Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
File:                     Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json)
Hash identifier:          X/N4hk5W43gkTCfndzo8NRNadXSDCimJ9ujFcTUQt2w=
Subject key identifier:   E9:64:B6:E3:1A:9A:51:62:FB:2F:82:32:58:D1:A7:8D:A0:25:02:79
Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A
Certificate issuer:       /CN=122a2ba3cc18c998501309ecde042706af5b845a
Certificate serial:       019F9624C89E63CBA297B87A9A6A67F87BAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 22:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:20 +0000
Files and hashes:         1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: 7+UhPuaJaMcA8wsnqSfVGsvdvnW0PbUxSOsgVovB+38=)
                          2: qv_0DGiqZIrviDnUY0UjmlA-rxA.roa (hash: tjO3NXsd+wFb/73NXf9/LYs4wwFfV042CQT23DEtDSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:24:c8:9e:63:cb:a2:97:b8:7a:9a:6a:67:f8:7b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a
        Validity
            Not Before: Jul 24 22:00:20 2026 GMT
            Not After : Jul 25 22:00:20 2026 GMT
        Subject: CN=e964b6e31a9a5162fb2f823258d1a78da0250279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d3:f7:74:62:21:0c:0f:75:4c:41:dc:b4:59:
                    e6:e7:f1:72:56:61:e6:e4:6a:f0:de:70:50:ca:89:
                    aa:81:5c:fc:83:8a:30:f9:46:29:ef:64:53:47:a7:
                    bf:7a:77:dc:63:b8:3e:91:14:1c:bc:9b:c5:e9:f7:
                    fe:a5:85:2a:91:ec:b2:4d:60:b8:78:8d:41:ca:d7:
                    44:a3:f6:2b:14:79:98:98:92:1e:90:6d:d7:6c:e5:
                    3a:cd:3a:ce:25:81:74:39:4b:51:20:2b:85:60:23:
                    0c:bd:89:12:fb:9a:1a:be:50:7c:c4:2c:5c:63:46:
                    b1:ba:c0:d7:18:5b:48:be:c4:1f:8e:bf:4e:e4:9b:
                    44:e9:30:9a:cc:fc:68:e8:7d:76:5f:48:11:51:41:
                    43:38:be:62:b0:af:2f:69:b2:90:7a:43:c8:93:26:
                    2a:f4:62:b1:d1:11:7d:5d:47:29:c1:ca:79:f2:20:
                    bc:32:0b:33:45:fc:3d:02:84:42:eb:78:e7:45:7f:
                    7c:b3:a2:88:30:76:5d:dc:b2:bb:f7:f0:90:75:45:
                    84:fb:43:57:0c:f9:9b:2e:9d:ea:cb:52:9d:08:e0:
                    89:30:ed:d8:39:37:80:25:fd:62:07:ea:1f:84:b0:
                    84:83:16:69:8a:01:1b:26:c2:fe:07:45:6b:73:ff:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:64:B6:E3:1A:9A:51:62:FB:2F:82:32:58:D1:A7:8D:A0:25:02:79
            X509v3 Authority Key Identifier:
                keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:4d:99:8e:2b:b5:46:69:58:c9:9e:85:06:1f:91:bf:bb:9a:
         81:89:ec:99:d2:2c:e7:4d:7c:bc:7d:ea:40:52:ae:6d:fc:28:
         1a:2b:c0:2a:ce:7b:ac:d2:87:1d:6e:ef:3b:9f:31:b8:de:4b:
         d4:a3:ea:d5:6b:7f:e4:7b:43:cf:7d:0e:fa:0f:34:1a:13:64:
         8c:44:69:f9:2a:66:31:c9:18:51:9b:3f:be:d5:f8:7c:d6:c6:
         cb:9b:f6:46:dd:ac:db:5f:a7:de:1d:5a:76:88:7f:75:64:90:
         8c:3f:0a:57:e4:b1:be:d7:1a:34:bb:bf:25:6b:2c:01:c8:79:
         bd:71:4a:10:81:ed:94:fd:71:f8:78:e4:80:cc:e1:3a:b6:e8:
         c2:ef:67:99:27:2f:47:cb:dd:df:aa:2c:52:d3:92:f3:30:36:
         9e:cc:22:ef:eb:86:c3:63:a0:3b:cd:36:3a:c1:e2:98:e9:3f:
         52:b5:a0:b0:43:02:e7:77:d3:2e:bf:b1:b4:b1:bb:ac:f5:c8:
         72:ac:9f:2f:de:ab:17:e8:62:35:85:a5:31:70:88:e0:09:4b:
         7a:9a:8d:8d:6e:f4:12:46:62:ac:ca:27:81:b9:be:64:2e:8c:
         f6:69:fe:0b:ea:a7:c8:b9:ef:a7:1d:05:25:02:45:5c:34:09:
         2a:f5:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:05:33 2026 by rpki-client