Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File:                     EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier:          +Z5DDNkxhk9OiLfoIN49mz2SUxMba0NMSt78mPrI0Hg=
Subject key identifier:   61:79:EA:9B:8C:3B:66:22:8B:34:D7:8C:E4:1A:FF:AC:56:82:3C:AB
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer:       /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial:       019F92485E8EF2D43DD671A2B00BB06EE349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number:          0AC8
Signing time:             Fri 24 Jul 2026 04:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:44 +0000
Files and hashes:         1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: L+aFpTirOJRmiR1iGrfbD30eNec6E6CkDw2sLYh4x3g=)
                          2: F9AVi6sObrhN5KteiyDZhiQ6K7Y.roa (hash: z9q0kxM24fAYeNyq/pmadX1fT5Z0bG0j1bIUme2VW1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:5e:8e:f2:d4:3d:d6:71:a2:b0:0b:b0:6e:e3:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
        Validity
            Not Before: Jul 24 04:00:44 2026 GMT
            Not After : Jul 25 04:00:44 2026 GMT
        Subject: CN=6179ea9b8c3b66228b34d78ce41affac56823cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:12:03:7d:0f:4b:e1:c4:80:b3:5b:83:51:8a:
                    c4:e5:31:38:20:20:f6:99:a6:ff:e6:35:7f:72:52:
                    3a:4a:d6:a7:30:9c:eb:8b:7e:c0:52:1f:31:06:c3:
                    0e:0e:32:98:f0:78:00:b3:82:97:33:50:27:b4:df:
                    d6:ae:5c:5a:71:93:c8:d2:b2:ae:8a:53:e6:e6:71:
                    17:85:09:a0:9e:4b:f4:77:73:ee:c3:b1:8d:eb:f9:
                    76:13:e2:a8:4f:78:a8:b5:70:ca:4d:e4:bd:47:9c:
                    88:73:29:56:8b:fe:58:01:ca:93:47:a1:bb:fb:23:
                    b2:82:04:95:79:f6:8d:26:dd:ea:b5:b1:3f:61:05:
                    97:b0:fd:00:d6:0d:5b:79:d3:a8:54:2e:33:cb:87:
                    b9:be:09:95:a6:fe:f7:72:7c:0c:4c:a1:a8:42:72:
                    c0:ba:36:2e:88:91:2e:9b:ef:36:65:70:96:93:7f:
                    f4:0c:e0:b0:2f:1b:14:7e:68:ad:9d:16:76:5d:bf:
                    0a:ae:f9:95:33:66:0c:1e:94:0b:80:07:fc:40:2a:
                    6f:a3:72:0e:d2:df:ca:1f:22:16:8f:9c:f5:0a:a7:
                    07:98:d3:b8:13:05:b8:75:f7:a7:15:13:aa:ad:da:
                    5d:59:6e:81:95:0e:fa:ba:9b:6f:8e:53:c0:46:8d:
                    6b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:79:EA:9B:8C:3B:66:22:8B:34:D7:8C:E4:1A:FF:AC:56:82:3C:AB
            X509v3 Authority Key Identifier:
                keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:7a:c7:46:e3:28:b5:5e:9d:c5:9e:e7:07:ee:a6:63:ee:5c:
         91:51:49:21:bc:7e:68:ea:96:32:f1:f5:dd:23:ed:1a:61:a4:
         70:f1:2b:0c:b2:1e:28:3b:be:17:52:f9:f1:15:86:6b:5f:cb:
         e7:60:90:b3:9e:58:b5:4e:9c:2b:0f:31:1a:b4:c8:09:f4:a3:
         f1:5f:6a:6c:34:6b:76:be:67:97:11:d2:59:ed:1b:be:12:dc:
         50:64:2d:51:5a:bc:cd:96:f9:e6:57:18:4e:ea:13:61:c1:a4:
         e6:8a:6e:7e:60:9e:da:1a:4d:4c:f3:40:9a:71:03:17:fe:76:
         38:8c:27:1b:5a:3e:aa:78:33:23:94:50:5b:a5:54:ca:b6:2f:
         2d:a8:40:24:aa:b2:5d:eb:f5:ad:9b:ff:56:9e:aa:e4:40:7f:
         58:02:66:13:d8:32:ba:65:36:94:a8:81:60:cb:92:3f:41:f4:
         c6:51:0b:3a:c7:15:1e:3e:9a:25:3f:e3:84:9b:56:39:c5:70:
         19:b8:20:b6:b1:b0:72:fa:36:c1:0c:48:6a:d2:82:b5:21:9b:
         2d:ae:28:46:ae:d5:23:b8:0c:41:d7:2c:ac:4f:83:5a:52:d5:
         3e:c3:6b:4f:07:7e:aa:46:5e:80:ed:86:bd:89:84:2c:55:0e:
         6f:54:11:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:14 2026 by rpki-client