Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          Xd62auadp0EW5zx4zJqYsEsO5de0orOGS9zzRdcJxq4=
Subject key identifier:   54:86:04:A6:15:B9:76:49:60:7E:C7:A3:A0:81:9B:7E:5E:89:93:C0
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019F93C948205D93DABEA02324DF66B64936
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 11:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:09 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: k20i/3M6l3HGCYwG63o1v1JnrkyjUIMlV4vNf0vBqxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:48:20:5d:93:da:be:a0:23:24:df:66:b6:49:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jul 24 11:01:09 2026 GMT
            Not After : Jul 25 11:01:09 2026 GMT
        Subject: CN=548604a615b97649607ec7a3a0819b7e5e8993c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a7:c5:2d:df:d3:fb:8e:24:ce:83:e7:e4:83:
                    f7:72:e5:32:79:d6:af:60:be:f3:3b:b3:2c:c0:3f:
                    21:64:cd:b2:7a:d4:aa:08:3e:08:97:6b:0f:0d:2d:
                    24:1c:69:d9:a2:3c:e0:8c:36:4f:43:bf:d3:59:ff:
                    41:2b:d8:68:22:78:c5:8f:64:45:00:7a:a3:b8:2a:
                    eb:90:63:78:c0:9a:5c:40:c5:85:00:49:ec:19:2f:
                    dd:2d:97:4d:e4:15:bd:a9:f6:8e:c5:0a:32:54:ea:
                    62:f1:cb:b3:17:11:69:9c:f9:6d:19:bd:e0:9e:f4:
                    f6:c4:c2:4f:95:84:31:a5:0a:60:8f:7a:df:35:91:
                    8d:da:ee:86:43:f4:38:7a:3b:34:5e:ec:77:75:f3:
                    09:a4:62:2e:6f:b7:be:6b:83:c9:69:3e:76:e7:b8:
                    6f:c8:93:ff:52:5a:24:82:6d:b9:33:01:49:76:3b:
                    b3:a9:eb:29:42:26:a2:d1:66:33:86:b7:b9:6c:57:
                    48:c7:9a:c6:cf:0f:25:0d:b4:85:61:1a:81:27:c4:
                    3f:8b:31:c2:9e:4c:6f:0b:eb:33:4e:dd:7f:06:ac:
                    4c:47:51:79:03:bc:f3:d3:f8:ca:07:48:04:1c:e7:
                    5a:80:c3:fd:0f:1d:64:91:e7:c6:3a:e5:a2:d5:19:
                    cf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:04:A6:15:B9:76:49:60:7E:C7:A3:A0:81:9B:7E:5E:89:93:C0
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0a:fd:00:cc:f0:76:31:14:7c:78:6b:0a:b5:1b:4d:c8:0a:
         01:f9:02:c5:84:50:55:a4:82:f0:53:01:59:a9:2a:76:c3:11:
         c8:af:da:b0:3d:4c:40:ae:b4:3d:c3:4f:b9:be:f1:c3:88:59:
         46:c0:cc:cb:79:eb:56:c6:bb:8e:ab:c3:c1:f3:32:ae:78:c8:
         7c:a4:20:e6:ac:b1:52:dc:12:fe:d7:83:1d:59:68:16:f9:6d:
         54:d2:12:4a:20:58:f1:c1:07:ed:a4:25:60:3a:3a:be:74:02:
         6f:32:75:ea:8d:61:2e:73:99:e1:db:c0:e3:d0:9f:a8:bb:c2:
         f9:dd:16:fd:27:17:56:7c:af:b1:b1:85:8e:13:cd:4d:9f:a9:
         82:69:07:e0:ba:b6:3d:c5:0a:09:ba:73:34:3a:17:97:eb:5f:
         e5:a4:45:8a:ec:fa:5d:12:5b:92:21:23:72:a9:3a:d2:f4:6a:
         70:2d:b9:cb:ab:f2:78:91:b6:ae:97:55:79:72:ac:ec:14:b4:
         9a:1a:7b:35:be:12:1e:35:aa:4b:10:4d:04:9e:b1:3b:b4:44:
         95:70:40:04:fd:59:e3:72:88:6e:39:3b:af:7d:a3:b0:ec:31:
         f5:78:ba:b8:f6:51:ee:f8:4b:be:1a:51:61:62:06:66:1c:f6:
         f1:1b:95:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:41 2026 by rpki-client