Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
File:                     EiDdK5LaKExjzsRvb2pBwBOpyIE.mft (raw, json)
Hash identifier:          +6ozWCFg9g2m+9pxeZNSPd4G2i3w0sgeHG5QC1JpGf0=
Subject key identifier:   B6:71:B1:22:17:EF:D5:A6:A4:B8:B2:BB:90:90:81:07:B3:39:CA:6F
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Certificate issuer:       /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial:       019F91DA8120B1BE475AD7E84A47C33479B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
Manifest number:          12BD
Signing time:             Fri 24 Jul 2026 02:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:43 +0000
Files and hashes:         1: EiDdK5LaKExjzsRvb2pBwBOpyIE.crl (hash: 5Vv7Jo/d7hBZpxkz/TM73TbCy2uQx0ajU27TOKYCWAc=)
                          2: M1xpquK399A5wByDEtKHq_wqClk.roa (hash: zVgRyEKABrkhckv/3fAzW08qm0hqJsbaTBszAR7kayA=)
                          3: kkk3yXE8XoIEDRsGs9EdkpoqcD8.roa (hash: k6wchoXLvZ9SOEunorfauAloLI47oJBy9bourGp1I0s=)
                          4: muPGRcmARPddaHREVLuAaLLzFEM.roa (hash: 8DfdChKzrQe9Wu4l2fprWgGRtA6D3e1jiM5zqPRZkgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:81:20:b1:be:47:5a:d7:e8:4a:47:c3:34:79:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
        Validity
            Not Before: Jul 24 02:00:43 2026 GMT
            Not After : Jul 25 02:00:43 2026 GMT
        Subject: CN=b671b12217efd5a6a4b8b2bb90908107b339ca6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:25:ef:7d:e2:e4:ef:ab:df:15:be:9f:03:c9:
                    3f:74:2e:d6:08:31:57:d9:8c:9a:e7:30:e5:f0:68:
                    16:88:2d:22:77:3b:d8:5a:f0:a2:24:48:7a:fe:12:
                    6c:c7:c0:d8:75:9e:68:91:ab:a2:d2:bc:02:92:97:
                    d3:eb:e0:83:98:dc:be:e7:5e:fd:29:d9:92:cf:bc:
                    09:09:82:e4:e2:f4:1f:44:15:e5:a6:f5:51:41:3f:
                    4b:5e:6c:5e:af:a0:a4:8a:ca:73:e0:f0:32:57:04:
                    b6:28:02:0f:e3:75:92:11:09:13:7f:e3:8b:11:a4:
                    cd:48:1e:e6:c9:5e:a2:ee:8c:64:d2:12:21:33:22:
                    7b:7c:87:8e:1c:17:1c:55:de:49:fe:8d:ac:a8:62:
                    a1:3a:62:8f:f0:74:53:02:b2:00:02:b8:da:a8:be:
                    52:59:e6:42:ee:cd:34:f4:45:b9:f0:4f:08:4f:b3:
                    b4:21:13:25:13:b9:ff:48:22:16:0e:e3:0c:e6:e6:
                    6a:37:75:40:a6:82:a0:02:b9:08:a8:79:78:2f:12:
                    9c:71:c0:6a:b8:0c:6b:93:e3:9a:85:6d:14:1c:0b:
                    75:d3:6d:31:e5:91:c0:8b:d8:d1:67:b6:ae:fd:73:
                    85:d5:a9:86:ec:f2:a6:19:b0:3f:ea:44:c5:da:c1:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:B1:22:17:EF:D5:A6:A4:B8:B2:BB:90:90:81:07:B3:39:CA:6F
            X509v3 Authority Key Identifier:
                keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:24:33:3b:80:a3:c2:ea:e7:7b:12:b2:c8:f0:8d:ac:c8:fb:
         e6:7e:35:78:1e:66:40:8e:6f:9d:84:8b:c7:ae:d4:84:c4:d6:
         21:fe:ef:30:af:fa:18:d7:5d:f4:b1:81:73:33:db:5f:07:e6:
         58:90:3b:f9:68:e3:38:06:e8:b6:11:a3:2c:33:95:8d:82:47:
         94:0f:ed:45:a5:d2:4b:4b:57:95:54:af:e8:6b:e9:26:ca:71:
         b9:7e:61:f5:0c:f8:72:45:bd:19:0f:84:14:7e:43:a0:4c:f0:
         44:26:16:4b:ce:11:b5:19:a7:9e:ef:6b:0e:34:51:30:36:d2:
         b6:40:65:b3:94:be:44:1f:82:68:f7:6c:7f:fd:d2:b2:31:7e:
         81:92:be:47:56:8d:cb:bd:e8:71:6e:c5:64:56:2d:9a:c7:58:
         20:50:f3:59:90:f5:4e:59:57:e5:97:56:fc:d2:25:bf:bc:72:
         53:28:fd:ab:38:3c:68:0c:f2:0d:8e:43:42:3b:a0:fe:9e:97:
         87:b8:a5:1b:7e:57:14:d3:ed:61:13:13:e4:19:c4:fd:a1:75:
         e8:e0:26:8f:ee:58:92:bb:da:b4:e4:5d:03:07:e4:96:3a:2f:
         55:b6:dd:6e:42:01:52:8e:b5:8e:bd:9e:8f:c1:6f:ee:34:4e:
         8b:fd:9b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2oEgsb5HWtfoSkfDNHm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjBkZDJiOTJkYTI4NGM2M2NlYzQ2ZjZmNmE0MWMwMTNh
OWM4ODEwHhcNMjYwNzI0MDIwMDQzWhcNMjYwNzI1MDIwMDQzWjAzMTEwLwYDVQQD
EyhiNjcxYjEyMjE3ZWZkNWE2YTRiOGIyYmI5MDkwODEwN2IzMzljYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySXvfeLk76vfFb6fA8k/dC7WCDFX
2Yya5zDl8GgWiC0idzvYWvCiJEh6/hJsx8DYdZ5okaui0rwCkpfT6+CDmNy+5179
KdmSz7wJCYLk4vQfRBXlpvVRQT9LXmxer6Ckispz4PAyVwS2KAIP43WSEQkTf+OL
EaTNSB7myV6i7oxk0hIhMyJ7fIeOHBccVd5J/o2sqGKhOmKP8HRTArIAArjaqL5S
WeZC7s009EW58E8IT7O0IRMlE7n/SCIWDuMM5uZqN3VApoKgArkIqHl4LxKcccBq
uAxrk+OahW0UHAt1020x5ZHAi9jRZ7au/XOF1amG7PKmGbA/6kTF2sH4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLZxsSIX79WmpLiyu5CQgQezOcpvMB8GA1UdIwQY
MBaAFBIg3SuS2ihMY87Eb29qQcATqciBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWIt
YTg1ODU4NDliZTE0LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8zYjhmM2ItZWJmMC00Y2I3LWE0OWItYTg1ODU4NDliZTE0
LzEvRWlEZEs1TGFLRXhqenNSdmIycEJ3Qk9weUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESQzO4Cj
wurnexKyyPCNrMj75n41eB5mQI5vnYSLx67UhMTWIf7vMK/6GNdd9LGBczPbXwfm
WJA7+WjjOAbothGjLDOVjYJHlA/tRaXSS0tXlVSv6GvpJspxuX5h9Qz4ckW9GQ+E
FH5DoEzwRCYWS84RtRmnnu9rDjRRMDbStkBls5S+RB+CaPdsf/3SsjF+gZK+R1aN
y73ocW7FZFYtmsdYIFDzWZD1TllX5ZdW/NIlv7xyUyj9qzg8aAzyDY5DQjug/p6X
h7ilG35XFNPtYRMT5BnE/aF16OAmj+5YkrvatORdAwfkljovVbbdbkIBUo61jr2e
j8Fv7jROi/2b4A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:15 2026 by rpki-client