Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
File:                     eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json)
Hash identifier:          GbB644FPYlMRbJAiYiEIwEiedhfsOsbSlCbSwL+VB8I=
Subject key identifier:   51:31:97:EA:06:08:A0:3D:97:DA:66:1B:B6:2E:70:70:E0:A3:31:EB
Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93
Certificate issuer:       /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
Certificate serial:       019F94A495CCDD26AE8CCA1B352B8A7E905B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
Manifest number:          164E
Signing time:             Fri 24 Jul 2026 15:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:41 +0000
Files and hashes:         1: Oy65Flm_uwrvJdQB08a6SJ4kW8I.roa (hash: fu4fm6NabdEAcEXhd0h2UuWDUtPed2OsOBwT+zaFccI=)
                          2: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: 9r/s9wrWg91t9a+EHY8AeuOZjiY4yt0agvGt008BYas=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:95:cc:dd:26:ae:8c:ca:1b:35:2b:8a:7e:90:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893
        Validity
            Not Before: Jul 24 15:00:41 2026 GMT
            Not After : Jul 25 15:00:41 2026 GMT
        Subject: CN=513197ea0608a03d97da661bb62e7070e0a331eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:18:ad:1d:b5:14:ac:5e:4b:0a:c4:d2:ca:af:
                    64:57:93:88:bb:4e:0f:4e:b4:9c:d1:3e:0c:02:a6:
                    87:62:a0:11:b3:32:8f:ed:5a:6e:2c:c5:29:58:af:
                    71:94:b4:a2:a8:f0:97:0f:f5:0a:e4:95:e8:d3:7e:
                    89:08:59:1a:fc:83:9e:04:a9:b6:41:bc:cc:52:80:
                    d9:49:df:34:60:bd:1c:60:6e:17:fe:78:b5:e3:cd:
                    1b:2f:2b:e0:bc:7c:c8:47:b0:b9:43:50:b9:b4:7b:
                    6b:7a:b2:d4:29:0e:b1:9c:cc:47:9b:e2:73:9d:90:
                    61:9c:56:12:5e:d1:fd:02:e3:cc:04:01:22:12:fd:
                    cd:15:d7:ca:a6:56:8b:1f:93:c5:b9:42:19:4a:9f:
                    ed:5b:d1:bd:41:36:a9:07:8a:c3:5d:b9:bd:b8:4e:
                    05:08:14:e8:d7:7c:42:35:1e:1b:f2:39:f7:8e:60:
                    42:8b:ca:ae:04:5f:3b:70:8d:d8:d1:f5:76:f3:56:
                    6d:ce:ba:d1:d4:ed:ba:ff:9e:86:37:91:0e:81:2c:
                    34:1f:4f:09:86:70:57:6b:ee:f5:16:fe:3e:51:08:
                    4f:f7:36:3f:83:55:49:44:f5:31:09:81:13:be:da:
                    ff:d1:1a:e8:2e:ae:ec:a7:49:ca:40:62:f8:9d:2b:
                    28:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:31:97:EA:06:08:A0:3D:97:DA:66:1B:B6:2E:70:70:E0:A3:31:EB
            X509v3 Authority Key Identifier:
                keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a4:a9:6c:34:47:28:a3:e5:36:7d:f8:da:99:54:7e:2f:2a:
         39:7f:ce:ad:0f:60:33:df:5b:c7:e8:3b:54:fb:4e:be:fa:05:
         7b:01:65:8f:09:13:9e:74:50:c6:65:c0:65:7b:f1:b9:23:33:
         84:c3:01:0a:d1:f0:5a:39:6a:43:3b:a2:65:69:35:79:5b:97:
         e1:18:c3:9c:da:85:86:8e:60:75:49:a6:5a:7e:dc:28:09:ce:
         86:8b:a2:ad:32:13:77:a3:a7:e0:2c:ed:a0:a8:a7:fe:de:1f:
         6e:c7:0c:a3:3a:eb:f7:b0:ed:7e:53:75:0f:04:c2:b9:ff:0e:
         93:19:55:2d:37:9a:c6:45:7d:96:1f:ea:18:58:3c:9a:91:9e:
         f1:1a:0e:48:68:e9:1b:30:f5:25:d2:07:12:1c:3c:6c:1f:86:
         5e:a1:c0:b4:9c:ea:0a:64:fe:83:a1:4a:73:42:15:22:1d:76:
         a7:01:5d:59:0e:4a:16:fc:e7:87:81:e9:4e:4a:69:50:84:7d:
         bf:90:dc:5e:b7:ca:36:0f:64:7a:8f:e2:28:aa:94:3e:d5:46:
         be:42:ce:85:dd:74:93:c1:b6:78:4b:4e:30:b2:60:81:e0:aa:
         77:d9:2e:79:48:fd:bc:84:a3:07:ac:89:ea:31:ca:a5:b7:5c:
         56:2d:aa:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:58 2026 by rpki-client