Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          f0Rjriy+WrwBxQ8FuIeVrzP/dW1ppbT1z/XlaYLD9Ek=
Subject key identifier:   4A:C6:29:0B:98:5C:9A:28:83:6A:B6:E2:D8:75:00:AF:88:1F:47:4F
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       019F9512187AAC54A438AD9DF08218BD73C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 17:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:18 +0000
Files and hashes:         1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
                          2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: Wt1IWMSv/crI56dX2pNCE3CIrwxyY4j23j2CKMWSObw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:18:7a:ac:54:a4:38:ad:9d:f0:82:18:bd:73:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Jul 24 17:00:18 2026 GMT
            Not After : Jul 25 17:00:18 2026 GMT
        Subject: CN=4ac6290b985c9a28836ab6e2d87500af881f474f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:53:c5:c1:c5:c3:ea:90:e5:a1:e7:ee:9b:
                    96:d5:5f:f9:2c:a2:73:f4:f9:59:c9:c6:78:15:9f:
                    a3:dc:0c:e2:e3:86:4f:12:4a:d6:2d:3e:65:c1:05:
                    76:41:db:26:24:04:aa:77:ac:11:f2:b0:f4:60:12:
                    72:0d:1e:53:b8:17:21:fd:af:77:08:eb:05:f5:ad:
                    81:bd:1d:91:f4:48:50:4a:2b:c1:0b:fd:11:45:ff:
                    8b:fe:40:1e:11:cf:f0:c3:26:57:e6:83:b1:d3:c2:
                    8f:0c:ae:3e:e1:65:20:a4:f5:e8:77:39:14:93:d3:
                    6a:43:3a:6c:89:8e:f7:83:58:a8:ae:57:87:11:56:
                    f6:34:6c:4c:e2:23:07:cd:4b:0b:50:54:47:21:51:
                    ce:3f:bf:e5:da:35:ef:08:b7:cd:38:4a:9c:fa:7a:
                    46:1f:4d:e0:3f:c9:c5:42:6b:32:4c:11:cb:cb:9c:
                    78:e3:2d:e4:81:95:1c:cd:a9:0a:b5:9a:e3:8f:62:
                    67:66:5e:1b:6a:78:be:ef:67:f2:7f:ed:18:88:3b:
                    28:08:fc:ca:38:b0:c7:78:88:ca:89:7e:ce:5e:db:
                    3a:c7:c7:82:db:5d:8d:58:0d:47:41:59:28:37:2f:
                    0a:b5:99:a5:62:b2:13:99:90:3e:d7:ab:0e:9b:7f:
                    6f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C6:29:0B:98:5C:9A:28:83:6A:B6:E2:D8:75:00:AF:88:1F:47:4F
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:34:91:9d:00:05:88:cb:a6:61:61:4b:2c:a1:97:61:26:
         58:09:36:b1:da:b8:e9:a1:89:1c:9a:09:14:f2:9a:51:9e:b6:
         68:63:e7:9c:c4:f5:1a:c0:82:99:7a:da:40:a8:f0:96:11:e8:
         d6:9b:54:30:27:b9:ba:c2:43:cb:56:80:5f:d2:25:51:ec:ec:
         5c:21:e8:7e:57:53:42:9e:c8:dc:27:14:13:65:7e:eb:26:41:
         44:0c:d5:ba:c0:dd:04:89:bb:98:7e:fc:72:46:2d:40:e7:4c:
         74:3c:99:af:e1:4d:a8:87:4e:67:a4:39:51:dc:2f:e3:26:af:
         b0:3a:fe:53:eb:c9:2b:62:49:4f:85:9c:d2:48:79:85:7e:9b:
         41:9d:e1:dd:c5:01:91:d7:7d:a1:1b:ac:56:c3:54:3b:25:84:
         7a:22:9c:4b:56:68:74:e2:6b:b2:f7:65:87:8a:1d:52:a9:99:
         4c:25:cd:40:ab:1e:7b:bb:60:97:79:da:0a:c3:10:cb:53:4f:
         d0:ba:97:8b:b9:10:31:7e:e8:a6:e5:c6:64:80:79:8a:ff:af:
         70:0e:4c:74:74:ac:53:b7:ed:98:56:49:ba:d5:dc:92:81:51:
         a3:c8:64:c3:54:59:02:6b:97:ab:a4:6e:3e:a2:01:65:f1:6c:
         80:89:05:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:16 2026 by rpki-client