Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
File:                     EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json)
Hash identifier:          a6fxU3clJ2ftIA41lfwqaoKBoJGD9/iTT8thO3bpx20=
Subject key identifier:   41:54:CE:13:9B:AD:28:A7:6A:09:17:FA:00:8F:2E:3A:5A:D1:1C:68
Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Certificate issuer:       /CN=10f1d0dbe093c722350618f4045c25ba94317f87
Certificate serial:       019F8ED9793E3ECD02701809FB8F18E807D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
Manifest number:          19CE
Signing time:             Thu 23 Jul 2026 12:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:44 +0000
Files and hashes:         1: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: fs5cT13FJkjnCQwb6rRi8cL081bq+Ajl1cGiyFUT8nY=)
                          2: GTbeqkgrKUAhA5ZTICqv-Jsqhfk.asa (hash: tnWcWnPdzicoKznE3Lti2EkSumgbaD/+00aloHVu0q0=)
                          3: JzWGsDffl9qf2AiMf1YAzKEytoQ.roa (hash: 6DFZRSTQ0FFBQOu6f+OJdswaZAy8UME/OaSysUNj6dc=)
                          4: UR-yHiAzwfNk9fBD6LqvJqyO6VA.asa (hash: In6Ax28cSYKFdnV27GE6zaDVibD/bsCLqCfVuurELOI=)
                          5: WW2jLA5cdwrG7xUDwvvWb1u0Z_I.roa (hash: NQTSDeY1v8QUdlY/Nw06UqgN+UAxhAYxrfmI+hdgIDU=)
                          6: k3108kOK6CEDzpN3BxvwlXdvfnc.asa (hash: 1ILE6COCf0gUgcfdaifT0HWyDbr+q/8Jv2QHT8VhnMc=)
                          7: lN9Gc6nnY4wfJS-_nrlVa8nmRj4.asa (hash: fcvvISOsOt68aAXMoyb8wR0Eov34Nd6IrPJ+pTVeu6A=)
                          8: naYBcrufp-6L3JkDN-CeOQG1p1I.roa (hash: fPvBEEB4GWYhpwRMLZebL8dNCBfHcJIGVXJAvo/Y6LY=)
                          9: sZ98wzbaCbcgCl57ynzA9q3aONU.roa (hash: fn9gWlz+VvCaVIUVntul6QXxN7d9tjP7+yKVdYb3aLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:79:3e:3e:cd:02:70:18:09:fb:8f:18:e8:07:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87
        Validity
            Not Before: Jul 23 12:00:44 2026 GMT
            Not After : Jul 24 12:00:44 2026 GMT
        Subject: CN=4154ce139bad28a76a0917fa008f2e3a5ad11c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:74:dd:85:9f:59:07:e9:13:7a:d9:46:70:
                    26:f8:ec:2d:1a:b7:71:23:9b:a9:ad:aa:0c:e8:3e:
                    78:e6:9c:1a:e6:82:50:67:bb:1d:58:cf:2c:f9:1e:
                    d3:e7:1a:a4:bd:21:40:3d:29:5d:47:94:f1:26:48:
                    1d:41:ed:e7:1c:45:cb:20:c9:01:ae:fa:2e:56:33:
                    a7:c6:58:50:60:79:ca:10:58:be:47:49:fc:6a:42:
                    bd:06:ef:70:e6:b4:10:74:75:40:69:d0:bb:7f:25:
                    b9:a6:0e:b5:5e:da:ad:45:4b:76:c6:b9:70:cf:2d:
                    cf:c6:26:68:4c:d5:59:bc:80:5f:88:04:1b:5b:45:
                    86:94:87:95:59:40:d9:21:53:7c:a7:8a:37:3d:3e:
                    1d:17:95:61:af:7d:f2:78:33:3d:aa:09:bb:e9:3f:
                    a5:d2:9a:71:f7:e7:09:a1:fc:50:01:91:b5:13:6f:
                    98:7e:6a:65:8c:34:71:be:1d:de:d5:60:c1:bf:92:
                    57:3f:75:d4:c7:e3:9d:b8:21:3a:ad:78:da:d1:fb:
                    8b:15:0b:01:35:3c:ba:0c:d8:d1:89:45:f8:f7:00:
                    b6:ff:d6:e2:9a:a5:74:b1:22:cc:d3:6f:e0:11:d3:
                    aa:70:bf:e9:fb:26:08:8a:95:b1:94:66:16:e5:da:
                    ab:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:54:CE:13:9B:AD:28:A7:6A:09:17:FA:00:8F:2E:3A:5A:D1:1C:68
            X509v3 Authority Key Identifier:
                keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:52:fe:fa:1d:63:44:c9:9e:68:f1:92:c9:3c:bf:e0:9a:72:
         7f:36:2b:ee:97:ed:83:ca:b7:85:40:16:b6:7a:37:16:cd:67:
         b7:dd:40:d6:5c:4d:71:88:c4:a4:ff:49:6a:c0:73:75:33:f9:
         47:22:c3:12:2d:c1:04:3b:6f:c9:91:8a:df:ab:34:4f:56:d3:
         19:9e:6d:e3:2d:a2:9e:87:f5:fc:50:31:15:c7:57:ee:d7:72:
         5c:42:5a:04:89:26:36:2b:20:a1:b7:df:80:57:4c:64:9b:e1:
         ce:61:b0:e1:df:ba:ba:0f:2b:0e:42:a0:40:19:f3:92:a6:a2:
         72:45:37:23:b0:be:b1:90:f0:af:f5:7d:2d:9c:1f:2e:e3:f3:
         6a:bb:79:a1:33:9f:4b:2e:39:c0:4b:bf:71:01:73:13:58:b1:
         b1:28:2a:19:37:0b:6e:cb:1c:47:4a:0b:9d:23:66:7b:35:d7:
         10:45:af:97:da:76:a0:d4:9e:b0:2d:41:14:c0:d0:bd:07:4b:
         9a:7f:d2:a9:33:fc:51:cf:d3:f9:4d:48:26:b0:b9:d8:db:f6:
         52:c5:8d:6a:cd:35:da:a3:ad:0f:df:5f:b1:e5:22:27:40:73:
         6d:99:8d:e0:52:56:ee:4c:94:e7:59:dc:44:67:44:2c:9e:7e:
         df:6f:a2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:56 2026 by rpki-client