Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
File:                     eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft (raw, json)
Hash identifier:          i2m3n0LyC8SSpE/Rs3BD9MGo/DnNSuHNTm1ge4Ji5Ug=
Subject key identifier:   9C:7D:1C:26:ED:09:A6:0E:D4:43:9B:03:BF:F3:F0:D3:19:62:5C:FF
Authority key identifier: 79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F
Certificate issuer:       /CN=7988bf28c525c52d186c000c9bded9c1775c129f
Certificate serial:       019F954A84CBF3DA7A2DB82BF0062F1B6084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:01:56 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:56 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:56 +0000
Files and hashes:         1: eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl (hash: ErCtcyRN1p/6agAGnZmpa1vRGzsY48s2uc7q1yQ51bU=)
                          2: qTje26BZZKRMARRDkJdC0IeHiRU.roa (hash: oaFttIih0ec3ogfrn2Cq/QjqWOUDC1z4Lnrsr8BVOtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:84:cb:f3:da:7a:2d:b8:2b:f0:06:2f:1b:60:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7988bf28c525c52d186c000c9bded9c1775c129f
        Validity
            Not Before: Jul 24 18:01:56 2026 GMT
            Not After : Jul 25 18:01:56 2026 GMT
        Subject: CN=9c7d1c26ed09a60ed4439b03bff3f0d319625cff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:94:6f:d9:02:e4:c1:b4:37:34:21:9e:dd:
                    da:45:aa:5c:b6:ff:91:38:d3:eb:a2:77:cc:e7:e7:
                    ad:f5:35:b0:77:0f:99:cc:77:93:ee:ff:9c:d7:70:
                    67:bb:00:b9:3e:99:ab:7a:41:67:1b:f0:5a:aa:d1:
                    be:1d:26:27:80:e7:cd:3f:32:bd:e0:0f:fe:f5:78:
                    6b:2b:8e:ca:91:9e:7c:ed:06:eb:96:51:45:a4:ed:
                    a3:84:c5:a1:b1:5d:ed:9e:c7:39:48:22:c6:9f:62:
                    33:18:ec:62:dc:71:4b:47:cb:b0:ac:58:82:77:38:
                    3f:a6:bc:b6:dd:e8:ab:43:f1:e3:fe:9f:00:5c:47:
                    20:9f:e3:40:04:69:9e:3e:ed:84:72:72:7d:2c:e6:
                    ed:e4:b8:d4:b5:ba:72:6d:5d:a9:ba:ca:ff:42:eb:
                    39:b3:50:5c:82:7f:9e:41:86:3a:d2:55:2e:e4:01:
                    e1:b9:5f:49:8b:dd:5d:9b:79:e9:7a:22:fc:23:27:
                    bf:18:0f:77:25:9b:1d:c5:8f:82:eb:da:7d:e7:b8:
                    b1:21:e0:fc:98:c5:db:50:08:7f:34:31:be:15:4e:
                    3e:f3:7b:0a:a6:aa:91:c8:52:e4:3d:f4:e3:f8:c5:
                    9e:0e:32:ac:b1:4e:05:60:2b:a4:a5:c6:58:f8:83:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7D:1C:26:ED:09:A6:0E:D4:43:9B:03:BF:F3:F0:D3:19:62:5C:FF
            X509v3 Authority Key Identifier:
                keyid:79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2f:db:c3:de:b3:46:da:68:da:f7:89:9a:6f:00:cf:8a:b1:
         01:e2:22:4c:27:10:ba:e4:90:2b:2c:2b:60:38:19:a2:7c:6c:
         b6:07:8b:17:4c:5d:ff:8c:a5:e0:16:d8:cb:2d:1c:8c:10:83:
         21:9f:f0:32:5e:ed:54:b1:90:d2:25:77:e5:aa:1e:d7:a7:dc:
         30:e5:fd:5a:c8:a5:2f:8b:2d:cb:c8:1d:5d:4e:44:16:71:24:
         11:f7:46:93:2f:88:bf:23:80:a0:22:fa:39:bb:64:dc:77:b6:
         b5:ed:0b:24:64:f5:46:cf:1b:49:5e:37:61:13:07:85:56:f8:
         8d:18:5c:6b:64:bf:94:00:67:93:2d:33:5d:95:a7:36:cf:5a:
         10:22:33:84:9c:07:60:09:01:2e:ab:63:e6:84:19:d3:ff:d3:
         7d:1f:ab:2c:26:89:d9:37:0c:68:a3:03:62:56:54:d6:08:19:
         17:a9:df:46:c3:bd:55:12:53:c1:04:df:76:df:06:94:a3:f9:
         18:c3:d6:55:3a:68:88:32:49:97:d5:27:46:06:dc:2b:37:fa:
         ba:ec:0f:a4:7b:95:8b:e0:cc:27:71:d7:0a:f4:5b:66:90:d4:
         c2:bb:b8:f1:55:b3:27:6f:a2:26:8d:8e:e8:90:07:4b:4d:8e:
         b7:07:df:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:53:02 2026 by rpki-client