Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
File:                     EharzETJqVVAzfWx3FQux9Ef4Ho.mft (raw, json)
Hash identifier:          I3mR1CTYg4VvB9jZU8JeSbTh3XHa4M7UL0qRk1EINzs=
Subject key identifier:   F9:F4:DF:CE:30:8C:12:AA:1B:E8:C9:0A:67:DD:19:44:61:EC:FE:4F
Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A
Certificate issuer:       /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
Certificate serial:       019F9059A1BC172129FE435B151609B0ACFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
Manifest number:          04E2
Signing time:             Thu 23 Jul 2026 19:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:20 +0000
Files and hashes:         1: 9V3S7FKC66AOlqD78_S81truyog.roa (hash: zjtnM6n3Uet2Hry92cMihIwePJR9odotoqz4FTgtQpQ=)
                          2: EharzETJqVVAzfWx3FQux9Ef4Ho.crl (hash: juKHZEElvqe25XMtJAcOUbTW3+BfofkXHBZ25NAbplY=)
                          3: Q89cC5EdEYVsTAR7wEMR5rmM-FA.roa (hash: IpAEUAQrDRw1Avy4gtoYvc+jdCy+th+rhrs9OezDlo8=)
                          4: R6vEKMp8XV0nRsp07cf4y7I04qo.roa (hash: nWBD/KxL+ZqMUbvdWaWo1r7/2jynLrCSHLN52H6UCwM=)
                          5: XGUIHnWF_LunuxvNcMmR57_WKzo.roa (hash: Gg+yICFewOrJllU9keGQjZ8+O9tNzguLLKLqMVLJpjs=)
                          6: b1NnfX82WWUKnDzO-T_p9BDnjPM.roa (hash: uuhxZnIOVP3yGkI2POwoZpysQSXnT6B0qJNkc7bJXFw=)
                          7: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (hash: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4=)
                          8: iTrKyBgs_fihjw2gMNeMi35dTSA.roa (hash: zNTMLDdPTDqmLO0jhMMrsQBD6z1cOUxn49L1ph7eXpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:a1:bc:17:21:29:fe:43:5b:15:16:09:b0:ac:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a
        Validity
            Not Before: Jul 23 19:00:20 2026 GMT
            Not After : Jul 24 19:00:20 2026 GMT
        Subject: CN=f9f4dfce308c12aa1be8c90a67dd194461ecfe4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:2a:71:7f:de:f5:33:8d:a0:bf:05:bd:4f:
                    cc:10:2d:a9:2f:3e:30:cf:5a:d5:fb:b8:e5:39:ed:
                    1d:40:dd:ae:9c:e7:bf:b7:f1:14:d9:e0:66:27:27:
                    fa:1d:fb:ca:c0:4f:3b:2c:f6:4f:90:80:6a:de:33:
                    05:63:e9:95:b6:e6:f6:5c:ca:62:9d:7b:c9:b5:aa:
                    30:76:47:a9:6a:af:cc:23:8e:09:3d:d5:03:b6:ab:
                    13:ad:b3:2d:0f:3b:5f:5f:11:17:39:56:4a:3e:cf:
                    88:ac:a0:ac:52:d4:20:dd:7a:de:74:f5:49:91:52:
                    59:1d:3d:53:3c:20:a0:07:e1:ae:1f:88:4a:38:0e:
                    ed:24:c5:d1:7a:be:1d:4c:55:93:01:cb:b2:ef:f9:
                    9c:a3:09:17:84:8c:fa:ec:53:ad:52:fc:3d:0b:51:
                    85:fd:7c:00:40:42:ea:78:64:a7:c5:1e:e3:f7:0e:
                    02:63:48:5d:18:26:de:05:bb:10:c4:70:e7:f0:b4:
                    e1:4c:a3:9d:f6:16:2f:27:db:f0:27:bc:76:c8:d5:
                    6a:b4:64:5b:94:05:88:6a:84:29:79:43:85:c6:72:
                    34:51:ce:e3:e3:32:c6:88:1a:12:87:37:73:f1:80:
                    ec:e5:75:d7:2e:2c:91:dd:50:86:22:f0:f5:e4:90:
                    39:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:DF:CE:30:8C:12:AA:1B:E8:C9:0A:67:DD:19:44:61:EC:FE:4F
            X509v3 Authority Key Identifier:
                keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:49:9d:68:b5:ee:1d:7d:73:e0:f9:eb:ad:cf:27:b5:2c:84:
         49:4a:d2:fa:c2:62:b3:5d:f2:63:44:f2:0b:b3:65:98:8b:8f:
         79:14:56:4a:e2:a8:eb:bb:a4:27:99:b2:56:33:64:ba:df:5c:
         e2:d7:b3:4f:9b:35:91:b9:34:90:a5:13:1b:97:ea:c8:e2:6f:
         5a:4d:14:28:ed:7f:8b:fe:ed:ad:62:c7:e2:53:2f:3e:17:19:
         c7:52:16:7a:72:ea:35:90:36:c8:39:b6:ab:b8:bd:e5:34:00:
         16:fe:7c:c2:23:07:f5:07:56:2f:09:85:f3:1d:e9:d5:3f:10:
         6e:75:8b:1b:b3:8c:90:d4:eb:7c:b5:28:48:0b:2d:87:18:12:
         f1:f0:6f:5f:99:d3:bc:99:2c:b6:6c:ee:bd:b1:f8:f6:8f:f7:
         21:e5:f6:f8:2b:69:2c:40:6b:69:af:c9:ae:b8:94:e5:50:5e:
         a4:4f:df:ff:21:4d:37:a0:e2:13:36:21:af:a6:a5:28:00:89:
         f3:06:62:57:a4:67:3f:2d:d3:76:b3:0f:9d:9b:16:d6:11:d3:
         32:d1:aa:08:83:31:6e:c6:19:9a:f9:f7:90:64:cc:98:07:eb:
         c1:ed:0c:3a:f8:0a:b1:32:f8:cc:e0:61:4c:27:02:89:69:a2:
         aa:f3:1c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:13 2026 by rpki-client