Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
File:                     EVVnl9qc5x7sKV81sAhZuQzoxfA.mft (raw, json)
Hash identifier:          WC4Xwf8kJkMAUhBGSNNAOfI12D5J+wWkIPDQfCRbq0s=
Subject key identifier:   E2:81:0B:A3:A3:33:91:8B:D6:50:F8:61:4A:6A:79:09:9D:4D:AE:3D
Authority key identifier: 11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0
Certificate issuer:       /CN=11556797da9ce71eec295f35b00859b90ce8c5f0
Certificate serial:       019F95122C14736F27C42DBD8D47AE38D42C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
Manifest number:          01E0
Signing time:             Fri 24 Jul 2026 17:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:23 +0000
Files and hashes:         1: EVVnl9qc5x7sKV81sAhZuQzoxfA.crl (hash: IWAd2oArdhedNtHYwN20TS9cXtGRnavVCjxXY5TDWrY=)
                          2: tUtGKToVFVEdLnvzwP_qbyoWrD4.roa (hash: oDawWr/gCtZY5IlLhtFkFwJPnj3rhzKF04OEEY7CZlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:2c:14:73:6f:27:c4:2d:bd:8d:47:ae:38:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11556797da9ce71eec295f35b00859b90ce8c5f0
        Validity
            Not Before: Jul 24 17:00:23 2026 GMT
            Not After : Jul 25 17:00:23 2026 GMT
        Subject: CN=e2810ba3a333918bd650f8614a6a79099d4dae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:d6:d2:d5:35:0e:a0:74:3d:ed:41:cb:68:
                    43:3d:14:5a:f8:f8:41:a6:22:3a:70:66:2f:f1:91:
                    95:e8:a5:08:99:b3:17:be:41:0e:16:6c:08:31:c8:
                    44:a5:05:ba:e8:a4:01:92:bd:fd:c0:95:79:06:97:
                    67:f7:4f:f0:df:c2:00:94:bf:de:74:62:ec:7a:eb:
                    8e:6d:de:73:39:30:7a:3f:75:5e:73:1f:8f:fa:c9:
                    2f:91:b2:9a:4a:75:4a:37:a8:01:7d:83:7c:bc:c4:
                    4f:58:9d:54:a9:dc:33:45:53:02:43:c9:ee:0b:fb:
                    88:a7:7b:4d:77:c2:50:32:d4:92:00:a3:e9:93:52:
                    ee:44:6c:29:48:68:47:d6:18:c8:7a:5f:c7:c6:bd:
                    2b:69:12:4f:0e:6f:eb:ed:46:85:24:ad:5f:43:3e:
                    e0:16:39:a3:9f:58:6a:37:62:ef:b5:3e:f0:a4:e9:
                    f0:36:e0:81:1e:9e:a6:92:8a:fa:33:43:f9:1f:36:
                    43:86:9e:07:ed:d7:4c:6d:e8:1c:ad:21:9a:f2:2e:
                    0f:40:72:de:a0:38:73:86:b3:01:9a:5c:fd:f4:34:
                    d0:65:a0:87:c2:4f:2d:42:29:2f:78:b7:4b:f9:61:
                    e3:21:fe:aa:65:cc:b9:15:9a:34:29:1a:1b:79:6a:
                    03:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:81:0B:A3:A3:33:91:8B:D6:50:F8:61:4A:6A:79:09:9D:4D:AE:3D
            X509v3 Authority Key Identifier:
                keyid:11:55:67:97:DA:9C:E7:1E:EC:29:5F:35:B0:08:59:B9:0C:E8:C5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EVVnl9qc5x7sKV81sAhZuQzoxfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4696e5-fcec-44a0-8f03-1eeda9a9ff8f/1/EVVnl9qc5x7sKV81sAhZuQzoxfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:ee:5c:98:57:5c:97:80:64:7c:b4:93:b0:39:b1:53:36:d8:
         6e:25:cc:86:99:db:8a:7f:c6:f3:fb:9a:f3:a7:e9:7a:5c:e8:
         15:32:7c:23:ce:02:e5:7c:bb:67:86:9f:50:38:12:be:b1:02:
         72:1c:1d:7e:6e:ec:15:f2:54:10:2d:00:4f:e1:11:63:d0:0d:
         9e:13:5a:7e:6f:43:34:6d:b4:a6:b4:33:e4:8b:0e:68:17:c5:
         a4:90:08:e6:48:ed:c0:da:21:ce:f3:ea:76:d2:71:9d:43:95:
         71:b4:6b:17:c5:75:69:20:6a:18:22:b2:4b:5f:c6:04:e6:a0:
         b5:20:37:ca:f9:e9:68:be:a8:2f:99:d7:cf:26:05:f2:43:30:
         b9:5b:f4:f7:99:94:39:d8:76:1d:16:fe:69:f1:c6:86:6e:1a:
         d2:df:63:67:99:71:04:fe:8e:c1:b2:fc:17:2d:bc:af:d4:c3:
         29:a3:e4:25:3f:8e:1c:bc:3a:4e:7e:bc:8a:1e:14:2b:e8:54:
         eb:d2:b2:75:22:2c:5f:e0:0d:3d:d5:91:cb:00:aa:a0:8f:48:
         26:8d:5d:26:a0:73:a5:c4:54:2a:42:3f:6c:2c:bc:eb:6c:df:
         40:f3:26:0c:99:a3:8d:c9:2a:e6:b1:75:e3:78:d1:23:41:b8:
         eb:ab:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:40 2026 by rpki-client