Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
File:                     EbabWdGfKYfknxhS1guxd3-AowE.mft (raw, json)
Hash identifier:          KDY1LKOsso/tZnALSRCDBBDRz81gxVb0L9cER0lHO/g=
Subject key identifier:   D3:A7:C1:9C:25:01:38:8F:6F:82:80:47:21:6C:7C:A8:3A:27:D5:CA
Authority key identifier: 11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01
Certificate issuer:       /CN=11b69b59d19f2987e49f1852d60bb1777f80a301
Certificate serial:       019F93E790E6C00AD7B8FAEB4FB8789E244A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
Manifest number:          1AE8
Signing time:             Fri 24 Jul 2026 11:34:14 +0000
Manifest this update:     Fri 24 Jul 2026 11:34:14 +0000
Manifest next update:     Sat 25 Jul 2026 11:34:14 +0000
Files and hashes:         1: 0kwfeb-8KYnjT1DaXTFg8NKV5Qs.roa (hash: NXuZo/nEKglyJiMys1lOF8MOKYcVQUjHhjrhGVTXb8w=)
                          2: EbabWdGfKYfknxhS1guxd3-AowE.crl (hash: lscOKZyVUJJ4GpqtYtidBmWbnYNMXc1KXtYsOSXJbZc=)
                          3: ExQa4_rJNaEHp9KaigvNnKDL6eU.roa (hash: 53Hf9NPeMQ6qfBPkcUTSGvezuAg+cEKzzFuOc90DUbQ=)
                          4: Gk-3Xu_izSB_f9RVT4Mx95fzdwQ.roa (hash: qSiZYwUebITVF7msT4gMb3T5zA9NBTdfmsfNp4wHc7k=)
                          5: euBXC6rwjNF3N0PD1PpJMyMwSCI.roa (hash: 0lWahyGCdWHgLVF3U4IuMMbV9OFbVd1ssMeGsLZit7k=)
                          6: j3miBQqNH9MvtZNlx1-gjZqrqlE.roa (hash: smq4tHXaK2J5Z2RTwqeV0To7ZSM03HiBGbCe7Zo0HKc=)
                          7: jEz60612qkB_50Y260RpXZ-MuzM.roa (hash: BZr/I7EwZxM2uQlW25KjJKranZ7EMY8qsKCPvVpgBzk=)
                          8: n5DZWGwRfzSzns4eqFSjissC4Ic.roa (hash: hHHRlJz1sF3jJiU+5Rs6YUDTVt6DrNfVoH1Q2sTlqY0=)
                          9: r-anbRE4DLxuI4SkTafQgXiuasg.roa (hash: 0MlabvnrMR3GTUJus2cIH3xhwZlvfH8ipVahLa7E8mI=)
                          10: vIuaHhw5-i00cPHH0vZ_LmseB00.roa (hash: bHcmA3+3imH7FcDE4PSlxFxFCMqyJAFjvPvcad59hYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:e7:90:e6:c0:0a:d7:b8:fa:eb:4f:b8:78:9e:24:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11b69b59d19f2987e49f1852d60bb1777f80a301
        Validity
            Not Before: Jul 24 11:34:14 2026 GMT
            Not After : Jul 25 11:34:14 2026 GMT
        Subject: CN=d3a7c19c2501388f6f828047216c7ca83a27d5ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c5:6d:ac:30:e4:29:af:91:cd:a1:b1:a8:1a:
                    a2:71:31:16:e2:31:bc:92:d0:51:26:1b:df:fa:14:
                    6e:33:ca:be:d0:58:b5:7a:90:8d:5e:72:82:e0:eb:
                    60:55:e5:d5:39:5b:03:fb:60:31:bc:96:61:c2:6d:
                    0f:37:1b:16:4c:34:d0:2a:20:88:7c:d2:0c:e9:65:
                    93:2d:75:e5:67:af:af:ff:be:08:9a:57:5b:b8:5f:
                    40:84:32:1a:59:da:b7:83:42:56:15:63:f9:f2:80:
                    d1:ea:55:27:c9:28:90:e1:d5:20:f7:31:21:89:26:
                    a7:1b:06:08:15:dd:23:d4:c4:e7:13:20:02:08:40:
                    55:da:da:fe:26:69:da:60:9d:10:0b:2d:bf:ec:ac:
                    29:dd:f4:7d:91:09:a9:31:a1:bc:6f:0c:97:40:3b:
                    e9:96:aa:b2:7a:be:58:02:55:67:d6:0b:a3:28:65:
                    b0:87:1d:ef:ed:f9:84:fa:9d:a7:30:27:2c:7d:a2:
                    a4:81:d7:29:d4:50:b4:3c:59:f2:33:67:65:d9:ca:
                    41:d1:d9:00:a4:39:da:fd:55:ef:97:05:0b:ee:fd:
                    1f:65:c3:e9:ca:41:f5:3c:2b:4f:f6:a2:bd:f4:89:
                    35:dc:e5:fe:21:70:2b:e5:a7:5f:3f:2d:0c:81:1b:
                    8c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:A7:C1:9C:25:01:38:8F:6F:82:80:47:21:6C:7C:A8:3A:27:D5:CA
            X509v3 Authority Key Identifier:
                keyid:11:B6:9B:59:D1:9F:29:87:E4:9F:18:52:D6:0B:B1:77:7F:80:A3:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EbabWdGfKYfknxhS1guxd3-AowE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5edf7a-ab9a-45e7-a612-d169c088b412/1/EbabWdGfKYfknxhS1guxd3-AowE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:0b:9d:8c:2e:af:e9:c2:4c:4d:b6:cb:a1:03:ba:d4:e6:fa:
         3a:22:77:7f:66:b4:c2:fd:65:8c:d8:67:ee:77:7b:4e:9b:25:
         9b:15:8e:f6:9b:86:d3:fc:e3:97:1b:f4:46:7e:97:c1:87:d2:
         b0:72:9c:82:26:90:98:5d:1d:44:af:47:a5:01:b7:b3:ec:b0:
         86:57:7d:6f:72:43:37:38:37:f5:cf:02:60:fc:d8:2a:8d:e8:
         de:98:c4:3e:b4:f2:b7:b5:0a:6a:8c:f8:42:0f:60:6f:85:c2:
         56:ad:0c:4e:59:af:40:5e:ce:eb:d2:c9:80:89:01:52:ae:b5:
         7d:3f:60:ad:eb:6d:e6:08:42:7f:9b:52:0d:11:1c:c2:60:fb:
         c7:bf:1d:78:a0:3b:59:60:a5:ed:32:dc:6a:2a:e6:9c:10:6d:
         9f:8d:5c:70:e5:02:d4:4a:89:6a:19:17:e2:da:17:6a:27:95:
         a0:b7:4d:25:a5:55:a3:1c:ab:57:04:01:d3:82:06:ff:b6:2b:
         80:10:57:0b:93:09:56:81:81:0f:53:47:80:7e:e0:e1:ee:3f:
         4a:ec:5e:41:de:7d:1c:b8:92:99:c2:df:25:a6:1d:d5:ac:ba:
         03:26:34:51:24:6b:8e:19:68:cd:3f:ee:bf:f6:0b:5e:c3:ac:
         51:66:45:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:45 2026 by rpki-client