Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
File:                     EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json)
Hash identifier:          JhftWPGLcShr1hkg1TgQpiAf+lEWbV2ttvA1zLzTvu4=
Subject key identifier:   41:0A:53:46:F2:0F:A6:05:1B:57:8D:E3:9A:48:B8:B2:A7:10:A0:61
Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1
Certificate issuer:       /CN=10fe683b1d7e47b7c7eda15501627b70920853a1
Certificate serial:       019FA86260ADD68D3A42CAB9F34A0FC9595E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
Manifest number:          03B7
Signing time:             Tue 28 Jul 2026 11:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:47 +0000
Files and hashes:         1: 6NomImNZWaHi6JxMplj9lMIruGU.roa (hash: 66ybrBR0IXxLeTkfJbiHhp6BZdj8GOj7WY0PcGUFYik=)
                          2: AW17FInZXbbfzlPfQfag3e5H2tA.roa (hash: dmQitLz8NUYQglDkSo+N/IQ9Ntp7x8tsHi+hjRpZyNs=)
                          3: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: rlfWL/dZtxbEnbemE/FjDg71k7248oqgG6MWaK0duUs=)
                          4: G_a_D4w6XID3HHcAkDZ33ncczUI.roa (hash: TJwpjG7RY739+T5MlCso7ay89Sk16BHwPqa3u2ERz/0=)
                          5: U5qz6xEJwpl9W5yFofcjv_QYJdg.roa (hash: SFU07nCtw7gmZMA4jhGAvEN7wK5wQZgNbDVm6oGSUf8=)
                          6: kfWhu14XqoTSm-of-LIXoFlKmfo.roa (hash: 2gNPbrsY3TjB4DdeKmS0SCgbXCurf3GZod3BA1mJqCs=)
                          7: xdqZMIH3R0kq1OUzrCJ7_j5BrPk.roa (hash: JI0nZYfinXynWc9Z+bVX76ENbeGi+A5V4Zl9wHWDiy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:60:ad:d6:8d:3a:42:ca:b9:f3:4a:0f:c9:59:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1
        Validity
            Not Before: Jul 28 11:00:47 2026 GMT
            Not After : Jul 29 11:00:47 2026 GMT
        Subject: CN=410a5346f20fa6051b578de39a48b8b2a710a061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:b4:1f:58:76:e5:08:ff:1b:5a:ec:4d:9e:
                    91:c2:f1:ed:b0:b9:2d:1c:55:28:d8:dc:4a:af:53:
                    65:1e:0f:d2:3a:9a:a9:1f:59:93:2d:88:57:db:d6:
                    b0:f6:8d:7d:25:3a:8c:63:fb:7e:4f:16:b7:62:05:
                    f6:42:14:0d:6e:55:20:04:46:ed:52:6d:21:e7:12:
                    62:f7:15:40:c6:23:af:9b:41:e9:71:3e:65:60:5e:
                    6c:09:25:77:d6:e2:37:53:fa:b5:d2:21:e2:c8:de:
                    96:bf:65:62:ec:1f:b3:6f:d9:f9:d8:d7:fc:ec:6c:
                    82:60:e0:c6:d3:1b:35:f2:09:82:87:e7:5a:44:9a:
                    de:b0:ec:f5:ed:ec:5a:a8:b7:05:f7:ef:b3:f2:c5:
                    04:12:f5:d7:73:3b:4a:50:00:3b:c6:fa:10:d6:62:
                    e4:0a:09:97:1d:c7:c1:d3:68:e9:3b:33:6e:31:ac:
                    82:cc:23:ac:7a:b2:98:45:dc:72:64:f9:60:90:76:
                    72:6a:72:30:b6:26:5c:cb:d2:72:02:a6:bb:cf:39:
                    1c:08:f6:30:e4:5d:a8:26:56:1c:22:4b:15:6d:1f:
                    a2:22:7f:8f:68:b7:d2:cf:fb:7b:19:ae:4f:5a:1b:
                    4c:b6:d4:d3:75:aa:15:98:8b:e6:25:5b:01:b6:a6:
                    38:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0A:53:46:F2:0F:A6:05:1B:57:8D:E3:9A:48:B8:B2:A7:10:A0:61
            X509v3 Authority Key Identifier:
                keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:9f:d3:36:04:66:8f:f2:73:8b:3f:27:7f:9d:aa:6f:f8:10:
         02:3d:03:28:e0:f2:d1:51:42:3d:0e:40:db:b1:3e:09:0b:12:
         a7:ba:93:d5:d9:89:b4:11:d6:e5:b5:e4:12:f7:27:81:12:96:
         ee:ce:54:5f:d6:7c:5a:81:ff:e6:6e:4f:37:fd:d8:52:f0:aa:
         7c:68:3a:38:5c:7e:81:0a:42:45:1f:d6:7f:53:d7:2f:ee:eb:
         ef:9b:7d:25:a1:ec:3b:d0:1a:c2:fa:ff:a8:78:f2:72:1a:0e:
         70:87:92:a4:31:4e:b7:8b:09:64:84:b0:01:79:f3:99:82:dd:
         c3:06:db:ca:d2:78:24:26:57:c9:a6:61:5e:f5:c3:14:0b:c3:
         c8:7f:e7:1a:83:3d:71:23:7c:0e:f8:05:5e:9e:4f:34:10:23:
         21:07:3a:45:ef:2b:1f:1b:f4:c6:5f:ec:a9:16:75:b0:02:0c:
         06:a0:98:63:fb:58:f4:a1:df:f0:d4:74:5a:27:66:27:9d:23:
         c5:69:04:42:45:af:24:b0:d2:bb:60:d7:ca:e8:22:24:93:d5:
         8e:41:f7:7d:63:4d:54:f8:9f:9d:d6:20:23:eb:b9:70:b4:76:
         ad:ca:16:53:1c:d1:c4:e5:e5:6a:e1:b0:d6:4f:f7:ba:ab:73:
         a5:0e:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:28:15 2026 by rpki-client