Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
File:                     Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json)
Hash identifier:          8qAkh2u/LIpo0kMlfJipf9tEXNsf3xq2jL5SbiyySQQ=
Subject key identifier:   13:C2:99:6E:06:62:B0:1B:5C:01:F0:3F:65:C7:65:0A:94:08:49:64
Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2
Certificate issuer:       /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
Certificate serial:       019FAC3EE005C3BF88F011CD636A3405053F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 05:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:29 +0000
Files and hashes:         1: 02E3d24-cYfZLV0Glu5j5jr_NxA.roa (hash: HrKA9gSIFPjwKpZcyEJ7If9t0tL8iCIaN1xyRHRej0w=)
                          2: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: IAs7LjNfl8VfX2Ad5AnJ+WzEEX1pj4xbx29aigf0VSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:e0:05:c3:bf:88:f0:11:cd:63:6a:34:05:05:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2
        Validity
            Not Before: Jul 29 05:00:29 2026 GMT
            Not After : Jul 30 05:00:29 2026 GMT
        Subject: CN=13c2996e0662b01b5c01f03f65c7650a94084964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4f:2d:56:03:b1:2f:3d:f8:f8:e6:0e:b5:1d:
                    76:86:6e:2d:05:23:f9:6e:99:6f:13:f9:dc:19:a0:
                    70:5b:81:d7:58:93:f4:7e:6f:f2:8b:8e:4e:30:3a:
                    25:d0:0d:2c:59:bb:23:5c:98:76:0f:10:ce:28:24:
                    80:5e:09:67:df:71:3d:0d:91:bb:44:ce:45:9d:bd:
                    f9:33:5c:43:78:c1:50:e7:8d:5d:33:ef:c3:11:ef:
                    fc:54:ca:88:60:57:d7:d7:a1:db:b2:28:c0:9f:ca:
                    f2:10:a7:f2:96:f5:c2:18:0a:e6:e5:ce:68:cf:c0:
                    48:16:02:73:21:5d:70:f1:4b:c5:33:b8:fb:4d:28:
                    d2:29:de:81:f8:cb:0c:da:6b:5d:2e:b3:96:1e:a6:
                    5f:8d:28:02:49:c3:70:45:09:42:a3:1c:77:0b:ee:
                    74:5c:f3:ab:2b:71:36:e5:6f:96:e8:28:98:b5:bc:
                    09:28:1e:33:6c:6c:76:ed:bc:92:b5:88:23:b2:fc:
                    ee:3d:93:1c:06:82:32:70:59:09:06:a4:f9:1b:4d:
                    f5:ec:27:28:31:85:de:c2:2b:25:76:51:05:40:a8:
                    be:6e:47:62:49:57:49:ae:a9:a5:5b:cc:6d:db:df:
                    eb:bc:fa:0c:52:fa:c9:16:04:5c:f4:13:82:1c:de:
                    f3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:99:6E:06:62:B0:1B:5C:01:F0:3F:65:C7:65:0A:94:08:49:64
            X509v3 Authority Key Identifier:
                keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0b:d5:aa:89:9b:f3:c1:0f:bf:04:6e:07:50:d1:e1:ee:86:
         e5:19:8f:91:59:ee:6d:f7:06:9a:44:68:d6:e9:d5:d1:3d:a4:
         67:9e:97:ee:65:fb:91:35:43:ea:b0:8c:f1:23:b6:00:0c:5d:
         e6:ca:15:d6:83:8e:fd:ea:84:d7:68:ce:e6:a8:75:cc:6a:88:
         f5:83:71:a8:9c:13:0c:5e:14:7b:7e:c7:22:bb:3e:23:37:37:
         65:8a:28:11:96:9e:4b:97:f8:b4:34:b7:bc:17:d1:9e:05:e7:
         a5:54:56:33:1a:97:5d:b6:83:61:6c:54:fc:d7:84:83:fa:cc:
         ae:28:b1:f7:54:25:18:c9:ec:26:d6:66:73:51:ee:10:f7:2b:
         f1:54:40:b4:91:81:2f:cf:85:92:b7:df:75:3d:e5:2d:77:65:
         51:62:3c:9b:64:b9:0e:f9:55:19:58:76:2d:a0:77:f8:60:33:
         07:ca:b8:29:39:ee:42:3b:d5:21:9b:da:0d:8c:8e:1b:24:c7:
         e0:c5:5e:a6:34:30:6c:86:13:88:2e:8f:f6:f3:90:45:35:2d:
         97:9b:ac:cb:3e:f4:f3:09:4f:f8:c3:93:21:13:49:45:55:3a:
         d1:0c:e6:3e:05:9e:2c:ea:64:18:d8:a7:1d:cc:b7:4a:4c:e7:
         ba:c5:ae:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:08:23 2026 by rpki-client