Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File:                     EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier:          LDeMN0u/6DKYkUvkwwkVFD1SYeQVrfaXXnkkSpzSneo=
Subject key identifier:   08:CE:1E:D6:05:8A:05:94:29:2C:CD:D0:44:08:0D:AA:16:2A:4D:8E
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer:       /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial:       019FAB63256191D0DA3C2B78B0B83DDA3318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number:          0AD5
Signing time:             Wed 29 Jul 2026 01:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:29 +0000
Files and hashes:         1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: jbxU5FScYJPrGNIBc0XjNBeZRDdq0i1mN1e0FojFwa8=)
                          2: F9AVi6sObrhN5KteiyDZhiQ6K7Y.roa (hash: z9q0kxM24fAYeNyq/pmadX1fT5Z0bG0j1bIUme2VW1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:25:61:91:d0:da:3c:2b:78:b0:b8:3d:da:33:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
        Validity
            Not Before: Jul 29 01:00:29 2026 GMT
            Not After : Jul 30 01:00:29 2026 GMT
        Subject: CN=08ce1ed6058a0594292ccdd044080daa162a4d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:fc:df:7f:3c:44:9c:91:e3:23:a7:9b:c9:
                    c9:a9:2d:3e:0a:87:18:8c:a0:52:d5:de:e5:a6:f5:
                    d5:d7:a6:58:73:9f:8c:ba:e1:ea:56:82:e2:e1:4f:
                    71:df:ed:e1:2f:29:85:a9:d1:8f:f6:e1:30:26:a0:
                    8f:61:c1:83:7b:d8:36:58:ff:d6:c8:30:97:ac:5e:
                    9a:a0:4f:11:eb:b7:d9:b3:06:8e:31:3e:6e:b7:59:
                    d4:06:59:5c:f7:a5:58:27:8c:b3:5d:8e:ac:93:bb:
                    e8:2f:dd:ed:9a:9c:e8:36:37:a1:35:90:c6:99:cb:
                    5c:d5:89:ac:e9:c6:35:68:fc:43:6a:d1:00:a6:37:
                    3b:11:fd:34:6d:bc:99:6c:3c:1a:ac:64:28:84:6a:
                    0b:b5:ac:f1:5f:f1:1c:c8:32:03:92:fa:0f:6c:5e:
                    7b:4d:e4:d8:12:88:95:97:f7:85:01:d5:20:b6:4a:
                    0e:b4:e3:d0:88:22:e3:3b:60:bd:be:c2:48:13:39:
                    bb:6e:19:63:55:92:5e:44:4f:94:97:42:26:1c:ea:
                    d6:12:a9:94:8b:9b:58:65:28:e8:c9:bc:b7:ea:23:
                    ca:0c:5e:76:98:d4:53:63:b3:c8:e8:3e:d3:c0:73:
                    52:a2:15:f5:a5:ee:ed:29:c6:84:a7:2a:f9:c8:5b:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CE:1E:D6:05:8A:05:94:29:2C:CD:D0:44:08:0D:AA:16:2A:4D:8E
            X509v3 Authority Key Identifier:
                keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:5a:b3:ea:2e:6f:e8:69:e1:94:04:c1:59:35:4e:08:9e:7b:
         9e:2d:91:c3:cf:ce:5b:2c:d4:40:ce:d6:71:f3:8e:4a:94:d1:
         58:82:92:f4:74:7d:f5:d3:e7:4e:7c:aa:42:d9:61:7d:44:44:
         1e:ee:98:ec:f3:55:3e:d3:ab:ef:26:e5:44:ae:6c:48:51:93:
         13:7e:bc:d1:05:06:4b:d3:30:36:46:4f:8d:ab:c0:c9:a2:88:
         1d:12:93:0f:fd:38:41:18:8e:08:e9:13:f9:89:c3:34:0b:46:
         35:b4:28:a1:2a:61:cd:0a:1b:8f:a5:b6:0e:7d:ca:4d:16:81:
         df:77:c1:d9:6d:b6:ee:9a:bb:78:d4:be:22:a0:18:ad:1c:09:
         f1:d4:48:56:5c:ca:f9:86:2d:5a:60:c1:2c:df:43:b9:1a:86:
         9f:11:57:58:71:d2:3e:ef:5b:90:ca:f7:3f:65:76:0b:d1:7d:
         59:c4:c1:c8:8b:81:d7:37:77:a8:2e:dd:41:13:bf:d6:b9:88:
         9a:af:b2:2a:88:b7:0b:51:55:24:df:7a:38:6f:c9:04:eb:7e:
         5b:e7:79:25:37:13:62:2a:12:7d:ae:b4:78:97:14:98:91:3c:
         36:f6:7f:67:9f:99:f7:0d:55:20:c6:76:e0:4e:d1:83:b2:32:
         77:73:ae:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:10 2026 by rpki-client