Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
File:                     eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json)
Hash identifier:          6XSgkRtlY16i1GqVRgfqgsCt2lW8swCEeQwIRVAV19M=
Subject key identifier:   40:F6:54:AD:68:C8:67:DC:A0:C4:31:6B:EC:92:66:A3:CE:AB:A5:B4
Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B
Certificate issuer:       /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
Certificate serial:       019F927F520A088615E00137FD775AE7097B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
Manifest number:          1333
Signing time:             Fri 24 Jul 2026 05:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:45 +0000
Files and hashes:         1: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: /F5InUiXhDFVd7zn0MWQqbC4F/RN+X0L3MuCHmQUmYo=)
                          2: sWFx-vvZ74gp_0mPtisPAvDc8vQ.roa (hash: Edp7rh57lWgI8CoINvbBB1ZSrUO0DPkC2eFiuG6KreQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:52:0a:08:86:15:e0:01:37:fd:77:5a:e7:09:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b
        Validity
            Not Before: Jul 24 05:00:45 2026 GMT
            Not After : Jul 25 05:00:45 2026 GMT
        Subject: CN=40f654ad68c867dca0c4316bec9266a3ceaba5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:64:05:72:94:ba:f3:e7:03:f2:c9:01:34:
                    bf:34:f9:75:38:84:11:1a:ee:38:e6:b6:67:ac:21:
                    45:eb:2f:d2:2b:79:7e:67:db:21:0b:44:81:01:57:
                    62:21:bb:1a:a3:c0:e9:bf:c8:de:e4:fc:54:5f:65:
                    eb:4b:2e:94:41:82:af:cb:56:b2:a9:c4:cd:72:0a:
                    50:cf:6f:e3:20:57:b8:9e:24:32:82:bd:31:e2:b1:
                    ab:68:e6:e5:9f:a9:3a:76:8e:f4:ce:4e:6e:3a:94:
                    30:95:e0:93:34:15:f0:a7:f5:9f:47:a8:cf:6e:88:
                    97:fd:22:19:5f:cc:0d:d4:c1:b8:4f:8d:e0:10:d4:
                    42:12:4e:71:e2:db:38:71:12:7a:50:b2:70:7b:ac:
                    52:32:91:f1:0b:11:77:86:cc:ad:75:db:6d:10:06:
                    5d:c8:80:e3:ff:ed:f6:4f:b5:6e:2f:c7:4c:bb:b3:
                    5f:89:e8:a4:c8:fa:ee:d1:3c:22:3f:27:df:ae:52:
                    82:58:2a:5f:f1:44:e9:b0:69:8e:cb:18:f3:b2:da:
                    f4:1c:f5:f2:67:30:62:64:6a:58:84:dd:cd:fb:58:
                    88:98:91:cb:14:01:93:90:1c:6e:c1:28:c4:56:bb:
                    cb:1f:95:4e:56:95:de:cc:29:88:51:a8:40:e0:66:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:F6:54:AD:68:C8:67:DC:A0:C4:31:6B:EC:92:66:A3:CE:AB:A5:B4
            X509v3 Authority Key Identifier:
                keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:75:10:08:5e:32:ed:88:a2:87:5d:e6:ea:ac:e1:18:b6:e3:
         c7:f2:69:fd:b0:8d:59:6a:c1:77:48:28:56:15:ac:cd:a5:35:
         53:14:d7:29:08:18:7f:61:5c:36:09:94:43:e9:95:dc:e5:8b:
         71:e0:a3:28:75:57:18:96:24:90:3b:93:3d:8f:dd:7c:5c:34:
         e4:c9:3f:7a:36:f4:e6:cf:35:d3:67:0b:85:c1:a4:e6:a6:00:
         4f:08:0b:78:39:44:2d:3b:4a:26:88:e3:dd:db:bc:fa:b2:66:
         eb:0c:e1:de:c5:9e:eb:ab:7c:cd:5c:5f:96:ad:0f:9c:36:4c:
         87:d1:7b:e2:67:b1:25:18:07:29:e9:f1:9f:33:85:fa:3c:6f:
         a2:5c:c8:49:c5:1d:50:c7:89:fc:b8:a9:22:e1:3b:e0:a9:e4:
         ca:94:86:63:cd:51:34:1c:36:84:fd:fb:3c:2f:3c:8c:2a:de:
         72:6f:4f:d5:a2:8f:5d:70:f2:87:9e:bb:3b:6b:a2:77:59:a9:
         dd:52:a8:c4:6d:2c:a7:d1:e3:9c:79:c4:49:c8:bb:7b:a6:bd:
         b2:9c:b8:0b:71:bb:08:fe:d7:0c:b1:ca:92:d8:5d:a8:f2:ca:
         d2:b1:fe:5a:fa:5b:c7:c4:73:71:88:f4:da:d5:89:dc:d1:fa:
         e6:31:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:14:59 2026 by rpki-client