Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          bR1i9qGDEch7eHyeAtXunRjHI7mPWw2CW5sC52Bq4Cw=
Subject key identifier:   75:7B:B2:8C:26:C7:62:2C:32:60:FB:9A:F1:B0:71:2C:8B:CA:F1:0F
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019F905A6BD1904A12242AB9DD3D23D8CC0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          19E3
Signing time:             Thu 23 Jul 2026 19:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:12 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: 6v34oXEpYQpfTcwP9fO7nU99azd7GvEJ+MqBCxsCyqU=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:6b:d1:90:4a:12:24:2a:b9:dd:3d:23:d8:cc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jul 23 19:01:12 2026 GMT
            Not After : Jul 24 19:01:12 2026 GMT
        Subject: CN=757bb28c26c7622c3260fb9af1b0712c8bcaf10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:97:40:cd:63:a2:66:8b:36:78:5c:2f:d5:
                    5d:62:93:1f:89:ec:98:65:2e:f2:00:ce:26:b7:54:
                    0c:8f:d6:0c:0c:10:bc:3f:d5:64:bb:f7:bf:70:b0:
                    6b:25:45:0c:fa:80:c4:78:d6:8a:d4:a0:13:18:b1:
                    da:b8:55:ca:4e:87:d4:62:fd:79:be:5a:93:ac:81:
                    b6:ab:5d:42:9f:47:0f:72:28:68:f9:64:61:5e:2f:
                    8a:7d:ad:53:1f:7e:80:9e:41:4c:5a:3c:5e:8d:21:
                    b9:df:1c:fe:77:e9:40:e6:bc:f2:0e:03:0a:b4:ea:
                    8b:f4:fe:5a:a4:18:be:8a:e0:5d:8d:7e:c0:82:ac:
                    9e:e0:37:14:a4:02:f8:7e:d3:a6:77:e7:4f:da:fd:
                    b7:b6:86:fa:70:73:a6:cc:6a:8c:b2:9a:38:c9:1e:
                    57:52:c8:36:19:6a:3f:8f:ed:dd:eb:bd:6b:5f:2b:
                    2c:58:66:fe:f5:78:7d:f0:b4:2c:9d:e6:cd:b2:89:
                    5a:c5:20:e1:3b:5e:e8:49:fb:21:06:30:fb:b3:fd:
                    67:98:87:78:47:d3:ba:d7:9b:39:b8:20:1c:6e:24:
                    a0:bb:f0:bc:48:43:4e:d6:dd:a7:67:99:8d:e2:dd:
                    22:0b:2d:8b:ee:90:00:ef:21:c6:b0:be:93:05:eb:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7B:B2:8C:26:C7:62:2C:32:60:FB:9A:F1:B0:71:2C:8B:CA:F1:0F
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:52:81:ff:05:c1:f4:17:1b:f0:d0:84:6d:90:ac:f4:eb:4a:
         43:40:20:6a:42:78:91:6e:31:5c:4b:49:45:2a:75:b7:d6:89:
         62:e9:9b:a7:8b:a9:92:8f:4e:fc:5c:5e:3e:c3:6b:7f:52:ff:
         a6:db:5f:76:93:53:94:b8:c2:46:24:33:c2:ea:07:c8:f6:78:
         5c:d8:27:ec:c5:c0:5f:73:d7:a0:5c:6b:77:34:b0:bf:85:7c:
         93:fd:7d:2e:df:2c:79:2e:bf:90:1e:15:d0:6e:74:c5:7a:5a:
         88:ea:28:41:92:60:7d:37:86:5b:c8:c0:55:d8:84:f7:44:cb:
         c7:ab:66:6c:9c:81:1e:52:53:c9:c6:4c:53:8b:b3:f4:e9:a6:
         bd:5e:ff:1c:b2:aa:fc:57:26:3a:0e:42:64:99:4d:ec:a8:12:
         4e:c1:a9:a6:71:4f:29:56:e9:ea:a6:58:2c:6b:3c:8c:e0:eb:
         2d:fe:e1:6b:cc:cf:73:c6:77:60:3d:df:f0:db:67:6e:2c:d7:
         30:7f:5d:35:74:28:78:a8:92:47:8c:50:c0:85:fa:34:df:dd:
         92:87:62:1b:e1:7a:fe:bc:62:c0:7c:06:b7:e5:24:74:e7:47:
         f4:c8:49:0c:a4:9e:c9:e8:d0:ea:20:13:ec:1d:08:d7:22:8c:
         41:05:e0:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmvRkEoSJCq53T0j2MwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNDVkYWNjODM3Nzk4YzNlNmNmMzFmNGQyNzk0NmEzM2Iw
ZGU2NjEwHhcNMjYwNzIzMTkwMTEyWhcNMjYwNzI0MTkwMTEyWjAzMTEwLwYDVQQD
Eyg3NTdiYjI4YzI2Yzc2MjJjMzI2MGZiOWFmMWIwNzEyYzhiY2FmMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUKXQM1jomaLNnhcL9VdYpMfieyY
ZS7yAM4mt1QMj9YMDBC8P9Vku/e/cLBrJUUM+oDEeNaK1KATGLHauFXKTofUYv15
vlqTrIG2q11Cn0cPciho+WRhXi+Kfa1TH36AnkFMWjxejSG53xz+d+lA5rzyDgMK
tOqL9P5apBi+iuBdjX7Agqye4DcUpAL4ftOmd+dP2v23tob6cHOmzGqMspo4yR5X
Usg2GWo/j+3d671rXyssWGb+9Xh98LQsnebNsolaxSDhO17oSfshBjD7s/1nmId4
R9O615s5uCAcbiSgu/C8SENO1t2nZ5mN4t0iCy2L7pAA7yHGsL6TBeu8swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHV7sowmx2IsMmD7mvGwcSyLyvEPMB8GA1UdIwQY
MBaAFBBF2syDd5jD5s8x9NJ5RqM7DeZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEt
OWMxNzRlNTNlNGZlLzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8yNjZjYWYtM2I0My00OWUwLWI2ZTEtOWMxNzRlNTNlNGZl
LzEvRUVYYXpJTjNtTVBtenpIMDBubEdvenNONW1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVKB/wXB
9Bcb8NCEbZCs9OtKQ0AgakJ4kW4xXEtJRSp1t9aJYumbp4upko9O/FxePsNrf1L/
pttfdpNTlLjCRiQzwuoHyPZ4XNgn7MXAX3PXoFxrdzSwv4V8k/19Lt8seS6/kB4V
0G50xXpaiOooQZJgfTeGW8jAVdiE90TLx6tmbJyBHlJTycZMU4uz9OmmvV7/HLKq
/FcmOg5CZJlN7KgSTsGppnFPKVbp6qZYLGs8jODrLf7ha8zPc8Z3YD3f8NtnbizX
MH9dNXQoeKiSR4xQwIX6NN/dkodiG+F6/rxiwHwGt+UkdOdH9MhJDKSeyejQ6iAT
7B0I1yKMQQXgtA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:00:49 2026 by rpki-client