Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
File:                     eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft (raw, json)
Hash identifier:          2fgQJGOfKSAxEneXmbSvL3ukWP5ricWoYy/MTPzWhNg=
Subject key identifier:   F5:CD:EF:B1:C8:DF:A7:86:34:C7:66:5B:4F:A4:67:17:98:CE:9D:AD
Authority key identifier: 78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53
Certificate issuer:       /CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
Certificate serial:       019FACE4766FB3F5C0B25D256B851A1D3285
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
Manifest number:          0E1E
Signing time:             Wed 29 Jul 2026 08:01:21 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:21 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:21 +0000
Files and hashes:         1: eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl (hash: jyhwpbgWfAOihXSK0iK/72O3NOc4oOFCoNKjC5z6sqk=)
                          2: qxD1W6hqRWConVGSQ-eLV8mf_vc.roa (hash: 82D2ADqVdGbGAgEAlHSx5QuT441/zoNjvjslWGw4J00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:76:6f:b3:f5:c0:b2:5d:25:6b:85:1a:1d:32:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7813663c64a5da8dcaf5b3acfd3eeaf835b41a53
        Validity
            Not Before: Jul 29 08:01:21 2026 GMT
            Not After : Jul 30 08:01:21 2026 GMT
        Subject: CN=f5cdefb1c8dfa78634c7665b4fa4671798ce9dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:04:e6:d8:e3:e6:40:40:89:33:69:c1:4c:95:
                    8e:f9:4a:2a:25:5b:de:12:1a:34:cc:2f:53:07:5a:
                    59:21:a8:69:6f:04:9c:ed:67:72:e7:c2:15:b4:b1:
                    5d:97:f9:b9:de:74:8e:b0:e6:d5:01:96:a6:eb:2b:
                    fa:b0:35:42:09:5c:fb:92:98:38:b0:88:83:74:07:
                    c4:30:02:a5:09:4d:31:cd:d7:10:fe:bf:7e:9a:14:
                    bb:1e:90:22:99:d6:7b:dd:e3:a8:12:55:35:2e:d6:
                    bb:30:09:b9:fd:2f:90:24:e4:8b:16:28:2d:7a:92:
                    22:2d:fe:c8:ed:2d:8f:7a:b5:ed:6f:fa:5a:a9:03:
                    fe:4a:cf:c3:cf:00:f8:7b:0c:68:6f:34:24:52:08:
                    51:06:4e:d0:67:98:c3:da:1d:59:5d:8b:db:f0:ee:
                    2d:05:59:b9:9a:1e:ab:7a:3a:0d:0b:ac:9d:11:7a:
                    8d:b2:72:95:d0:58:5e:3d:e9:e8:28:b6:ee:75:cd:
                    cc:4d:ae:0d:f0:59:fa:24:e8:cc:ca:b0:2f:89:4a:
                    48:ea:b2:c1:1c:58:52:e4:28:be:4d:9e:f2:ee:a5:
                    30:1f:4d:20:ae:b8:ab:31:d3:3a:39:1e:ca:bc:84:
                    ec:57:1d:be:cb:4d:56:ea:ef:e7:fd:86:0f:f4:23:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CD:EF:B1:C8:DF:A7:86:34:C7:66:5B:4F:A4:67:17:98:CE:9D:AD
            X509v3 Authority Key Identifier:
                keyid:78:13:66:3C:64:A5:DA:8D:CA:F5:B3:AC:FD:3E:EA:F8:35:B4:1A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBNmPGSl2o3K9bOs_T7q-DW0GlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6451ef-32d2-4f51-b3bd-9d1cda23ec4f/1/eBNmPGSl2o3K9bOs_T7q-DW0GlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:44:c3:78:37:35:3f:d4:aa:50:f6:93:97:6a:e2:d5:36:72:
         6c:35:0f:98:e3:47:a2:38:6a:2f:36:cd:e8:14:20:d3:ff:81:
         13:6a:ea:fb:40:b6:0c:95:eb:59:75:fa:98:f9:54:0e:30:67:
         06:b0:36:4f:d8:db:b3:d4:87:53:be:9f:e6:3e:71:54:4f:6d:
         06:3c:ed:2f:53:b4:6d:34:93:8e:2f:89:19:46:1e:d3:27:51:
         67:dd:1f:6c:3f:9b:f5:89:1a:67:c5:fc:b5:bd:c8:18:b6:04:
         c0:6c:94:6c:d8:e5:ad:28:29:3c:d3:13:c8:a3:fc:6a:29:71:
         04:bc:86:5d:e5:c8:19:3c:76:c3:8b:47:40:a1:c8:53:0a:13:
         8a:7a:af:3e:1e:59:9d:16:2d:1e:3f:fb:a9:f6:52:36:04:de:
         52:7c:b4:49:0c:1f:05:26:a5:bf:3b:9b:6f:67:24:c1:11:de:
         d2:08:60:6d:52:03:61:32:92:03:fe:e7:b8:41:5d:7a:2d:5a:
         81:1e:e8:42:24:55:fc:7b:54:91:0c:ff:d2:b9:2f:f3:be:f9:
         b9:c3:12:4f:17:e7:d8:8a:d0:49:1e:ba:73:08:95:d3:83:4d:
         ff:ff:a2:b7:07:18:e4:68:04:92:f8:c6:2d:fb:f0:e1:79:31:
         4b:84:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:31:12 2026 by rpki-client