Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
File:                     EiTl7_GrwObYvwKeT3MuCrcbwWo.mft (raw, json)
Hash identifier:          4BnEuG4sI8FG68HgGaJ3uUpyjX2TzNXd3vMZtdN67JM=
Subject key identifier:   13:74:FB:69:24:ED:CD:0E:BA:89:1A:10:3A:79:76:0C:A7:DE:A9:F4
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Certificate issuer:       /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial:       019FAB2C7A9FED10C5B6201EDCE56DDF0C90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
Manifest number:          19DF
Signing time:             Wed 29 Jul 2026 00:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:46 +0000
Files and hashes:         1: 7DKhg71ZB3nnMpauf53JDjRxvcE.roa (hash: JaQt7Bz1hiKlJT1Mi9uSBQ4bdQnONHvQK2D4cbBsnd4=)
                          2: EIlUot-POus86QxUL7xC47CEgA0.roa (hash: fGvFxEuJQZrOhf41jYSYuT3rCT2fv3AUTCj1Ro27Idg=)
                          3: EiTl7_GrwObYvwKeT3MuCrcbwWo.crl (hash: /kvRa6DKZvbYbq9NTSmLaODmQnIuVQivrXjNoYR7c8U=)
                          4: IUysQoBsRWVOL5sdLOOClz3M4Tc.roa (hash: Q0b0Ej5B0Uf7P54rUhyCPtXaonVa+DMphvbAdFQOd6c=)
                          5: _D31CaslokzBzJb570s1tCqC6rU.roa (hash: vPfarYHxZRzOYIcHGYTZOf+++xHO9r+2vS0OJV7F/0s=)
                          6: hMkkOV3vcdpEBCz-ov_DfQAHhD8.roa (hash: E0l9RjnNf9Lrz/LeJVfSiJ9Bu3PLC8j0ZQdTbyOvhkY=)
                          7: iIvK0GriwCR5-e0INxYXsaN5HeA.roa (hash: y+xjj91MYcyeEl9ZZP8msaIhf1Zsnrl/qJUlt2VVY1Q=)
                          8: sL9_3JSSE2xT5n7OAXMAHMxKq1g.roa (hash: vGCCVcEYQcDBKDtRD4+hEi2hrb6nrXfbvM90L9lRcO0=)
                          9: xC4HZY2FAIOZlVLev_OryihHWUo.roa (hash: t5wlokLTk+K42yuANt3hwr4tFRZLOSrgIWyKhOKmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:7a:9f:ed:10:c5:b6:20:1e:dc:e5:6d:df:0c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
        Validity
            Not Before: Jul 29 00:00:46 2026 GMT
            Not After : Jul 30 00:00:46 2026 GMT
        Subject: CN=1374fb6924edcd0eba891a103a79760ca7dea9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:03:ed:4d:69:d1:34:9c:60:c7:7c:da:51:51:
                    10:62:5b:bc:df:ac:62:d0:c0:91:d4:52:42:c2:4c:
                    97:be:8c:04:7f:b7:11:69:12:e6:d9:14:87:56:e5:
                    d5:28:8b:d0:20:e0:b0:c0:c4:1e:7a:b4:4f:6e:5c:
                    4c:31:d3:0f:58:95:3b:19:3f:15:f8:71:f6:7a:99:
                    0d:41:08:0e:dd:00:1e:d1:d3:38:7a:2f:6d:90:8d:
                    69:cb:0e:9e:92:42:b7:ae:17:7b:65:d3:b8:49:2a:
                    35:8e:72:97:95:b9:fc:eb:82:fd:87:15:d5:fd:e1:
                    ba:19:8c:d4:50:bd:b8:43:75:ad:d2:73:83:a6:75:
                    d9:aa:43:1c:e7:6d:f4:2b:c7:2d:15:62:76:df:b5:
                    8f:cd:a4:3f:18:d1:79:d5:25:0b:67:5d:29:71:ae:
                    38:4e:88:55:ff:42:54:26:e3:c2:80:b6:cd:ba:e9:
                    2e:df:f1:81:ef:5b:fa:7a:e2:ae:be:38:05:21:b3:
                    c8:22:25:2f:7b:b1:04:c3:75:f1:c7:44:4e:28:2b:
                    09:4a:eb:02:66:95:ec:30:a9:8e:b3:5d:d0:e1:7b:
                    15:d0:60:cf:09:0f:ee:01:97:04:3b:48:35:36:79:
                    b9:82:e3:d5:46:81:51:6d:1c:6b:77:5e:f1:37:47:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:74:FB:69:24:ED:CD:0E:BA:89:1A:10:3A:79:76:0C:A7:DE:A9:F4
            X509v3 Authority Key Identifier:
                keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b3:5e:49:67:d1:25:07:52:fc:aa:a2:41:0e:dc:ba:f9:35:
         3f:f1:2e:56:91:32:16:bf:8e:0f:df:67:6f:22:48:20:89:1f:
         22:5a:02:09:2e:1b:58:b5:ea:a1:fe:75:4f:fb:0b:e3:cd:d3:
         cb:21:35:ec:cc:d5:a5:bf:57:e7:19:b1:89:4e:97:24:00:f4:
         46:a4:26:2b:73:a3:ac:0e:01:a4:96:33:20:35:ab:06:5e:60:
         fa:96:00:4f:ac:99:cb:1e:a5:ff:1f:98:fc:75:0a:d7:f3:8c:
         6d:5b:b5:30:47:e7:5f:f7:36:48:db:29:40:67:95:ba:25:4e:
         44:62:1a:76:c5:50:19:3c:23:9e:81:86:60:a0:9a:83:cc:e0:
         36:1e:7f:79:ae:af:b1:64:f4:8f:1b:d6:88:e9:93:cf:3c:5e:
         b2:5c:92:ae:72:44:81:01:6f:c7:9b:0c:d8:7d:fa:48:47:06:
         53:92:cb:db:70:76:a5:b1:87:b2:43:78:08:7d:8c:18:d7:de:
         b7:a8:70:67:b6:20:1e:82:d9:14:04:5c:11:6f:bb:e6:c5:da:
         d1:4f:ff:dd:c4:b6:51:9d:38:d4:f9:ec:b7:db:23:5d:8f:bf:
         7b:01:6f:db:29:d9:f6:1f:88:5e:77:f8:be:27:07:3c:eb:c7:
         e3:a8:8e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:28:31 2026 by rpki-client