Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
File:                     eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft (raw, json)
Hash identifier:          hlnFgq2gtWyhnQ9fcGc6O6OqQM/4KBoL7XbIvwIBceA=
Subject key identifier:   88:70:39:31:60:5B:61:87:DC:11:51:5E:E8:F0:76:FD:D1:07:CF:AE
Authority key identifier: 7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20
Certificate issuer:       /CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
Certificate serial:       019F91A3C07C35EE525585D14871C5AF34A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
Manifest number:          02BD
Signing time:             Fri 24 Jul 2026 01:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:55 +0000
Files and hashes:         1: 3gMylm_7kdY05Np-Gs1Ujn2TpUw.roa (hash: W5KGrcdaIcr77/oIsEbLhshZMJrc2jrTw0N4xA3kS0o=)
                          2: SHM9R3kXlAO8-e-rYuN_jsGmG6M.roa (hash: X06rQu41FDn+MhiPC2VMwGHMTFpmXVd6mlDBUP0P6FE=)
                          3: eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl (hash: nG9nJcTxd/8uitw9KmiB6XaE3d/QVBVSb3D9BoSlBbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:c0:7c:35:ee:52:55:85:d1:48:71:c5:af:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aef7b364935ae2deb4b86d443ea8432b62cc520
        Validity
            Not Before: Jul 24 01:00:55 2026 GMT
            Not After : Jul 25 01:00:55 2026 GMT
        Subject: CN=88703931605b6187dc11515ee8f076fdd107cfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:06:f3:2c:59:8b:7a:89:d0:e0:1b:a4:a1:d8:
                    0d:ca:07:ed:5e:4c:dd:4d:f2:9a:5c:36:ab:d0:75:
                    b9:00:1d:41:3c:8a:dc:dd:ff:d5:c1:85:7f:65:5f:
                    f2:e7:fc:14:9b:73:dc:77:7b:c1:f6:0e:7b:e5:1f:
                    1d:95:4b:6f:23:d0:9d:18:75:b1:59:2b:4a:f5:09:
                    aa:c4:ec:9c:81:51:06:09:dc:cd:c0:be:39:50:39:
                    fc:05:1a:b8:ee:51:9b:71:d6:a7:76:87:82:d2:f0:
                    7c:59:9d:2f:5f:f9:ee:58:24:33:90:fc:35:63:ba:
                    37:e7:41:4a:b4:64:e7:68:e4:5e:3b:39:1c:96:a9:
                    af:ad:95:bd:6a:56:27:f0:2d:3a:7b:ac:b2:c0:aa:
                    06:81:9d:c2:35:82:18:e4:12:a1:6e:62:dc:f7:b8:
                    9a:e6:81:3e:23:a4:a3:7e:ae:0b:09:f1:38:32:a2:
                    f7:8a:b6:28:e8:87:dc:dc:05:3f:f0:02:2d:70:6e:
                    ee:e0:98:76:e9:0e:3c:34:2b:a9:91:a6:f9:2e:50:
                    32:2a:d1:cb:9e:1c:20:6f:5b:23:d3:3d:f8:7a:97:
                    57:3b:70:24:e3:66:77:ff:2e:fe:bc:6b:bb:40:12:
                    ab:59:6a:a3:18:06:ce:e0:db:f0:58:11:e5:fe:9c:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:70:39:31:60:5B:61:87:DC:11:51:5E:E8:F0:76:FD:D1:07:CF:AE
            X509v3 Authority Key Identifier:
                keyid:7A:EF:7B:36:49:35:AE:2D:EB:4B:86:D4:43:EA:84:32:B6:2C:C5:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354c83-3061-4240-8afe-7dfa2ecd8610/1/eu97Nkk1ri3rS4bUQ-qEMrYsxSA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:26:47:86:58:16:f7:f2:75:b8:88:ed:58:a9:e5:2d:b3:
         19:e3:ac:3c:11:bb:df:67:9c:d1:be:cc:a4:81:ff:2a:9f:e5:
         bd:a4:16:52:3d:bf:b4:e7:6d:df:1f:cf:29:09:72:ee:a9:10:
         bb:af:60:71:f5:6c:3f:44:c9:12:12:c7:69:9b:f4:52:e2:20:
         f9:e2:b6:fa:c7:3f:f2:82:40:59:f0:cf:01:fd:b4:76:b4:d7:
         68:19:25:4b:70:71:d6:1c:32:ac:e3:74:dc:e0:be:50:fb:35:
         10:6b:bd:18:41:c9:da:ab:14:12:60:7b:27:dc:d4:83:22:81:
         bf:f8:54:07:91:98:61:5f:17:3a:93:21:b0:d0:dc:5c:99:6c:
         00:13:f5:af:93:46:2c:04:41:f0:23:24:af:f2:8e:3c:98:22:
         71:e8:df:43:de:31:7d:ab:c5:4f:30:91:67:e0:5b:14:f5:8e:
         80:cc:f3:6e:da:bb:9e:9b:01:4c:c6:9c:63:56:16:88:64:b4:
         66:60:7c:45:4e:8d:7c:a1:60:eb:93:33:36:69:68:36:22:fa:
         0e:16:56:c8:69:25:0e:7a:40:01:f6:9e:79:40:c9:69:03:a2:
         a0:78:f6:8d:57:e1:14:0d:6a:ad:fc:b2:1f:0f:cb:8b:07:29:
         c6:e4:07:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:10 2026 by rpki-client