Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
File:                     E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft (raw, json)
Hash identifier:          +yNuDCTdGsuRg0ZoUNrf4VARevMhP1MM/L6PrxThyfI=
Subject key identifier:   EA:30:86:52:CB:FF:15:4D:9A:63:B6:80:79:81:F7:D5:4C:71:0B:CA
Authority key identifier: 13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4
Certificate issuer:       /CN=13b43dace8663447ee4725520d78c54ab7b99ad4
Certificate serial:       019FAA19D40E882C55432FAFB51F13EF8A3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
Manifest number:          1703
Signing time:             Tue 28 Jul 2026 19:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:47 +0000
Files and hashes:         1: E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl (hash: Zkq98brcr/pb3l7SpOMLigquY572Mooc6yg8Qi98TMQ=)
                          2: Ne750FFHPw3HUe14fcJ5eyrMXJg.roa (hash: A3tH6f49GeoqhrZ6OnjGyDwtlkYlyzOGtjZ26OJKqAo=)
                          3: OKZ4RBLd9A-erw36PbwJ3C3LJo0.roa (hash: 7yPskL1QQ8Sx8qqCwYj9KNvr1Nkq7IbAM3Yyme3KyJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:d4:0e:88:2c:55:43:2f:af:b5:1f:13:ef:8a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b43dace8663447ee4725520d78c54ab7b99ad4
        Validity
            Not Before: Jul 28 19:00:47 2026 GMT
            Not After : Jul 29 19:00:47 2026 GMT
        Subject: CN=ea308652cbff154d9a63b6807981f7d54c710bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c7:1f:5a:b1:cb:54:b5:31:ae:78:c9:fa:b2:
                    d9:3a:f8:31:1a:c6:81:19:e2:b4:e0:7e:02:84:3c:
                    21:3c:7a:60:26:24:5b:ec:1f:24:8c:17:dd:84:66:
                    e3:73:14:f7:eb:98:f5:43:fd:12:66:37:c9:cb:52:
                    78:82:93:a6:6e:2b:ff:87:31:50:be:6b:66:76:4d:
                    62:4f:44:1e:28:95:d1:16:f2:29:a0:5b:8d:ba:f6:
                    c6:1e:3d:2a:23:37:9f:b3:67:80:94:18:3a:b3:ef:
                    b6:aa:96:65:06:d6:3e:fb:ab:76:fb:e9:10:7e:da:
                    7c:93:c2:c3:cb:3d:7c:4c:fc:c3:30:21:ca:cc:53:
                    bb:aa:32:1b:ec:3b:c1:11:4f:e5:20:10:bf:09:f1:
                    0d:65:a5:1a:f3:16:6f:56:ef:84:c6:2f:cf:c5:0c:
                    d3:de:24:13:07:47:cb:51:c8:aa:35:27:99:94:6b:
                    6c:64:d4:d7:74:30:d1:c8:80:59:1c:4e:d9:d2:a4:
                    7e:16:05:eb:04:9e:20:69:35:00:78:9c:24:97:b5:
                    04:f7:a8:4e:b2:b3:52:74:55:fc:2f:da:0e:91:a1:
                    ac:b2:a8:a2:0e:a1:4d:b4:8b:d6:ba:30:b8:5b:60:
                    77:89:5c:93:77:51:2c:09:3c:74:d5:60:ff:85:c5:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:30:86:52:CB:FF:15:4D:9A:63:B6:80:79:81:F7:D5:4C:71:0B:CA
            X509v3 Authority Key Identifier:
                keyid:13:B4:3D:AC:E8:66:34:47:EE:47:25:52:0D:78:C5:4A:B7:B9:9A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/65690a-0acf-4f36-a89c-2b4a2714214a/1/E7Q9rOhmNEfuRyVSDXjFSre5mtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:47:a1:9a:b3:30:9a:cb:38:67:4f:a3:b3:de:a3:cb:7d:e4:
         66:a2:8b:41:16:d5:76:e2:33:60:05:e1:e8:f1:4b:2d:3d:d6:
         a7:af:41:d6:b2:21:50:0e:a5:32:a8:e0:cf:4e:53:ce:bb:72:
         63:8e:e4:d2:a5:b4:ec:9c:2e:ce:23:6d:51:9b:aa:76:76:5f:
         3c:6d:ff:3e:bd:a6:48:aa:fb:44:6b:c1:11:92:c4:ac:f4:3b:
         55:a6:0e:42:57:4e:69:26:7f:db:b4:d5:48:5b:c6:58:67:e7:
         1d:4e:c9:4a:a0:b2:70:ab:00:c7:ca:4d:a5:81:f7:b4:a6:91:
         dc:8e:a7:f6:37:05:5a:fa:18:e8:d3:ef:92:95:2c:3f:1a:0c:
         e6:12:53:db:2a:a3:fb:0a:5c:d2:1d:24:cb:ba:9d:e2:f4:d2:
         22:b9:b8:f8:86:5e:3b:33:e3:a0:2d:e8:02:9d:19:01:99:12:
         60:78:c8:32:e3:1c:f8:8c:1b:25:a9:c5:ff:c2:18:a3:da:4b:
         a7:fe:71:30:8d:ee:45:a1:de:5c:a7:df:6e:45:ab:21:69:88:
         8d:5a:b5:13:78:58:f4:26:23:6d:64:be:6a:7c:ab:df:b2:75:
         b9:38:52:6d:00:7a:2d:23:3a:93:aa:d1:d1:26:ab:33:a5:98:
         86:6d:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:47 2026 by rpki-client