Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
File:                     EBKHknrXsdtHmuWrkquHxKT69JY.mft (raw, json)
Hash identifier:          2US5jzldbV1IPOO8v01pLuHA5cm7tnhaZuhsat/HhQQ=
Subject key identifier:   63:59:41:17:C4:15:87:00:E9:4D:D4:C0:48:DE:7F:2B:0D:6F:80:EE
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Certificate issuer:       /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial:       019F92116E85F3F575F7AF99B8F98772896D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 03:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:43 +0000
Files and hashes:         1: 3hEq94EGlgud0m4THLqNIw7_pEI.roa (hash: iwseUv8Ssl2EzH4+sgIpXtz5sb0Gtf1/B2FcnNjM0OU=)
                          2: 78P8bg4fhDC941Z-sCKZX9vKz5c.roa (hash: 95blh8AcNCpkNeCFXQto2YGidkNS7zNlYdkmjlG4aOU=)
                          3: EBKHknrXsdtHmuWrkquHxKT69JY.crl (hash: UGicNPPRldyDueELWwacTwmHw80bA7uKXRItHIjLboo=)
                          4: irfw5UW1_BtcJGyWmOKmkhAGuPM.roa (hash: KUrzlXQ0G9dX8hl6WHyNKm8JCOJt/8bKQDZ8bvI+eWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:6e:85:f3:f5:75:f7:af:99:b8:f9:87:72:89:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
        Validity
            Not Before: Jul 24 03:00:43 2026 GMT
            Not After : Jul 25 03:00:43 2026 GMT
        Subject: CN=63594117c4158700e94dd4c048de7f2b0d6f80ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b4:d7:b6:74:8f:06:17:41:f5:bf:d2:73:ea:
                    d7:eb:63:25:01:9e:80:bc:cb:44:1f:b0:3a:b8:2e:
                    fe:4c:51:e3:05:0a:43:61:e6:58:17:0e:c0:71:c4:
                    3b:46:07:b5:54:4c:6b:c3:6c:8e:28:ee:8a:f7:14:
                    98:fc:9c:49:84:1c:b3:ce:d9:20:9d:20:99:88:54:
                    56:5f:6e:1c:33:21:04:ae:9d:cc:f3:d6:47:f6:2c:
                    f2:81:d2:c7:a9:8c:bd:3d:8e:d9:d0:da:59:d0:96:
                    3c:d6:5b:51:0c:d7:f2:18:8f:66:d6:d0:28:5b:6a:
                    e7:d8:01:5c:da:02:48:37:21:2e:8f:33:3e:99:98:
                    f5:86:cd:ba:8a:00:09:79:81:e3:26:dd:47:5f:a4:
                    e4:b4:6b:98:ee:59:d7:9c:1b:00:8d:93:e7:2b:ac:
                    ea:b3:32:d1:c5:39:f2:0e:49:a5:9c:0e:4d:00:3d:
                    79:8c:10:7c:e8:4b:42:a4:eb:86:80:89:94:74:ac:
                    bc:7d:67:d7:97:e7:e1:7b:c2:ce:1d:9e:fe:43:32:
                    68:b1:aa:67:8d:c7:c8:07:25:05:26:f9:e1:1b:af:
                    74:30:13:b0:b9:e9:6b:27:65:fc:df:78:cb:e0:ec:
                    21:a2:32:57:ac:2b:e8:d9:a8:12:08:66:aa:c0:e5:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:41:17:C4:15:87:00:E9:4D:D4:C0:48:DE:7F:2B:0D:6F:80:EE
            X509v3 Authority Key Identifier:
                keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:80:6f:34:64:6e:28:18:2c:bd:c8:66:6b:4d:49:1c:8a:07:
         36:68:fa:83:41:f2:26:c8:2d:6e:89:db:d9:45:88:7a:63:9b:
         4e:70:0e:8b:e1:1b:7b:18:28:ed:0f:ac:06:81:c9:36:57:79:
         11:20:5d:16:a2:e3:65:f1:82:80:dd:dc:21:67:46:66:d7:35:
         21:a8:17:00:4f:c2:ce:e4:e3:ce:6f:69:7f:b4:9a:8f:d0:46:
         21:23:e5:00:e9:41:1d:c5:55:84:d3:91:82:93:a1:94:37:83:
         b2:97:b4:db:e3:84:06:c7:e3:e8:07:b6:9f:2d:90:b6:7c:09:
         d0:10:21:45:ec:f0:ed:9d:ad:4a:fc:59:d3:3d:f0:44:79:2c:
         63:0d:a6:5c:fc:41:73:0a:61:ba:7c:b5:7a:43:25:7f:bd:dd:
         53:bb:37:dc:c8:10:4d:ea:e2:88:07:8a:40:d5:98:60:6e:63:
         ba:4e:19:5d:e2:1b:39:a1:24:09:67:12:20:8e:78:40:16:41:
         a5:a7:50:e6:c8:22:85:59:89:23:76:37:52:d9:9b:c3:53:29:
         a7:d4:33:29:66:1c:ff:cd:fc:a2:83:d3:24:65:e5:25:dd:13:
         7d:5a:6d:24:20:c5:91:8d:45:ff:bf:ce:70:a2:e0:29:0d:26:
         8b:71:8c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEW6F8/V196+ZuPmHcoltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm
YWY0OTYwHhcNMjYwNzI0MDMwMDQzWhcNMjYwNzI1MDMwMDQzWjAzMTEwLwYDVQQD
Eyg2MzU5NDExN2M0MTU4NzAwZTk0ZGQ0YzA0OGRlN2YyYjBkNmY4MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7TXtnSPBhdB9b/Sc+rX62MlAZ6A
vMtEH7A6uC7+TFHjBQpDYeZYFw7AccQ7Rge1VExrw2yOKO6K9xSY/JxJhByzztkg
nSCZiFRWX24cMyEErp3M89ZH9izygdLHqYy9PY7Z0NpZ0JY81ltRDNfyGI9m1tAo
W2rn2AFc2gJINyEujzM+mZj1hs26igAJeYHjJt1HX6TktGuY7lnXnBsAjZPnK6zq
szLRxTnyDkmlnA5NAD15jBB86EtCpOuGgImUdKy8fWfXl+fhe8LOHZ7+QzJosapn
jcfIByUFJvnhG690MBOwuelrJ2X833jL4OwhojJXrCvo2agSCGaqwOXxuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNZQRfEFYcA6U3UwEjefysNb4DuMB8GA1UdIwQY
MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt
NzNhNDUyYmFmYjQ2LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2
LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIBvNGRu
KBgsvchma01JHIoHNmj6g0HyJsgtbonb2UWIemObTnAOi+Ebexgo7Q+sBoHJNld5
ESBdFqLjZfGCgN3cIWdGZtc1IagXAE/CzuTjzm9pf7Saj9BGISPlAOlBHcVVhNOR
gpOhlDeDspe02+OEBsfj6Ae2ny2QtnwJ0BAhRezw7Z2tSvxZ0z3wRHksYw2mXPxB
cwphuny1ekMlf73dU7s33MgQTeriiAeKQNWYYG5juk4ZXeIbOaEkCWcSII54QBZB
padQ5sgihVmJI3Y3Utmbw1Mpp9QzKWYc/838ooPTJGXlJd0TfVptJCDFkY1F/7/O
cKLgKQ0mi3GMzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:13 2026 by rpki-client