Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File:                     eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier:          JmCEaw8QikOuI/qkPu8V7xTFahaq58GuFypjP5TPqfg=
Subject key identifier:   0C:D7:9B:B7:4B:7D:AD:3C:03:C9:58:95:7E:D0:CC:07:3B:10:3B:9E
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer:       /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial:       019F927F5E58AAC8320AE8D0F8BEB51FE3E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number:          02E1
Signing time:             Fri 24 Jul 2026 05:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:48 +0000
Files and hashes:         1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
                          2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: 0Mvy7U1+3mhehudjnEy5SXgoorIXc/1q95Lc+GjpE4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:5e:58:aa:c8:32:0a:e8:d0:f8:be:b5:1f:e3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
        Validity
            Not Before: Jul 24 05:00:48 2026 GMT
            Not After : Jul 25 05:00:48 2026 GMT
        Subject: CN=0cd79bb74b7dad3c03c958957ed0cc073b103b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b6:b8:41:1c:05:c1:0f:cc:73:c3:fd:6e:06:
                    73:9b:30:ad:37:f6:ad:17:43:db:22:48:6a:2a:f1:
                    ca:81:76:08:31:4e:0f:03:be:99:96:82:a8:9d:f6:
                    02:ef:93:4f:74:bd:31:97:79:be:0a:c3:a4:46:81:
                    66:14:a2:40:d7:0e:e8:53:8f:41:5d:4e:86:ef:f3:
                    cd:87:f8:2a:1c:4f:bc:98:6c:26:9f:27:24:fa:c7:
                    37:6d:f8:3a:8a:3d:7a:6b:5b:d7:f1:67:5b:77:29:
                    d4:94:47:45:c5:8c:32:85:c8:e8:20:f4:4b:5e:1f:
                    50:da:e2:c2:f8:78:f7:51:3a:91:42:e5:10:69:d8:
                    9f:e6:95:4f:20:ad:a1:95:c3:f7:63:eb:d4:bd:ef:
                    91:8e:c6:dd:75:b8:75:bb:d8:65:81:05:90:53:7f:
                    04:a5:8d:18:1d:93:06:73:71:57:99:65:7b:78:83:
                    21:27:5d:cb:cb:f1:9b:e1:86:4c:99:43:de:20:90:
                    7a:db:e9:ff:f7:1c:77:02:28:0f:04:43:ba:12:29:
                    00:ae:fb:e3:77:44:b7:09:db:18:ea:5d:7c:8f:b1:
                    e9:e7:4d:cf:d0:e5:c9:9e:47:54:c9:4e:99:12:75:
                    e6:2b:a0:33:af:09:16:69:21:39:d6:98:70:16:08:
                    c2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:9B:B7:4B:7D:AD:3C:03:C9:58:95:7E:D0:CC:07:3B:10:3B:9E
            X509v3 Authority Key Identifier:
                keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:5c:bf:2a:7c:51:f6:ea:ac:08:0f:50:f4:24:97:a5:22:00:
         97:3d:fb:a2:49:65:05:d7:a8:a5:0d:78:98:a8:6f:58:91:95:
         bd:98:31:3b:65:6b:cb:cf:8f:e3:e2:38:d7:1b:f6:0d:24:79:
         ff:3c:fa:d4:42:10:7d:04:ae:fc:a1:9a:95:ef:fc:e5:1b:67:
         d0:fa:64:76:98:bf:fb:1b:70:98:a6:f5:c4:cc:c1:af:df:d0:
         de:28:2b:9e:32:4a:7c:93:9a:e1:c2:2a:f5:3d:e6:60:ab:b0:
         fd:07:51:d2:75:f7:25:8d:36:67:b5:92:73:95:56:ce:ea:29:
         20:da:37:85:84:82:b2:6a:13:f8:18:6a:14:b6:b9:5b:6e:42:
         39:2a:0e:4d:8f:bd:75:3f:94:f4:97:74:79:af:2d:67:98:c6:
         ff:57:f2:07:fb:40:6e:3f:50:b6:61:8a:74:1a:bb:8e:11:1f:
         e8:de:9e:38:23:34:2f:25:2e:e9:dc:a9:bb:36:f1:60:af:4f:
         9a:fb:fc:7b:c4:d2:3f:fd:f8:6a:3a:74:f2:39:23:e1:67:54:
         a8:d9:5a:47:5d:63:84:49:50:a0:cd:1a:65:f3:ee:b9:fd:57:
         43:c3:a4:6d:bf:04:31:4f:1e:c4:89:5f:1e:cc:38:ed:3b:31:
         dc:aa:0b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:37 2026 by rpki-client