Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
File:                     EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json)
Hash identifier:          jDb9cCMC1joVDyv2N76xN6u1cJ+oNLRsb0kReb29/dQ=
Subject key identifier:   9D:95:DF:1F:A9:33:EB:98:72:DB:D0:9C:C5:90:26:BF:14:00:12:A6
Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00
Certificate issuer:       /CN=11084b7d378b993c5f5e749f6a344de23e45ad00
Certificate serial:       019FA9079EC2CDA99C1A490AB54B2739AF30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
Manifest number:          10B1
Signing time:             Tue 28 Jul 2026 14:01:16 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:16 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:16 +0000
Files and hashes:         1: 0QygA5EjmnNvfod7LRYIvHW6VOU.roa (hash: 9mJbNM5RFQ2gh5+u4PI5yU3lzfK+jzemRH8Ny/3lnYI=)
                          2: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: CRWvO734N9UlpsypqWXvKUdJp4lqiytdbqxfeiCKyB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:9e:c2:cd:a9:9c:1a:49:0a:b5:4b:27:39:af:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00
        Validity
            Not Before: Jul 28 14:01:16 2026 GMT
            Not After : Jul 29 14:01:16 2026 GMT
        Subject: CN=9d95df1fa933eb9872dbd09cc59026bf140012a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3c:29:61:7e:c7:d9:9f:71:c1:09:c8:f1:34:
                    a5:35:c5:d7:58:ba:53:5b:d3:2f:a9:51:a4:ab:c5:
                    37:28:94:20:fb:80:1b:fd:4a:4a:69:51:34:42:ec:
                    b4:a1:ce:5f:81:76:5e:a9:d3:8a:c4:30:b7:16:57:
                    da:1c:69:f7:cf:30:cc:39:9b:86:63:64:b7:ca:34:
                    56:20:51:29:93:a3:cb:e9:00:2c:81:1e:84:a0:76:
                    8a:72:b3:59:f6:47:80:07:ba:99:47:1c:a3:3f:5c:
                    47:cf:66:fd:52:23:fc:c9:95:da:6b:1b:b1:cb:ce:
                    ef:62:63:68:7c:f1:47:92:01:be:9a:19:f7:83:15:
                    1b:14:b7:cb:c5:9d:22:d9:0a:f7:b2:e5:60:be:ea:
                    b9:12:de:6f:5d:15:d7:f3:68:5c:80:1c:74:07:52:
                    28:c5:44:b9:bb:2b:b3:73:92:0e:43:d8:b9:e0:42:
                    f0:50:97:f5:45:25:78:07:be:37:cc:56:cc:04:35:
                    a6:70:be:e8:81:89:7e:e3:5a:58:03:90:44:6d:e2:
                    80:fb:79:f7:0c:48:4d:ac:c9:b6:08:fd:11:92:7d:
                    8b:52:b9:77:94:ce:cc:e0:ac:ae:f3:5e:39:d9:54:
                    66:96:5c:98:d2:72:7c:2d:60:00:8c:19:4f:3d:ea:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:95:DF:1F:A9:33:EB:98:72:DB:D0:9C:C5:90:26:BF:14:00:12:A6
            X509v3 Authority Key Identifier:
                keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b4:de:34:8c:ba:1e:20:63:7b:0c:20:e6:63:38:71:c2:1c:
         bd:fd:8d:ec:2c:a7:e0:08:74:90:ac:1d:1b:a3:5c:b0:65:13:
         c3:c1:a5:ae:cf:b1:34:d8:2b:be:e3:2b:07:eb:78:49:90:9a:
         4f:b9:5b:0e:d8:be:9c:43:41:7b:35:c7:7b:f1:6d:06:7d:a8:
         a0:39:1d:bc:01:26:35:7a:de:2b:9d:46:61:72:6d:a1:fc:04:
         3b:ca:a6:a7:22:b1:bb:42:30:f2:23:62:72:54:4e:04:71:36:
         1d:d6:b9:bb:69:29:70:e5:89:1a:73:2a:e8:8d:4c:b4:d4:41:
         48:46:ae:60:c2:cb:f9:31:88:f5:88:0f:5a:90:3b:5a:55:1d:
         55:5f:37:b0:f8:e1:00:ef:c7:39:f5:ee:d4:be:c6:64:8d:2f:
         5a:af:da:cb:aa:cf:82:9d:17:2e:6f:af:4f:04:ea:df:c6:20:
         d2:6f:17:8d:63:37:c9:1e:d8:f6:78:1d:fe:e1:f4:b8:ac:8d:
         06:2c:57:45:ab:b3:06:50:d0:77:61:fb:d8:97:27:f8:5f:90:
         1a:9f:70:10:51:a3:dc:90:31:05:ca:d0:38:d5:be:b1:51:67:
         af:b6:21:61:ca:e8:03:5e:10:b2:0a:8f:7e:e3:89:39:47:51:
         11:f4:5d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:36 2026 by rpki-client