Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
File:                     E3g31dF5adK8DUTlY0qUv3006Qs.mft (raw, json)
Hash identifier:          luvzkoHWbsbQ7dwNJQXWDBkLM3FrVidYtT1ovZIBN7k=
Subject key identifier:   EC:B3:2C:0C:3C:B0:2A:86:B7:17:AA:38:4F:25:B3:C7:BF:4B:80:46
Authority key identifier: 13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B
Certificate issuer:       /CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
Certificate serial:       019FA7F4A7F9EC520F087DF8C74AB7AB7C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
Manifest number:          133B
Signing time:             Tue 28 Jul 2026 09:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:56 +0000
Files and hashes:         1: E3g31dF5adK8DUTlY0qUv3006Qs.crl (hash: JvGfc1toHjBcliJgO/Fgn5TNBEmJJqpuTfE/8WYNmTY=)
                          2: da3VworWvFmFbR1FufRr5CMYvkc.roa (hash: hwa/D4Vf8y1DVcvliVC0sWu2QdlvVDaI6hD4bxSYxVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:a7:f9:ec:52:0f:08:7d:f8:c7:4a:b7:ab:7c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137837d5d17969d2bc0d44e5634a94bf7d34e90b
        Validity
            Not Before: Jul 28 09:00:56 2026 GMT
            Not After : Jul 29 09:00:56 2026 GMT
        Subject: CN=ecb32c0c3cb02a86b717aa384f25b3c7bf4b8046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:1a:60:9d:2c:6c:df:e2:1f:db:73:3a:d4:
                    f4:9a:6a:98:ee:ee:0f:c3:de:14:8f:1d:0b:44:61:
                    4e:84:09:16:7e:46:a4:22:27:20:d3:e4:6e:4a:d0:
                    a3:80:64:43:9d:43:c8:d9:59:b5:ed:d8:03:08:2d:
                    d7:79:5a:61:49:5e:b4:26:07:c0:fd:1d:d7:7f:eb:
                    5a:bd:4a:1d:a2:ad:ed:0f:45:3f:16:39:6f:71:25:
                    82:af:b0:03:c1:02:e4:3f:a8:cf:10:03:67:0a:62:
                    e3:e0:1f:a8:c7:e1:6b:3b:27:b3:4f:51:71:bf:4d:
                    1f:f3:49:1f:66:9f:23:c1:10:09:bf:c7:de:2f:a0:
                    77:15:0a:92:e8:96:91:09:da:29:85:59:12:34:b1:
                    cf:1a:b6:00:3c:5c:21:47:d5:f3:64:da:79:01:63:
                    76:82:30:0d:ad:d1:39:8a:68:c5:d2:78:28:e3:9d:
                    f1:a0:b9:98:31:7f:36:84:ac:a0:ec:f3:08:b5:3c:
                    98:56:9f:ea:7c:8c:0d:f3:e8:e5:0a:91:3a:ae:44:
                    8d:18:09:f4:e3:16:cc:c0:15:68:01:74:47:99:44:
                    eb:96:35:cd:d9:22:0c:e5:70:aa:02:65:ef:9f:92:
                    6d:1c:34:88:af:cf:d8:ec:03:97:fc:0e:1c:93:00:
                    64:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B3:2C:0C:3C:B0:2A:86:B7:17:AA:38:4F:25:B3:C7:BF:4B:80:46
            X509v3 Authority Key Identifier:
                keyid:13:78:37:D5:D1:79:69:D2:BC:0D:44:E5:63:4A:94:BF:7D:34:E9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3g31dF5adK8DUTlY0qUv3006Qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5423c1-871f-461c-9970-4db3f188f5b6/1/E3g31dF5adK8DUTlY0qUv3006Qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:88:62:e8:27:b6:30:71:37:0a:d1:d4:ea:f0:ad:b2:89:c9:
         6c:6b:fe:28:33:5f:09:18:2a:c2:f6:8b:8f:16:6e:c7:ef:11:
         ff:1f:b9:59:d5:ad:37:a0:ef:7d:00:c4:79:a4:28:12:31:47:
         a3:d8:c0:54:b3:5d:78:6d:93:00:37:e3:87:6e:9c:fa:e8:dd:
         18:b1:33:19:1c:5f:29:e6:fe:f1:b8:e8:8c:04:9d:56:39:71:
         03:ed:3b:c9:87:de:83:76:bb:b2:52:c8:55:26:10:f9:f1:91:
         99:16:4a:ef:57:ae:25:d6:a2:ac:48:ce:4c:31:ba:ef:72:09:
         36:70:65:50:9e:0a:f3:05:5b:31:ab:2e:77:cf:3a:02:44:40:
         fb:d4:51:29:ae:cd:70:81:2f:b9:b2:c2:43:48:3e:ae:34:15:
         c3:d1:c4:a6:c9:a4:c3:38:4c:04:5f:60:29:d2:2a:a7:a3:b4:
         5c:68:f5:72:a0:fe:80:18:2e:b3:b1:25:5a:e9:85:27:3c:ed:
         21:46:3e:64:e3:42:1a:32:69:a2:12:dd:c0:04:85:11:3f:6f:
         47:13:d2:c2:64:b5:4a:52:69:98:1a:e6:3e:a5:5d:e6:a6:a9:
         7f:6c:a8:e9:98:34:14:14:e7:c8:58:0a:46:b9:42:9b:02:6e:
         fe:42:3a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:40:36 2026 by rpki-client