Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
File:                     2eeOhm6SBNAab1LTn9hP8JALIdQ.mft (raw, json)
Hash identifier:          6wHZkm6iW7nXmwkiH3amPkZppobHTWX8wnVIurSwvxc=
Subject key identifier:   D7:33:A0:E0:7D:CA:BD:73:95:F3:4E:06:56:B9:3E:2C:C4:AB:D6:2E
Authority key identifier: D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4
Certificate issuer:       /CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
Certificate serial:       019F92486F329B9D54CFAC5EA60EB470C42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
Manifest number:          078A
Signing time:             Fri 24 Jul 2026 04:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:48 +0000
Files and hashes:         1: 2eeOhm6SBNAab1LTn9hP8JALIdQ.crl (hash: JSBoUGfJHTBcJyUyvcjSN9uKZSnJM1IeXzMDT6ytF18=)
                          2: KvxEQrxDZmBIxkbUUNQp6HsFC_0.roa (hash: BSUmQnkTle9HViYYJkRZjSse8w3JaRvHWOR9HNyaels=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:6f:32:9b:9d:54:cf:ac:5e:a6:0e:b4:70:c4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e78e866e9204d01a6f52d39fd84ff0900b21d4
        Validity
            Not Before: Jul 24 04:00:48 2026 GMT
            Not After : Jul 25 04:00:48 2026 GMT
        Subject: CN=d733a0e07dcabd7395f34e0656b93e2cc4abd62e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d8:05:24:66:3b:99:c2:36:6d:9c:7b:e0:85:
                    41:4f:1f:f1:7f:a0:3f:d5:3f:04:20:58:16:fc:66:
                    d7:ea:2d:3f:f3:af:52:70:35:a5:64:1b:f0:45:dd:
                    52:35:44:97:8c:22:84:dc:3f:cc:21:b6:67:f5:e1:
                    e3:9f:26:11:cd:09:2a:1b:f8:58:50:3e:46:e9:77:
                    00:d5:d8:e6:89:49:77:c2:ef:8e:09:e1:8f:a0:71:
                    76:99:a6:29:9d:6c:4c:1e:c2:e8:ba:53:20:76:e3:
                    f6:cf:d7:62:ba:7d:cb:c3:16:9f:2a:7d:33:8e:79:
                    ae:82:cf:90:82:1f:13:02:75:90:84:39:1c:15:b0:
                    3a:08:fb:78:5d:17:fe:5d:af:3e:fe:f2:50:05:03:
                    f6:a9:4e:94:99:87:cb:23:15:b5:48:7e:5f:cc:a4:
                    60:52:28:11:f6:42:8f:43:0b:c0:43:e2:50:44:b3:
                    b6:20:bf:15:3a:f1:8b:7a:1d:5f:9d:ac:39:b9:29:
                    46:24:42:7b:00:3e:1d:53:87:21:e5:28:6a:5e:76:
                    e5:4c:ba:c3:6d:cb:35:1a:d3:d3:f6:34:89:90:9e:
                    03:ef:6c:fb:06:19:bf:34:41:f2:d1:f8:36:ae:b7:
                    52:c2:f1:61:3c:38:8a:eb:9f:d6:b2:b5:4e:23:d4:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:33:A0:E0:7D:CA:BD:73:95:F3:4E:06:56:B9:3E:2C:C4:AB:D6:2E
            X509v3 Authority Key Identifier:
                keyid:D9:E7:8E:86:6E:92:04:D0:1A:6F:52:D3:9F:D8:4F:F0:90:0B:21:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eeOhm6SBNAab1LTn9hP8JALIdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/32915b-9ea1-4c64-8ff1-d76d6627fb2e/1/2eeOhm6SBNAab1LTn9hP8JALIdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:aa:ca:c1:75:60:c1:e1:f2:e6:3b:82:39:38:84:c7:5a:
         03:1c:41:f0:6e:05:8f:68:3d:f2:55:2f:a9:12:61:d1:39:51:
         07:a7:b1:44:c4:9b:61:b5:e0:ad:20:e9:98:60:2b:46:3a:cb:
         86:b2:34:89:a4:24:2d:06:39:9b:2a:0f:c4:e1:3d:95:f1:80:
         4e:3f:63:30:cc:c1:81:2a:32:50:64:7e:a6:9d:ea:02:45:0e:
         53:e7:67:c3:93:5a:0c:03:75:c1:6a:0b:41:02:a8:69:ec:71:
         46:23:fe:b9:11:54:80:cb:eb:1d:4e:db:fa:95:ab:28:8f:ff:
         77:73:d7:82:11:ab:c9:c0:37:08:55:fd:64:43:ad:ac:b1:43:
         93:4b:5b:82:2f:07:0c:db:be:1c:63:97:1b:96:11:e0:94:69:
         d9:d3:b1:2a:5f:87:0a:16:9a:30:db:f0:09:c0:3b:cb:57:1b:
         e8:9f:b5:c2:bc:3d:cf:1e:72:e1:70:e2:7b:b6:ba:0d:c8:2b:
         59:b5:3b:70:ee:94:c5:7b:bc:eb:12:09:9a:83:36:c0:7c:85:
         4a:54:5f:92:0e:d7:c0:7f:c8:02:8f:ff:e3:07:50:d5:bd:23:
         e2:ce:d8:a0:b8:22:53:39:64:83:71:6c:12:81:14:d8:0b:95:
         38:07:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:08 2026 by rpki-client