Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
File:                     EDqpCejbAPg3ekUNvKV9BR9L9DU.mft (raw, json)
Hash identifier:          yq3urTosVvjU07qJXaLQSzYKCTpPTcLxgOJVwj0Aw+w=
Subject key identifier:   94:99:3B:8A:26:2C:B1:95:F2:7B:77:DA:1D:23:CB:DA:2D:E1:F6:23
Authority key identifier: 10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35
Certificate issuer:       /CN=103aa909e8db00f8377a450dbca57d051f4bf435
Certificate serial:       019FA899A8EB6F1F0D76C793F7B102F02D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 12:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:10 +0000
Files and hashes:         1: EDqpCejbAPg3ekUNvKV9BR9L9DU.crl (hash: ZYqS7HmbF5Z4nqIksvPS7zgZFN1H4V/KI6pQliyNn+c=)
                          2: zPL9SpEzbgv5hV90JadQIHwlZEo.roa (hash: oUod7lCzpgjd0dTnd1D/3YCd+gyJLYZuycYofSWlLPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:a8:eb:6f:1f:0d:76:c7:93:f7:b1:02:f0:2d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=103aa909e8db00f8377a450dbca57d051f4bf435
        Validity
            Not Before: Jul 28 12:01:10 2026 GMT
            Not After : Jul 29 12:01:10 2026 GMT
        Subject: CN=94993b8a262cb195f27b77da1d23cbda2de1f623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:db:a1:71:79:43:27:b4:5c:cf:8f:f4:a9:3a:
                    1c:9d:e6:0c:f9:ac:17:90:42:d5:25:2d:61:db:32:
                    a7:c3:cd:89:2e:53:27:76:3f:fb:06:68:b0:5b:88:
                    0c:e5:f8:10:b1:ae:fe:49:7e:c8:c5:df:ae:a9:a9:
                    58:17:e5:bd:10:c5:76:e5:98:11:83:0d:83:ee:cd:
                    c2:bb:6b:2d:98:c5:05:38:1e:93:72:db:3e:21:2a:
                    e6:88:5e:9b:b7:96:d7:a9:99:73:4d:96:6e:64:4e:
                    84:dd:d7:13:3b:54:96:12:6b:4a:26:c4:23:35:87:
                    35:3c:b3:0d:6f:8b:b8:b1:3e:0e:37:7b:ef:ff:01:
                    d6:9d:94:74:7e:52:b2:bc:34:6b:2a:f5:b8:d5:21:
                    3e:fe:81:3e:81:16:c8:80:74:1b:67:ef:69:41:7e:
                    eb:cc:05:d3:cd:ac:e8:5d:2a:2f:53:79:1a:ab:70:
                    49:16:a3:87:e1:76:58:0d:96:ac:ca:f7:d5:f2:b4:
                    86:94:af:79:90:0a:48:91:87:d2:45:01:b2:85:65:
                    20:85:4c:7f:33:0c:0c:03:9f:58:89:7f:74:8d:03:
                    52:08:75:7a:76:82:ed:5c:0c:ef:e1:ed:21:74:d6:
                    a1:f9:f9:02:53:60:8b:8e:f8:e0:91:2f:65:5b:78:
                    0a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:99:3B:8A:26:2C:B1:95:F2:7B:77:DA:1D:23:CB:DA:2D:E1:F6:23
            X509v3 Authority Key Identifier:
                keyid:10:3A:A9:09:E8:DB:00:F8:37:7A:45:0D:BC:A5:7D:05:1F:4B:F4:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDqpCejbAPg3ekUNvKV9BR9L9DU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2f7c79-3f6b-444a-8ec5-7bdca7516e75/1/EDqpCejbAPg3ekUNvKV9BR9L9DU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:18:30:01:18:97:6b:75:58:ce:8e:a9:a9:85:38:13:a7:
         d8:e2:12:ec:c7:f7:bc:af:44:c2:cf:7a:3a:1a:d2:19:99:e0:
         69:2c:c5:17:61:ac:85:0e:2c:39:6a:89:7c:3c:35:42:f8:4b:
         7d:17:b3:8f:fb:3f:29:a2:2a:97:0b:a8:65:42:cb:17:e7:54:
         8a:01:71:cb:d5:67:8b:a4:04:43:c3:f1:34:41:c1:12:4f:30:
         74:30:e8:5b:4c:3a:00:3e:d0:15:de:e5:1d:4d:a1:cf:7a:d9:
         20:6e:ea:32:1d:51:81:0f:8f:8a:3b:c6:45:0b:83:1c:eb:ed:
         96:65:1d:e7:77:0a:fc:84:63:58:de:28:ec:34:39:3f:4e:85:
         93:4e:0c:40:44:21:b6:95:9a:28:4f:37:7a:a4:f1:af:2b:58:
         5d:82:4d:5b:fd:3e:f0:ce:15:b8:20:8d:ff:9a:f8:c1:1a:5c:
         89:e5:9a:c1:b9:7e:56:99:0f:ea:2c:46:72:00:02:51:74:14:
         3a:8a:6c:9a:06:1d:af:ac:a9:9c:35:34:b3:1c:ef:bd:ac:34:
         a8:62:50:fe:51:9b:0e:d4:4d:4b:64:b6:20:51:66:7f:ab:52:
         46:65:7c:86:9d:55:64:5c:2c:a0:62:f8:04:57:0e:45:81:6c:
         3b:77:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:21 2026 by rpki-client