Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
File:                     egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json)
Hash identifier:          B/P9N7G+PwGLXN059zAEkikTVtfzS+QQZ4YE/ub5hqk=
Subject key identifier:   8A:61:55:39:7C:35:05:80:81:6C:A4:3A:B3:46:46:ED:77:7D:FD:5D
Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D
Certificate issuer:       /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
Certificate serial:       019FAC3F435487D66C7727973C2BDF46B729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 05:00:54 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:54 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:54 +0000
Files and hashes:         1: YzKdAdfCvvdPIE3XweETh9g_RFE.roa (hash: EgUeeu3aDHtFIVk2MBTs7H5c0TYshnD2NTKZbs5UU/Q=)
                          2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: BS4FRBn+xD34mfMr4smtC74Ac6zDlgWj/7Zz9LEhFO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:43:54:87:d6:6c:77:27:97:3c:2b:df:46:b7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d
        Validity
            Not Before: Jul 29 05:00:54 2026 GMT
            Not After : Jul 30 05:00:54 2026 GMT
        Subject: CN=8a6155397c350580816ca43ab34646ed777dfd5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:a9:ba:db:9c:b9:cb:04:77:81:25:e5:b1:
                    da:39:86:83:a4:ef:22:ed:6c:5b:e6:55:8e:a0:42:
                    5b:b9:41:55:b1:1b:56:fb:14:34:1f:2c:e1:2d:fa:
                    6c:2d:f8:eb:2e:fc:34:fe:35:11:bf:1c:8f:bc:71:
                    a3:f9:47:a1:57:90:c4:36:d8:b0:a6:56:3a:8e:59:
                    f8:53:b5:f1:f0:64:eb:b3:94:05:87:d1:fe:33:e2:
                    55:1a:93:d1:28:41:0d:66:08:cc:f5:82:23:28:13:
                    d0:26:fa:b2:6c:f7:ee:5b:f0:6f:fb:22:52:07:1f:
                    bc:dd:1d:20:5c:97:11:a4:59:f9:87:80:50:ec:4c:
                    d0:32:74:9e:88:66:d1:e3:1c:d4:70:a6:a6:88:2a:
                    28:a2:1c:41:91:09:13:1f:24:ac:d5:98:21:8d:6f:
                    41:8f:a8:d6:db:0e:ce:78:f7:de:e1:b6:53:40:4f:
                    2e:16:0f:3a:20:5a:24:7c:c3:7b:e2:2c:3e:56:fc:
                    65:ad:17:44:68:eb:b2:54:c1:bc:f6:e6:89:62:f9:
                    f5:c3:38:14:45:85:59:de:d0:18:6e:50:01:cc:5b:
                    bc:09:0b:82:a0:e2:77:62:92:20:ed:7e:3e:3f:db:
                    d6:8a:38:ca:66:10:be:2b:35:47:6d:27:cc:a0:64:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:61:55:39:7C:35:05:80:81:6C:A4:3A:B3:46:46:ED:77:7D:FD:5D
            X509v3 Authority Key Identifier:
                keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:76:6d:ea:96:2b:3b:9a:3e:aa:be:25:a1:26:bd:0e:6e:95:
         62:85:e1:ed:11:cc:10:53:be:fe:5c:be:58:0a:f3:80:0c:8c:
         45:1d:5e:d4:77:57:bb:d6:62:19:d1:b8:4d:17:4f:16:53:6a:
         68:cc:b1:bc:ff:50:1c:95:59:91:72:26:92:4f:66:ac:88:31:
         fd:0f:33:1e:85:46:4c:c9:3d:bf:a5:58:a3:e6:b7:01:3a:c5:
         83:f4:a3:83:5e:ce:2e:e1:39:21:ba:0a:24:64:d7:80:86:99:
         b8:cf:f1:85:e7:23:87:bf:d7:f3:90:b4:5c:69:0d:19:79:57:
         1d:fd:7e:36:3d:2f:40:45:42:96:d1:9a:ca:b9:68:30:02:99:
         1f:38:87:f1:62:65:86:7e:1e:2d:c1:30:2b:2d:ff:96:a6:d9:
         1e:0f:3c:89:8f:c5:aa:24:f6:17:d7:dc:c3:5a:93:0d:6c:e7:
         78:e6:fd:26:7a:12:14:ce:41:fc:bb:3c:31:2e:f5:a1:e7:1a:
         c3:c2:7b:df:9d:8c:0c:65:29:5e:2b:20:47:50:31:fe:96:85:
         f9:c0:1e:3d:aa:8a:97:c2:77:92:8c:c3:e0:75:2a:94:dd:08:
         9f:66:ef:ba:a5:c7:55:e7:0c:07:76:df:92:87:66:f8:45:c0:
         01:bf:d5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:22 2026 by rpki-client