Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          nZcG38KiBwe3GnqB+AmPDckfFeMRvgoa2huOOHwPoKw=
Subject key identifier:   6A:45:C0:58:F4:A0:F1:A7:2C:ED:1C:E0:A9:17:0D:F1:7F:44:0C:D8
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       019F94366CE03548C8D3A35C5A3D528C027E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 13:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:22 +0000
Files and hashes:         1: 1-75h6Z8XZfpA-J4Xkm8JYxrcW7E.roa (hash: YgoOaQlFbXUdsZx8u8PNBd2uQHXrr/r+JgEvwggSZDA=)
                          2: 1-kxJVrZkUbclMp6kSpvfNZEt1VM.roa (hash: sllzVYP/WiMPElY3BFy/EfBmKfiCPi4PRAGGrxfDP7g=)
                          3: 6LKvF_6ld6s3n--fTX7f7BK_ehc.roa (hash: /eEnxWv6EmUP6K8zfowjl8E4hGLa0C38VlYeIpY/h7w=)
                          4: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: Bo98E9+hVXerhvH9ftDHM3ij7y2TvEouDekbpAb4BXA=)
                          5: GHJyTF0ORoaY9AckOmArWob3_HY.roa (hash: uI00sPFgBL2eDPBgh7Ys5Cfku0oem0hVhkVJpAs4CZg=)
                          6: QzNYXaK9Heg5iwI0_fdSvPsjX10.roa (hash: 7DicMrMZcYWPra55/EcMga9qpWnVA1JBNRCO/E/beAo=)
                          7: vsAEpL5w14p4gOY7B1dWMsDjDJI.roa (hash: ULT4TLN8aqk2Vz6VZZi8pMSOHDlIrdLD0OUPI10LgY0=)
                          8: wsgq7r0bmgVuGnMWeJq55bfKJ_U.roa (hash: TZU5rVeqp7nDnIs3V8dsH2Vbd18ixFe0rwWSFe7vxYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:6c:e0:35:48:c8:d3:a3:5c:5a:3d:52:8c:02:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jul 24 13:00:22 2026 GMT
            Not After : Jul 25 13:00:22 2026 GMT
        Subject: CN=6a45c058f4a0f1a72ced1ce0a9170df17f440cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ee:ed:a2:10:8b:40:cd:bf:8c:18:1e:0d:78:
                    73:71:b2:b8:1e:24:f0:08:28:5d:0c:31:22:f1:de:
                    fe:35:6b:77:04:0c:e2:e3:9f:d9:aa:41:33:99:ca:
                    63:e1:1b:53:b0:1f:58:e9:19:a7:c7:1e:a1:27:10:
                    ad:6a:ec:c5:59:6a:77:ce:5a:83:1e:a1:1c:9a:dc:
                    e5:20:a6:82:71:0a:86:03:e8:9c:8b:f8:c2:17:fb:
                    67:c5:b7:b3:07:91:f5:d6:d7:b9:78:c2:e8:2a:34:
                    f6:09:a7:d4:84:9e:99:ba:42:97:db:de:68:ef:a3:
                    9d:66:df:5a:ac:8e:be:61:9e:f2:a7:63:2b:28:78:
                    8e:27:a4:1a:de:d2:61:eb:a4:b9:98:88:4f:42:91:
                    8c:80:f6:00:52:d0:1a:48:cb:9d:ec:e9:dd:16:df:
                    5d:66:20:75:ef:ac:0c:5b:50:a0:b3:4e:46:ee:2a:
                    05:d8:97:da:da:b8:75:19:c7:5b:0a:72:b2:3c:9a:
                    76:1b:70:9e:34:75:5a:96:3e:07:2d:b5:e4:13:66:
                    03:23:1b:2f:5e:97:03:d7:43:5f:62:54:79:bc:3b:
                    4e:3f:02:60:a8:4d:13:42:8f:2b:bc:df:3f:35:68:
                    9c:99:47:3a:73:1a:c0:d0:74:7e:e1:6d:ac:88:c9:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:45:C0:58:F4:A0:F1:A7:2C:ED:1C:E0:A9:17:0D:F1:7F:44:0C:D8
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:79:a6:7e:fc:7c:7c:85:10:ba:b5:d4:a1:d5:c3:b6:81:af:
         14:d7:17:33:72:6e:0d:39:8b:15:3b:df:22:dd:c4:9a:dc:d0:
         fd:35:29:a1:93:1f:da:c9:3e:f5:36:c8:bc:a1:d5:c6:63:4d:
         42:db:a5:b4:23:15:9f:a2:20:4e:9f:51:dc:72:4b:18:24:af:
         e3:b1:b0:f3:a8:c1:04:bd:1b:6f:cb:c0:38:e1:fd:fa:c1:d9:
         ac:93:e3:f3:50:f3:f2:84:4f:c1:16:3e:4b:dc:b8:4b:c6:06:
         42:ae:49:de:7f:a1:66:de:8d:88:4b:c5:af:fc:71:a7:92:f3:
         44:42:a1:7a:38:e8:8e:84:30:6e:d5:13:f4:43:91:f8:24:8a:
         29:02:b5:f6:e3:52:a8:98:6f:9b:34:06:41:5f:86:11:5f:23:
         d6:f9:62:30:4e:86:89:fd:87:14:74:bd:f8:bb:33:5a:49:ac:
         fa:66:e3:4d:2f:df:ff:8b:76:a1:10:af:ae:69:3e:38:8b:05:
         31:cb:59:92:b3:04:a1:6f:62:cd:0a:c6:47:f0:72:ac:31:f2:
         f1:47:db:fb:41:0a:92:7a:88:58:73:a0:29:40:47:af:6f:87:
         06:2d:1f:ac:c6:64:1d:89:b5:03:f8:0f:14:71:40:32:5f:ce:
         ba:c5:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:40 2026 by rpki-client