Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File:                     eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier:          VjygAfwgOsZ1DVyH707vs1QDnJdTvbV3OIHdSEOPn8s=
Subject key identifier:   4A:14:E0:BD:CF:97:19:A5:E7:52:61:6A:A6:5A:3C:AB:85:0D:21:A1
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       019F8F7F5924A13E34F27566083DD27AC52B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number:          01EA
Signing time:             Thu 23 Jul 2026 15:01:55 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:55 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:55 +0000
Files and hashes:         1: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: p8P0mkXgYT1Cw6BYw4cVeITx8wPY4P3a058YsfoHgHI=)
                          2: mG4EijAvnONRj78ap4took9k5k0.asa (hash: LCkjOsZJgCsTlelMgbV8nr5RF7I7nsemSo0VuD8o6KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:59:24:a1:3e:34:f2:75:66:08:3d:d2:7a:c5:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Jul 23 15:01:55 2026 GMT
            Not After : Jul 24 15:01:55 2026 GMT
        Subject: CN=4a14e0bdcf9719a5e752616aa65a3cab850d21a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:c4:51:71:9e:35:b1:ba:75:24:13:c3:ae:
                    13:84:0d:11:1b:90:39:0f:b6:ff:31:0e:0c:4b:7b:
                    3c:9f:41:76:27:d2:9d:17:ce:2f:1b:9a:8b:02:1a:
                    ae:fd:12:34:61:5c:5a:6c:8e:3d:10:bb:c0:22:a2:
                    e0:2b:d5:1f:0e:04:3b:4a:9e:cd:95:d7:8f:27:74:
                    9d:7d:d4:04:be:3e:ae:86:66:f9:4d:16:e8:92:04:
                    e4:e8:8d:74:28:78:40:4a:93:c1:a7:53:3e:f4:0d:
                    b3:7e:ff:9d:d5:fe:a4:c4:5c:7f:84:8b:ed:a6:79:
                    6e:13:ec:70:17:f6:8f:2d:73:3b:5a:65:98:3d:5c:
                    86:0d:a5:63:e7:73:af:94:44:6a:06:06:cc:69:3b:
                    d1:e7:9d:88:90:d2:5e:49:d5:39:c4:21:e6:55:b2:
                    50:82:1b:49:ce:43:1d:df:49:39:e7:0c:77:cc:09:
                    2d:ef:14:93:4b:3b:d8:99:80:49:29:ec:de:af:d9:
                    23:1e:45:d3:33:4d:f4:0e:17:37:67:91:ab:eb:af:
                    d3:9a:9f:6b:43:2e:96:af:79:5e:f4:5f:c4:6e:7f:
                    dc:a1:e5:df:75:88:d0:ae:3d:58:25:fe:f8:89:7a:
                    d0:8c:ee:63:44:2d:5a:2a:24:32:48:02:1a:ab:da:
                    82:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:14:E0:BD:CF:97:19:A5:E7:52:61:6A:A6:5A:3C:AB:85:0D:21:A1
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4b:3c:d2:df:60:cd:ac:b9:36:6f:9f:93:0e:5b:78:99:cf:
         df:ca:5c:f1:ac:7b:79:48:9e:81:01:e9:5f:05:54:99:74:3f:
         4f:26:0b:07:e0:6c:62:f5:00:1a:43:1e:23:77:31:4b:fc:ec:
         ea:c5:f4:bc:8d:60:70:6d:a7:42:db:c6:4f:be:c0:90:21:d8:
         b4:88:f7:ea:75:75:b8:fa:3e:e0:f4:21:20:c8:60:08:73:4d:
         cb:fa:e7:31:42:89:27:35:cb:12:86:09:92:c7:30:b5:8a:5b:
         89:e6:db:80:26:31:b5:c5:05:e9:ca:dc:1b:13:24:6c:20:79:
         a9:a1:f8:5b:30:0d:25:5a:1e:50:38:57:98:62:ae:f7:87:e6:
         3a:fe:ed:06:cb:1d:31:df:4f:8f:04:ad:a5:c9:bc:9a:34:98:
         23:3e:2c:df:37:dd:eb:ea:ec:f8:a2:b9:ee:81:53:0f:b9:5a:
         a5:fb:c2:64:1e:3a:e0:40:46:b9:b5:f5:6f:78:03:94:e4:5b:
         41:0c:32:8c:70:9a:4f:95:1b:0a:73:e6:f8:27:93:db:28:16:
         61:b0:33:d9:25:74:f7:9c:62:e1:07:cd:5b:7e:e2:a9:f0:10:
         88:57:ee:a0:4e:60:2b:27:6a:18:e9:02:d3:0d:74:1c:e3:b8:
         1c:ac:28:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:47 2026 by rpki-client