Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
File:                     7eKhItz_wiL6mYS_Frb58T94paU.mft (raw, json)
Hash identifier:          9+r2/jLsp8gH6uneUPA0jEAiHDxYkjuXGasjxf0P9fc=
Subject key identifier:   AE:66:94:9B:63:7B:BD:44:A6:AF:D9:D3:66:A8:65:9E:22:83:19:BC
Authority key identifier: ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5
Certificate issuer:       /CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
Certificate serial:       019FA9AC462C00ADEC7AE668271CF37BD34E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
Manifest number:          0EB2
Signing time:             Tue 28 Jul 2026 17:01:07 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:07 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:07 +0000
Files and hashes:         1: 7eKhItz_wiL6mYS_Frb58T94paU.crl (hash: X+1vc1fLHqRCXK9xTT3dqS2TiXzM3MRybsV8WoDIrD4=)
                          2: IqhV71F7TO-uufaDi-3V7cOA8v4.roa (hash: ujk4NKl8mbgWsjNbR+1EId5G7vMy3PlJJL6cjMfDFaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:46:2c:00:ad:ec:7a:e6:68:27:1c:f3:7b:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede2a122dcffc222fa9984bf16b6f9f13f78a5a5
        Validity
            Not Before: Jul 28 17:01:07 2026 GMT
            Not After : Jul 29 17:01:07 2026 GMT
        Subject: CN=ae66949b637bbd44a6afd9d366a8659e228319bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:05:d2:cf:1b:8a:a4:80:42:ec:d1:bd:f3:
                    60:b5:d3:73:f3:c4:cd:2d:e3:00:6b:78:5f:08:34:
                    f9:3a:b5:74:ad:07:8d:79:48:43:87:be:93:d1:73:
                    99:91:11:60:4f:d6:18:83:6e:b7:ed:fc:19:57:4f:
                    d8:7c:b0:39:27:1d:0f:82:c5:74:0f:55:91:fb:42:
                    eb:de:dd:79:5c:c1:10:7e:ed:ae:b1:4f:a1:93:7d:
                    2f:b4:ab:6c:30:34:dc:1c:7d:aa:fa:dd:49:ef:b0:
                    bd:58:8f:ac:79:ab:bd:1d:71:6e:92:b8:d3:b5:e8:
                    0a:44:26:6d:bc:f4:81:eb:1d:19:3e:29:f9:1d:60:
                    a4:a7:7a:1e:67:1d:35:f4:c4:3f:b8:3f:44:ad:1b:
                    15:36:a5:da:df:b9:bf:51:07:17:5e:f7:2e:d2:e9:
                    f4:20:2a:5f:2b:f8:95:e7:3c:67:23:6d:49:41:0d:
                    cd:2d:30:73:ea:f9:0c:d3:bd:b9:cc:73:51:eb:27:
                    b2:6c:60:61:b1:0b:4f:8e:39:18:2c:2a:b2:98:20:
                    56:97:77:79:63:40:c0:7e:f7:42:fd:34:c2:2b:47:
                    de:7b:5e:98:c9:2d:c5:5f:ea:b1:50:5a:0a:41:cd:
                    dd:83:b5:be:30:0b:1e:fd:63:fd:17:4c:1d:57:5a:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:66:94:9B:63:7B:BD:44:A6:AF:D9:D3:66:A8:65:9E:22:83:19:BC
            X509v3 Authority Key Identifier:
                keyid:ED:E2:A1:22:DC:FF:C2:22:FA:99:84:BF:16:B6:F9:F1:3F:78:A5:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eKhItz_wiL6mYS_Frb58T94paU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/6af3cd-525b-49ba-b388-2359cb60a574/1/7eKhItz_wiL6mYS_Frb58T94paU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ae:e4:ef:b5:54:bc:06:b3:95:63:d5:df:42:78:f7:73:0b:
         87:5c:ae:2c:14:55:cf:0a:05:2f:c0:49:e9:26:bc:43:90:48:
         a7:76:5d:9c:c5:b8:0f:85:4e:51:4d:9b:8b:bd:a8:2b:35:da:
         20:21:26:6e:59:7c:68:67:a3:c6:1e:ab:f9:0f:10:68:fe:3b:
         04:6f:f8:d9:03:64:28:d0:8c:e8:36:b6:b5:be:5d:01:d9:66:
         c2:f8:6b:d4:58:b2:61:67:9c:b6:fc:95:46:73:17:22:e4:50:
         3b:53:f0:94:80:e1:2d:54:2b:16:b5:7d:0c:b0:ed:db:23:bd:
         c9:a5:5a:d3:45:26:a6:e5:f9:7e:8f:0b:49:89:80:79:0a:b1:
         80:55:c4:7f:50:63:8f:34:c6:23:e0:01:e2:1c:e6:32:98:60:
         53:3e:e5:08:7e:e7:41:a8:81:6c:2b:4c:16:9a:5a:21:b6:a3:
         aa:b0:12:e3:04:a6:ba:f9:b8:65:84:e2:46:a0:dd:31:c5:35:
         6e:c9:cd:6e:8a:ba:db:90:f7:4c:75:39:02:35:69:f2:c4:05:
         ca:71:ee:e1:1d:1c:1b:10:c5:63:e0:94:cb:b7:cd:cc:79:78:
         7e:9e:00:8a:9a:c7:d3:41:22:c9:17:2f:d7:2f:f1:4c:6a:4a:
         a1:cf:09:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:52 2026 by rpki-client