Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          BKgSHtPLjL11/u1wlNi5S18ZIEc7RVUG/BwaHO/+HfE=
Subject key identifier:   CD:32:A5:28:2A:53:F6:C8:8C:E0:4A:58:79:A2:6D:5E:D5:7B:CA:6D
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       019F935A98BB8BC63B371257E8DEC2AF060A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          1329
Signing time:             Fri 24 Jul 2026 09:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:15 +0000
Files and hashes:         1: 53H4kGtC_SbzrsI-Vzd9TCGN8wY.roa (hash: rLB3dTRqcK5WY3gJz81sl+g0PUHVo5VwKbPsiJ+N2Ok=)
                          2: EP-EAgqiDi1Uxc1mLP43RrvoWe0.roa (hash: kIJAbYf7/TAQT5Y3mOwU5/SUvXYx6069NZi8uJFH8FY=)
                          3: E_XmM5IBFyFELEnknKVAb_189qw.roa (hash: Mlub1KTpnHaSVLTaB/n4LoTON1L2ATvKiA1EUAmQpUg=)
                          4: OIq2o5hKdaMH_2PTUWzIlIKfs2g.roa (hash: gefzhJXJU82C+eFShlNs7p/wt0aYa1LR779QRT2gD0A=)
                          5: c0q33XIOQrm5W1qjd8fw_F2VySw.roa (hash: PxSJmR26K9n2xvyDwPVrN57pqz+8nMCKwGzKiK0FnUE=)
                          6: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: rbgPqKnOPaqv/XwVNt2HyvHCc5HtvabzLt6ccCYm0cw=)
                          7: oIFu7Vss_FsSg6ba6OZTOOzWH40.roa (hash: Om63+Vuo/DpGh5dNs3H906zkOfMO055KyU7UPPEoe9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:98:bb:8b:c6:3b:37:12:57:e8:de:c2:af:06:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jul 24 09:00:15 2026 GMT
            Not After : Jul 25 09:00:15 2026 GMT
        Subject: CN=cd32a5282a53f6c88ce04a5879a26d5ed57bca6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:90:7b:a2:b9:58:10:22:f2:57:38:86:c7:
                    24:88:1c:de:c4:7f:78:8f:9d:cd:87:ae:8b:42:2a:
                    d3:49:d1:97:ec:9b:e0:82:1d:6a:cb:f6:34:33:bd:
                    90:97:7a:ee:97:a4:81:65:81:90:e0:16:c1:27:bd:
                    8a:62:9d:46:50:25:d5:2c:35:93:64:f4:b4:a6:df:
                    c0:51:bf:ab:d7:31:af:46:cf:95:7c:19:49:84:02:
                    ba:27:d1:12:f1:d7:67:89:c2:49:c5:66:b4:2f:6f:
                    6d:9d:bb:d7:2a:c0:5b:37:ff:a4:47:7f:00:8a:d2:
                    0b:62:19:51:28:fb:61:ba:15:a2:f4:23:95:10:4d:
                    96:d3:40:a3:03:9e:56:42:0e:b2:8d:de:98:fa:9b:
                    ca:36:28:6b:49:49:95:f5:66:1d:67:0e:7f:0a:7d:
                    e6:44:87:38:cb:54:ea:62:64:4d:eb:1c:84:ff:d3:
                    1c:e6:8d:b1:92:81:0f:cb:12:fa:69:ca:2c:4b:e2:
                    48:ad:24:9b:4e:3f:4b:d3:7c:17:24:a0:bc:61:f2:
                    87:67:16:0a:90:12:f7:f6:cb:c5:f0:b4:53:b1:ad:
                    a7:9c:e4:f8:f9:88:41:e5:cb:db:19:14:d2:32:5d:
                    af:6e:81:eb:b7:5f:e0:ea:80:77:e5:a9:fa:e5:1b:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:32:A5:28:2A:53:F6:C8:8C:E0:4A:58:79:A2:6D:5E:D5:7B:CA:6D
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:21:d0:ad:d3:97:20:ba:19:51:db:ac:f1:b2:d7:ae:a1:cf:
         88:dc:75:44:1a:83:9c:c4:be:60:88:93:25:7e:00:3d:7e:bd:
         ab:f1:88:77:d1:32:f9:62:a6:8c:75:dc:f3:d3:9e:41:6a:d4:
         59:54:85:89:04:3e:8e:ba:26:a8:55:06:88:27:c5:e4:1c:39:
         30:4c:bc:70:a6:b3:1d:c2:d9:66:68:5e:96:f3:a5:77:5d:2f:
         d5:60:1f:88:22:64:06:58:1b:86:0f:a3:00:b1:c4:b4:4a:7a:
         d3:86:b8:e6:67:ef:75:6c:72:2b:29:7a:53:7d:92:27:34:09:
         27:6b:0a:30:5e:02:a5:74:da:a9:37:29:90:e7:0b:88:1e:d2:
         a3:4e:68:c0:df:98:4b:61:f7:b9:b3:5d:5a:f4:9f:df:c5:43:
         a5:bc:91:27:1d:10:b8:e4:25:c9:53:4c:9a:43:9b:8b:f7:91:
         24:15:70:e3:26:2d:8b:44:74:d7:74:3c:da:ac:93:80:41:e3:
         ea:1e:f4:88:7b:36:c9:3e:b4:f9:71:66:ed:b7:f4:9b:d1:58:
         4c:9e:bd:5f:1b:eb:0c:9f:50:19:cf:19:9e:f0:35:e5:fb:27:
         06:2e:6f:16:6f:aa:ba:22:4d:02:6b:c6:30:69:9b:ac:52:51:
         fb:52:f7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:25:11 2026 by rpki-client