Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
File:                     eNo_c5yggv_oh_cDBuf8dIRgbOI.mft (raw, json)
Hash identifier:          jWMe4LhuiX+Adtb760ZpC9a2mJ2/34vbfdMOG2NhXL0=
Subject key identifier:   FF:83:63:31:6B:3C:DD:A0:33:02:DA:37:98:16:70:A1:F4:FD:8E:48
Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Certificate issuer:       /CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Certificate serial:       019FAC772ACA3F854E8497B074AA68612F43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
Manifest number:          0702
Signing time:             Wed 29 Jul 2026 06:01:58 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:58 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:58 +0000
Files and hashes:         1: eNo_c5yggv_oh_cDBuf8dIRgbOI.crl (hash: mfVsVE7o7sdCzBRawal+g6PG8cAkR6pophAgymRBeWc=)
                          2: gbp6iOfei7hEPDEdinLokXxWs2s.roa (hash: G2slnlwUdUEpu2ieOsRYLInvVHszrpyRr4yu7J67evc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:2a:ca:3f:85:4e:84:97:b0:74:aa:68:61:2f:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
        Validity
            Not Before: Jul 29 06:01:58 2026 GMT
            Not After : Jul 30 06:01:58 2026 GMT
        Subject: CN=ff8363316b3cdda03302da37981670a1f4fd8e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5f:e9:fc:4c:a5:71:b1:f3:5c:99:7c:6c:81:
                    fc:26:ee:08:8c:db:7b:af:d9:c7:bf:38:85:df:9e:
                    61:d2:4f:3e:06:14:fd:ed:56:69:db:be:76:17:20:
                    f3:dc:cc:f6:e4:91:27:9f:d0:53:15:60:54:0b:f0:
                    2e:c5:7e:fc:76:95:fe:29:74:b5:be:6c:c3:35:e9:
                    59:60:a7:6c:4c:04:36:db:7a:b8:32:9b:92:a1:bd:
                    75:86:92:5d:01:7f:a1:9e:40:c7:5d:60:4f:4e:1a:
                    b6:38:4b:65:3e:ca:9d:1f:70:36:0b:54:d5:d8:9e:
                    ac:f5:5d:2f:61:a3:6b:bb:c3:5e:f4:67:bd:50:c4:
                    9a:5e:2a:fa:b2:55:9f:e5:29:fe:9f:de:6f:99:d7:
                    f2:4d:e9:85:80:30:1f:11:da:c4:ca:d9:8f:69:e5:
                    4f:11:e0:da:e6:6c:97:38:53:b5:90:9c:d8:1a:aa:
                    6e:9a:eb:4f:56:a1:e7:19:eb:96:93:25:13:6d:20:
                    45:68:77:84:86:96:64:a7:50:d0:d7:52:30:1b:12:
                    1f:3c:de:6a:73:8a:cc:68:6c:20:32:76:21:72:79:
                    38:4a:0b:9a:a7:c5:d2:13:73:a8:5b:ac:df:71:d5:
                    ef:15:4b:f9:c0:c3:0c:1e:cc:f3:dd:22:9b:77:9e:
                    38:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:83:63:31:6B:3C:DD:A0:33:02:DA:37:98:16:70:A1:F4:FD:8E:48
            X509v3 Authority Key Identifier:
                keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:a0:5a:eb:78:1e:88:59:3a:30:b9:a8:43:32:2d:d9:48:
         ad:9e:79:48:1b:e5:47:8b:50:89:42:3a:c0:bd:a6:fe:9f:38:
         d0:d4:44:e0:1a:e1:98:30:3e:71:90:3a:4c:a8:bb:e7:04:f2:
         25:65:12:41:a7:bc:40:8c:ce:6a:ec:5a:35:5c:82:5f:dd:d0:
         21:de:07:86:52:cf:79:fe:0c:3e:af:4e:96:52:4d:5f:2d:b8:
         b6:76:58:cf:20:1d:4b:78:99:5c:62:68:cf:16:1e:8d:c9:80:
         74:56:c7:cd:be:d7:af:9f:cb:6f:4f:55:a4:2f:51:e7:4e:f2:
         9e:fb:2d:42:db:e1:21:a0:bb:6b:8e:5a:25:10:a4:82:3f:b1:
         4c:5f:34:3d:48:a0:fa:8b:1d:e5:07:b7:01:a2:e1:f4:07:57:
         96:1e:82:cd:b4:36:8c:65:6e:f8:23:e6:87:8c:c4:99:42:d8:
         dd:15:59:d1:cf:6b:d1:bd:22:ec:3f:52:a6:f2:5c:81:20:80:
         0d:4e:42:76:c3:21:f9:b7:43:1f:5e:f4:eb:36:e5:bf:19:a4:
         ca:e9:f1:25:b4:2b:55:ba:f9:b4:d1:d1:2e:51:90:92:d8:ce:
         1c:38:34:82:f3:06:e2:aa:a3:e3:cb:a0:c2:19:44:db:bc:ce:
         88:ec:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:38 2026 by rpki-client