Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
File:                     E-xHMfECwwzBPi-1p_l1jOqWNFI.mft (raw, json)
Hash identifier:          jkxCIWjwt+GidcDeOuEVmqts6/pGAHgfKpTxdlkexto=
Subject key identifier:   06:CB:02:18:87:64:AA:60:4C:42:40:DE:6C:BF:CC:1C:0C:47:FC:FE
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Certificate issuer:       /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial:       019F9692F494F0175EA216DFA8554A4EACAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
Manifest number:          1707
Signing time:             Sat 25 Jul 2026 00:00:40 +0000
Manifest this update:     Sat 25 Jul 2026 00:00:40 +0000
Manifest next update:     Sun 26 Jul 2026 00:00:40 +0000
Files and hashes:         1: E-xHMfECwwzBPi-1p_l1jOqWNFI.crl (hash: lV5ZcOUHLRH1s/hO/MnHQQ2zHLiKL5gnE0eFMOsAaYA=)
                          2: EytAFLfPtvcTOd1_vf7gG34nqnY.roa (hash: OUuDIN625yK+1wDnIM653C5qwt6RgJbVBXW0c2PFte4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:92:f4:94:f0:17:5e:a2:16:df:a8:55:4a:4e:ac:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
        Validity
            Not Before: Jul 25 00:00:40 2026 GMT
            Not After : Jul 26 00:00:40 2026 GMT
        Subject: CN=06cb02188764aa604c4240de6cbfcc1c0c47fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bd:16:35:39:1b:f9:34:06:b3:d5:64:6a:89:
                    61:bc:62:68:1e:e1:df:d7:29:d9:60:1a:92:a3:de:
                    96:82:1f:aa:61:fe:52:f4:ff:70:bb:5d:e5:0d:74:
                    29:b8:d3:54:c7:37:df:4c:38:4c:ca:c3:65:28:8e:
                    7b:61:8e:53:3e:fb:e2:80:08:b7:2e:b4:e3:e7:b4:
                    db:c6:fd:ea:79:30:5a:8c:5a:89:df:43:ad:94:88:
                    d8:97:8c:9b:10:d3:0c:e6:28:33:3f:32:ae:4a:ca:
                    5b:d5:c3:6f:e7:1c:99:32:61:f6:d0:6a:cc:8f:33:
                    85:5a:e1:76:ab:f6:54:65:de:6e:c9:aa:54:63:07:
                    64:f7:a6:3b:8c:52:d4:e8:99:98:63:80:1b:76:65:
                    75:77:22:29:99:46:ef:a3:f5:ed:43:e5:ca:85:fd:
                    98:ab:c0:e4:bf:a6:1e:b0:ad:52:14:33:15:59:af:
                    7d:59:0e:d6:a7:ef:6e:00:0b:2d:e4:1e:0c:00:df:
                    16:b3:e9:9e:8e:61:46:57:bc:dd:9f:5b:a1:2b:3d:
                    f8:9d:b7:40:93:94:06:8b:ca:52:0f:16:c6:37:48:
                    74:70:56:64:4b:5f:60:7e:9e:6d:bf:f6:15:f1:72:
                    93:10:b8:7c:34:19:d7:16:79:53:2e:a9:52:3b:a9:
                    d6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:02:18:87:64:AA:60:4C:42:40:DE:6C:BF:CC:1C:0C:47:FC:FE
            X509v3 Authority Key Identifier:
                keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:d8:d4:3c:77:e8:a8:08:43:9b:b6:81:5d:64:57:21:ca:aa:
         8f:ea:a5:da:7c:50:e2:7a:b6:5d:c4:e8:32:a7:63:d3:43:e2:
         b3:1e:40:d6:eb:5b:63:bf:a7:ed:1c:b7:ff:a9:5a:cd:93:90:
         b6:73:bb:0d:47:00:e5:94:6a:d6:be:b5:97:eb:87:a2:84:b4:
         de:d2:0a:b0:c7:c7:94:72:4d:de:18:93:8b:e3:b5:6b:6d:3c:
         2d:e4:27:4a:46:66:22:62:4c:ef:98:a7:75:b9:30:8c:55:67:
         cf:2b:7e:10:6c:a5:d5:78:0a:2e:f2:af:58:df:e4:23:94:83:
         d5:61:b4:84:90:5c:57:b2:08:6f:5a:56:ec:72:93:3a:13:c3:
         10:35:05:4a:cf:ab:9c:ed:c7:0e:1e:21:84:88:e1:2a:c7:bd:
         a0:d2:e1:31:24:1a:1d:e5:4a:3e:6d:3f:86:85:c7:61:75:82:
         33:92:88:43:b0:a2:30:91:48:bf:88:b6:42:25:fc:8b:47:a6:
         6e:09:ac:3c:5f:07:71:c1:0b:5b:bf:6a:04:61:95:a1:2d:39:
         10:47:05:46:c9:29:32:12:ef:20:16:bb:fa:ba:4f:c8:e3:67:
         89:95:0b:45:98:76:70:3f:5b:49:a9:e8:a3:63:79:13:66:99:
         00:97:62:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WkvSU8BdeohbfqFVKTqyvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWM0NzMxZjEwMmMzMGNjMTNlMmZiNWE3Zjk3NThjZWE5
NjM0NTIwHhcNMjYwNzI1MDAwMDQwWhcNMjYwNzI2MDAwMDQwWjAzMTEwLwYDVQQD
EygwNmNiMDIxODg3NjRhYTYwNGM0MjQwZGU2Y2JmY2MxYzBjNDdmY2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L0WNTkb+TQGs9VkaolhvGJoHuHf
1ynZYBqSo96Wgh+qYf5S9P9wu13lDXQpuNNUxzffTDhMysNlKI57YY5TPvvigAi3
LrTj57Tbxv3qeTBajFqJ30OtlIjYl4ybENMM5igzPzKuSspb1cNv5xyZMmH20GrM
jzOFWuF2q/ZUZd5uyapUYwdk96Y7jFLU6JmYY4AbdmV1dyIpmUbvo/XtQ+XKhf2Y
q8Dkv6YesK1SFDMVWa99WQ7Wp+9uAAst5B4MAN8Ws+mejmFGV7zdn1uhKz34nbdA
k5QGi8pSDxbGN0h0cFZkS19gfp5tv/YV8XKTELh8NBnXFnlTLqlSO6nWAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbLAhiHZKpgTEJA3my/zBwMR/z+MB8GA1UdIwQY
MBaAFBPsRzHxAsMMwT4vtaf5dYzqljRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAt
ZDQxYmNjOTI4Mzc1LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85ODJmMWQtNDEyMS00NmI1LWFkZDAtZDQxYmNjOTI4Mzc1
LzEvRS14SE1mRUN3d3pCUGktMXBfbDFqT3FXTkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtjUPHfo
qAhDm7aBXWRXIcqqj+ql2nxQ4nq2XcToMqdj00Pisx5A1utbY7+n7Ry3/6lazZOQ
tnO7DUcA5ZRq1r61l+uHooS03tIKsMfHlHJN3hiTi+O1a208LeQnSkZmImJM75in
dbkwjFVnzyt+EGyl1XgKLvKvWN/kI5SD1WG0hJBcV7IIb1pW7HKTOhPDEDUFSs+r
nO3HDh4hhIjhKse9oNLhMSQaHeVKPm0/hoXHYXWCM5KIQ7CiMJFIv4i2QiX8i0em
bgmsPF8HccELW79qBGGVoS05EEcFRskpMhLvIBa7+rpPyONniZULRZh2cD9bSano
o2N5E2aZAJdiVg==
-----END CERTIFICATE-----
Generated at Sat Jul 25 06:35:38 2026 by rpki-client