Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
File:                     E2acDAhcyXijcqDk8FZIOY4ef-g.mft (raw, json)
Hash identifier:          SYdb5cX68xzl6vHxOK7ADFhHrhH4aTod5Ag7Y+4lPj0=
Subject key identifier:   79:1A:78:B2:F0:75:FE:FB:F1:BA:42:B9:0C:18:AF:61:62:4F:A7:12
Authority key identifier: 13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8
Certificate issuer:       /CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
Certificate serial:       019FAA5078D5BC3B15B97F5860531B7AB6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
Manifest number:          08FD
Signing time:             Tue 28 Jul 2026 20:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:28 +0000
Files and hashes:         1: E2acDAhcyXijcqDk8FZIOY4ef-g.crl (hash: +5lBw42V3bs4R/GiP1zWDXR7+4cvddpGIfnTHs9aJZo=)
                          2: azjnKORK5OUfWYKGOxP9FA9muxw.roa (hash: ulAofzRr1iKN0yM8vkecsWzC5HBLVvzozzy7owuvrB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:78:d5:bc:3b:15:b9:7f:58:60:53:1b:7a:b6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13669c0c085cc978a372a0e4f05648398e1e7fe8
        Validity
            Not Before: Jul 28 20:00:28 2026 GMT
            Not After : Jul 29 20:00:28 2026 GMT
        Subject: CN=791a78b2f075fefbf1ba42b90c18af61624fa712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:19:c5:e4:80:98:fe:74:52:4c:1d:ae:22:65:
                    59:d1:2f:78:3a:b8:62:f0:27:fe:1f:22:ca:f9:42:
                    f3:56:14:ca:61:8b:c8:62:bc:b5:56:c7:e8:7e:81:
                    d5:01:8b:63:27:19:18:af:aa:a2:e8:2a:be:11:61:
                    85:3f:cb:47:ba:41:5e:4b:00:a8:41:1b:fd:1b:ca:
                    37:92:3e:e4:a0:1b:27:22:cf:c0:0a:76:bc:f8:f1:
                    ac:15:3f:af:14:71:92:26:89:89:81:f4:8a:af:ae:
                    69:af:1e:17:13:d4:77:7f:08:4a:99:f9:70:b7:83:
                    50:05:d8:72:b5:24:2b:e4:0d:27:54:57:af:65:52:
                    68:59:45:19:d7:2d:16:25:d3:f8:3a:3e:a3:cd:99:
                    9f:73:51:39:15:1d:e6:bd:55:88:d8:4f:ff:ec:ab:
                    9b:58:a5:97:0d:02:79:37:d2:b3:fb:1f:af:76:29:
                    16:5f:df:8d:d7:03:fd:a5:fe:6b:60:61:54:ff:68:
                    bc:68:6b:b0:33:cf:1b:8a:57:57:7d:96:ad:11:e4:
                    3f:f1:f2:6e:4b:36:61:7a:a2:09:fa:60:14:74:22:
                    cf:74:47:71:2e:a9:87:a1:f7:ef:72:d1:d0:73:07:
                    5c:94:18:fe:86:f1:e5:0f:7f:1e:59:8c:e4:43:ba:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1A:78:B2:F0:75:FE:FB:F1:BA:42:B9:0C:18:AF:61:62:4F:A7:12
            X509v3 Authority Key Identifier:
                keyid:13:66:9C:0C:08:5C:C9:78:A3:72:A0:E4:F0:56:48:39:8E:1E:7F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2acDAhcyXijcqDk8FZIOY4ef-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e393d8-1252-4c27-baaa-53b04342783d/1/E2acDAhcyXijcqDk8FZIOY4ef-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:32:e1:fb:ef:aa:e0:d7:cd:ae:63:a4:f9:3f:4b:0e:c0:94:
         28:dd:ef:bd:69:2d:b0:84:f5:a7:23:fa:bf:c6:06:18:03:d5:
         60:82:03:25:54:9c:79:b6:26:ba:82:22:0e:16:5e:70:a5:2f:
         a1:73:64:71:82:c6:76:ee:3b:9d:89:5d:b6:b6:c1:19:39:03:
         e3:e8:f6:9e:21:ff:ac:8d:55:d9:55:49:bd:c7:38:38:b1:bd:
         de:47:09:69:17:78:db:a4:b7:51:11:ce:32:1e:4b:11:ab:ce:
         55:a7:49:f2:fe:c6:44:65:1b:7d:f9:9a:f1:98:bb:7b:80:cc:
         76:08:cc:0b:fa:9f:df:29:e7:1a:69:c8:2a:55:d4:45:e9:f6:
         c8:bc:03:25:4a:29:24:7f:3c:02:fd:e1:a9:fb:fe:14:6f:c5:
         75:42:23:66:fe:5f:03:eb:55:d1:80:6c:d8:60:d4:8e:77:20:
         4f:cd:b3:bf:a8:20:46:ef:b1:f3:91:2a:14:59:78:f2:b2:55:
         0f:48:a3:81:82:12:e8:e0:e9:99:71:07:97:1e:93:10:35:e5:
         9b:7f:36:9e:27:27:85:63:b1:67:44:85:f8:b0:c2:aa:d1:1e:
         f7:7c:f3:9e:26:4b:cb:65:22:13:a7:68:11:ec:60:ce:36:cc:
         c9:ed:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:06:08 2026 by rpki-client