Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
File:                     EHcd196iLjX9rxm1G4OfQ3IScLo.mft (raw, json)
Hash identifier:          dkw27WnvVu/ZvMubIAMZe2BUrRlWv2lCx7INq3YzHtg=
Subject key identifier:   3D:AA:70:3A:6A:BE:42:21:E8:50:06:7F:14:2E:B9:98:F3:F9:A5:9E
Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA
Certificate issuer:       /CN=10771dd7dea22e35fdaf19b51b839f43721270ba
Certificate serial:       019FA899F9A6FDCD2068586C2525F1662A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 12:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:30 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:30 +0000
Files and hashes:         1: 8YZRbgY-jKvD5Qx_V3PZvEk7vWs.roa (hash: VWf+UTOiYBb3BuAyoYwwM3l/EA1c3gcBsPIpoLbePt4=)
                          2: EHcd196iLjX9rxm1G4OfQ3IScLo.crl (hash: NOMYotqdwpgoobwRw6MDxd8JcWgMhyi6vV948WvNZG8=)
                          3: H3xTPmvK9zSgTcG__u3TwIPowUk.roa (hash: LbE0stmwuty2WSYq6lcYUDzFt6TCqOOwuZiyFMFNrDY=)
                          4: LIjz0LVWHyiVRe41t0otex5cgKk.roa (hash: kK1oc6nFnO7s7B7iKpi9xLLSYXGDXAKQ7beSDUR4qc8=)
                          5: O6ZAZ4typgOI3suTxfN-rxJmiqo.roa (hash: vmBhZBWRzaR03mbT3PYidf4G6v/Azs/K8CL0/p3O6Bg=)
                          6: bEr1knk29A1thJBkv70_tj5F5_4.roa (hash: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:f9:a6:fd:cd:20:68:58:6c:25:25:f1:66:2a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba
        Validity
            Not Before: Jul 28 12:01:30 2026 GMT
            Not After : Jul 29 12:01:30 2026 GMT
        Subject: CN=3daa703a6abe4221e850067f142eb998f3f9a59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:76:41:4d:0c:6f:ff:f7:a0:cd:be:52:32:83:
                    93:27:9b:b7:5e:d1:6e:63:4c:4d:64:48:2c:7e:6c:
                    cf:a5:d2:67:52:97:d5:8f:b4:02:33:04:43:fc:4b:
                    02:50:37:a4:52:8f:17:3b:67:56:e3:20:a7:e2:bc:
                    54:2a:fa:15:de:47:7b:28:79:c1:cc:af:1b:12:c9:
                    13:1e:cb:f3:46:3c:fa:e9:fb:f5:8b:c2:3d:00:cf:
                    4e:59:9f:c8:2a:86:f3:9c:7f:26:e5:85:cb:56:57:
                    94:03:4f:65:48:26:c2:69:6c:e5:41:ed:9d:6b:55:
                    cb:cf:e5:43:39:6c:c3:56:23:86:40:dd:f4:2d:1e:
                    1a:fd:e7:fe:73:ae:d0:7a:f0:d8:ab:cb:cc:cb:d6:
                    dd:7f:0c:7a:e4:0f:06:4b:c5:67:4d:4b:c0:df:9f:
                    d8:95:8d:fd:b0:a0:09:a4:a6:fe:88:8d:b4:15:2a:
                    be:71:69:30:c7:57:cb:ee:d2:ff:92:23:78:49:14:
                    61:9a:c4:92:d9:86:32:b8:c3:9d:74:3a:9f:59:5e:
                    a9:20:80:da:74:47:b7:83:12:cb:8c:8d:b3:b9:da:
                    56:16:ae:d7:0e:76:a8:77:1f:65:b3:3f:e2:ee:94:
                    88:44:d4:f6:55:43:82:b4:6a:e5:7f:41:4d:d1:1a:
                    0f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:70:3A:6A:BE:42:21:E8:50:06:7F:14:2E:B9:98:F3:F9:A5:9E
            X509v3 Authority Key Identifier:
                keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ad:36:a5:91:98:09:41:a1:d0:a8:af:dc:62:50:53:26:a6:
         15:c3:56:8a:3d:3f:f3:b9:84:7e:1a:25:f5:97:67:ec:42:56:
         70:6f:82:34:2e:de:28:da:0e:54:fd:f6:82:16:f5:73:ef:a5:
         fc:9c:20:8c:14:d0:c1:1d:e2:a8:3c:dd:48:88:b0:86:c7:77:
         d4:ae:68:84:5e:ee:56:29:25:eb:e7:4d:88:55:dd:70:71:16:
         e7:3e:bd:29:48:a5:8c:c0:e5:da:61:ee:fe:75:c0:ea:95:a5:
         30:b5:c3:ba:f9:81:f7:9c:ef:63:35:cc:a7:fe:75:b9:c2:be:
         48:b6:52:40:39:a5:97:6f:cf:64:e8:59:a2:e2:42:c5:63:cc:
         d2:14:4d:20:6b:ce:c3:a3:1b:9d:50:ac:94:b1:06:cd:99:d4:
         76:88:21:d4:c0:32:f6:1e:a1:e2:cf:f4:45:c7:80:21:90:46:
         97:16:dd:0a:9a:0d:71:6d:7c:40:5a:35:6a:ba:47:6b:9b:cb:
         66:53:e8:2f:e8:f5:a5:4e:43:17:1e:15:2b:cf:29:4a:f1:29:
         ea:0e:ce:8f:91:c6:99:bf:fd:c1:0a:fb:d9:f3:9e:bd:6f:86:
         a6:a3:0d:ef:89:ec:a5:6f:17:89:ff:45:42:80:6b:a4:c0:f9:
         6b:03:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:29:01 2026 by rpki-client