Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
File:                     7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft (raw, json)
Hash identifier:          yS+15EmGR6iZZJou9/rwq9o08XNR4AzCWQ9g1zuJKuc=
Subject key identifier:   0D:B1:10:B2:C0:E7:32:C6:FF:81:21:D8:5E:47:FD:EA:12:2B:7E:91
Authority key identifier: EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4
Certificate issuer:       /CN=ee82395001b03c663509909979dfb78445b3d9c4
Certificate serial:       019F8F7E076FEEA42481E5CCB0CBBF520555
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:28 +0000
Files and hashes:         1: 1-kHdsLNbk3wn4YZGGv7nR6qgmuo.roa (hash: GP85i29ZuAZsmZlUrVOG+U5Hl6NUzQEiBUiRqfR82Fs=)
                          2: 7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl (hash: TC3s7gGYJbuVCsYFT6u0fj/7H/xjihAKJdpPbeJ2Yak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:07:6f:ee:a4:24:81:e5:cc:b0:cb:bf:52:05:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82395001b03c663509909979dfb78445b3d9c4
        Validity
            Not Before: Jul 23 15:00:28 2026 GMT
            Not After : Jul 24 15:00:28 2026 GMT
        Subject: CN=0db110b2c0e732c6ff8121d85e47fdea122b7e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:32:f1:c3:18:6b:3e:5f:97:5a:c4:91:71:92:
                    4d:73:db:1e:22:b9:77:9f:5d:f2:ab:9b:c4:43:cf:
                    f7:bf:6c:40:79:a3:cd:69:da:8d:61:b6:42:0b:41:
                    d9:db:10:5d:a4:8f:16:08:5e:f2:cc:bb:57:d6:77:
                    24:57:30:9f:cb:ee:af:e2:af:97:1a:91:11:f8:0e:
                    42:e5:a4:b0:41:43:21:f7:5a:ea:99:6d:a9:ee:83:
                    7f:5a:f6:a7:a8:fa:83:f3:ae:0b:1d:bd:1a:0c:b2:
                    ae:47:28:55:71:70:c2:63:7e:ee:f0:aa:93:d4:fa:
                    56:9f:f3:b0:99:92:1f:1d:08:1c:1b:b4:4f:76:76:
                    32:43:fe:3b:b0:c6:b7:da:2a:c9:b7:45:70:4b:da:
                    a3:d9:8d:a3:2c:6a:a0:60:05:32:eb:97:26:2c:63:
                    79:a9:2c:0e:2b:d6:b7:a1:75:16:f4:92:a3:25:7d:
                    34:78:41:8c:14:23:23:3d:2a:66:b1:b7:77:50:e6:
                    28:58:99:3a:dc:b5:c6:13:a2:44:e0:2a:2a:c4:60:
                    68:e8:47:fa:e4:5c:6c:00:c7:b3:a5:f1:4f:aa:eb:
                    b5:f4:88:31:e5:1f:74:96:11:97:81:9e:84:41:16:
                    e5:54:3e:da:cf:e9:e2:8e:13:8c:39:4a:7a:7a:f9:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B1:10:B2:C0:E7:32:C6:FF:81:21:D8:5E:47:FD:EA:12:2B:7E:91
            X509v3 Authority Key Identifier:
                keyid:EE:82:39:50:01:B0:3C:66:35:09:90:99:79:DF:B7:84:45:B3:D9:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oI5UAGwPGY1CZCZed-3hEWz2cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ef2a01-d8ca-4b94-8f67-78ea83d21249/1/7oI5UAGwPGY1CZCZed-3hEWz2cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:31:1a:3f:53:9b:0c:a8:74:e1:61:01:f0:f6:5e:79:db:0e:
         a8:cf:37:83:6b:64:50:3f:79:75:44:ec:81:f1:c0:2f:86:69:
         e4:65:2a:fd:eb:ed:1e:39:18:33:2b:ae:f4:42:f8:86:12:64:
         2c:0a:42:ae:42:2e:5e:96:1c:77:bb:e6:75:27:a7:e6:51:57:
         5f:01:d3:f4:99:8e:17:7c:8e:f2:c3:3f:a3:d9:d0:7e:ab:a1:
         09:07:f1:9b:be:59:db:55:bf:8d:0d:ac:a9:57:f7:bc:00:61:
         5a:74:57:d3:a6:b5:48:fa:09:fc:04:d3:99:e8:8c:16:b2:43:
         ef:29:da:1c:39:1d:ce:08:0e:70:91:37:b7:6c:1a:26:c3:c3:
         9c:ab:85:5c:09:6b:9b:70:5e:c7:5a:e7:13:b6:06:55:7e:8d:
         e5:f7:e9:1b:ff:f1:6b:f7:c6:c0:ac:ae:fd:54:a4:86:0b:5c:
         7d:ff:d7:a3:ac:59:b3:df:15:14:b7:fd:cd:21:f8:74:5d:91:
         19:1e:2a:cd:74:b4:65:da:46:fd:dd:4e:e0:65:a8:2d:85:7e:
         a0:70:c0:f2:91:51:b8:33:e7:3f:e6:6d:37:23:cb:7e:35:4f:
         20:d0:cf:e8:70:44:ac:26:0e:8c:8f:a5:12:40:f2:e8:45:dc:
         48:69:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:02 2026 by rpki-client