:76:bc:b8:74:
                    fd:88:9b:c7:14:95:57:5c:0e:ee:88:ce:cd:b9:b3:
                    33:7f:fa:d4:f4:b1:54:c5:bb:7e:3f:13:37:6b:48:
                    68:dc:85:1c:0f:96:b5:5f:b3:72:4e:05:fc:30:ff:
                    ab:8a:31:6a:fd:a5:4f:9d:72:28:cf:57:15:40:9b:
                    de:2b:ec:24:c7:16:db:ce:d5:70:9b:b9:d0:50:bd:
                    76:18:93:b8:4d:ed:10:71:b2:1e:b6:41:67:ba:ba:
                    82:74:7f:2f:48:7f:ff:50:5d:7c:ee:58:34:9d:56:
                    57:94:9e:7b:09:7a:23:c7:86:f4:07:76:c6:12:ce:
                    b1:08:7e:cc:c0:c5:3b:d4:b0:59:07:07:3b:91:f5:
                    88:7b:68:03:e4:f3:6d:34:fb:31:5a:43:80:d5:e5:
                    d0:f5:c3:07:8b:18:6b:83:99:0f:15:b5:8c:a7:bf:
                    91:4e:67:7d:b4:cb:b5:9e:8b:4b:38:20:7b:02:9b:
                    e9:59:98:e0:04:3d:e3:94:84:cc:f4:ce:62:1c:72:
                    de:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:18:F2:38:27:4F:D7:D0:63:FB:33:87:40:36:1E:B7:90:DA:28:CE
            X509v3 Authority Key Identifier:
                keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:04:78:4c:f1:4a:ce:68:e3:ef:e5:d1:5f:27:59:60:8d:90:
         12:2c:d2:7c:81:f5:6a:37:d8:fe:ee:a9:6c:69:a5:95:3f:04:
         3f:65:ed:23:eb:a2:80:ce:67:57:c3:56:3f:7a:f5:8d:51:a3:
         2c:26:0e:9d:69:a0:e1:9c:79:af:4d:92:cd:41:55:07:a1:40:
         7f:81:67:35:97:9c:5d:f5:9f:a7:31:eb:f2:44:2e:68:a8:24:
         b8:a3:ed:e3:fb:45:03:71:2f:37:1a:01:16:18:c9:e8:3f:7a:
         c7:05:1b:dd:4a:95:cc:41:e9:59:45:97:21:f0:72:f1:6d:87:
         c2:de:32:b5:b2:e1:9a:27:d6:f7:13:fc:96:0a:43:86:0d:fc:
         e2:8f:d7:09:b0:6d:4e:89:f4:65:71:a9:72:13:6c:61:31:c9:
         2b:fa:a5:b1:b9:c3:79:c2:0f:f3:61:e3:e8:9e:75:b7:b3:b0:
         68:ff:df:b0:ec:8c:76:4e:c0:8f:d5:39:97:6c:ab:d9:f4:89:
         5c:ca:84:43:70:9c:4d:5d:4f:94:4c:a8:0e:d6:99:44:90:fd:
         b3:dc:83:89:3b:c7:a1:75:5f:31:d0:d7:e4:8a:8d:10:ca:f1:
         f6:48:96:32:5e:39:ab:3f:77:34:d4:1e:fa:10:b4:53:ef:a3:
         a2:b4:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:59:04 2026 by rpki-client