Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
File:                     EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft (raw, json)
Hash identifier:          y3tZfhAX+o32K5XIh2y1a+a5D0SwFiifY7En/nSLdqM=
Subject key identifier:   32:3F:7C:AA:B4:D8:B7:DC:46:4B:86:85:AE:1C:16:4E:93:EB:2F:89
Authority key identifier: 10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7
Certificate issuer:       /CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
Certificate serial:       019FA899ACF1400C6091BA78A6D6DD5F9BB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
Manifest number:          19CE
Signing time:             Tue 28 Jul 2026 12:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:11 +0000
Files and hashes:         1: EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl (hash: XplOShz2Jtvd1XU9UAEmJYYb5Xf7ECtl55kRqu+n8Wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:ac:f1:40:0c:60:91:ba:78:a6:d6:dd:5f:9b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=104f991d55d6a5171431c74c1aa5cbeb299547e7
        Validity
            Not Before: Jul 28 12:01:11 2026 GMT
            Not After : Jul 29 12:01:11 2026 GMT
        Subject: CN=323f7caab4d8b7dc464b8685ae1c164e93eb2f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e7:55:18:41:03:2d:68:a9:76:96:9c:63:29:
                    75:c5:3b:cf:38:8b:50:f5:a6:d9:b4:2e:bd:13:6e:
                    57:fb:e2:e0:20:87:0b:93:b6:2d:52:2a:1a:bb:36:
                    f8:54:a3:ff:c0:d1:4b:6c:e8:ef:99:80:eb:51:ec:
                    91:a3:65:f7:60:aa:71:b0:69:56:d9:87:cd:2c:e5:
                    6f:8b:d3:3f:27:af:2a:a4:47:da:b7:30:cd:d1:77:
                    af:77:5d:4f:46:1b:64:d2:b6:87:ae:1a:fe:38:19:
                    b6:ae:1a:25:36:f8:d8:4d:f7:27:1a:95:f9:33:45:
                    a4:10:af:e1:93:99:64:59:c6:7d:64:8e:66:5b:80:
                    60:3b:e8:7b:6d:53:7a:53:82:00:aa:3c:85:36:c5:
                    6a:9b:a4:30:3f:fb:44:80:ec:a7:35:09:db:ad:b1:
                    53:57:d3:40:a0:8b:f7:2d:58:e3:df:93:d9:ab:5e:
                    ed:97:94:0e:8d:9e:45:fd:4c:9a:ba:cb:44:fc:4d:
                    87:7f:7f:86:ae:32:b8:e4:44:04:20:95:5c:a7:d7:
                    8e:8b:ae:fc:5c:25:b9:35:86:d2:e6:ca:cd:37:7b:
                    47:69:16:c7:84:80:9a:7c:f0:01:1e:74:26:82:dc:
                    b2:21:3c:a5:07:b4:94:33:fd:08:14:e3:5d:43:da:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:7C:AA:B4:D8:B7:DC:46:4B:86:85:AE:1C:16:4E:93:EB:2F:89
            X509v3 Authority Key Identifier:
                keyid:10:4F:99:1D:55:D6:A5:17:14:31:C7:4C:1A:A5:CB:EB:29:95:47:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7faf2b-3e68-4381-a591-25a8c0d9f002/1/EE-ZHVXWpRcUMcdMGqXL6ymVR-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:db:25:bf:63:7f:50:27:7c:ff:ef:bf:56:3f:f3:33:34:51:
         4c:45:33:2d:04:01:5e:c2:61:0b:f8:e8:26:28:f8:3b:ba:38:
         26:d8:e8:9c:bc:52:33:1f:b6:db:48:13:d2:04:59:95:45:03:
         86:e3:d7:9f:45:30:db:35:ae:a2:aa:56:a9:37:50:a7:cd:79:
         1a:7c:f5:67:cf:3e:c6:08:fd:74:49:35:db:42:63:0e:41:e3:
         ce:58:ec:87:27:f7:66:4e:11:59:1b:57:2c:e2:26:cd:52:78:
         57:e1:7e:ea:3e:95:69:f7:91:e5:72:bf:ee:4c:60:15:7e:57:
         a3:2d:a1:be:fd:8d:c6:af:ae:ba:64:e1:47:c6:13:fd:d9:4d:
         33:79:71:72:92:69:8b:0a:53:71:86:8c:2c:43:5b:8e:db:db:
         64:ec:ab:50:1b:ef:38:99:ba:66:40:29:eb:84:49:e4:c9:d7:
         1d:8f:1f:46:38:c9:66:65:74:52:56:53:1f:7b:bf:7b:58:b3:
         03:44:9e:86:83:9c:a3:aa:0f:4e:44:90:fb:31:e8:62:2f:cf:
         a5:a9:a7:8b:19:59:71:9b:ba:4a:bc:fd:aa:8d:a8:e9:a9:83:
         f5:6d:2b:fe:43:7a:62:b3:f8:86:94:41:36:68:9d:ed:13:54:
         0f:c1:d9:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omazxQAxgkbp4ptbdX5u2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNGY5OTFkNTVkNmE1MTcxNDMxYzc0YzFhYTVjYmViMjk5
NTQ3ZTcwHhcNMjYwNzI4MTIwMTExWhcNMjYwNzI5MTIwMTExWjAzMTEwLwYDVQQD
EygzMjNmN2NhYWI0ZDhiN2RjNDY0Yjg2ODVhZTFjMTY0ZTkzZWIyZjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhedVGEEDLWipdpacYyl1xTvPOItQ
9abZtC69E25X++LgIIcLk7YtUioauzb4VKP/wNFLbOjvmYDrUeyRo2X3YKpxsGlW
2YfNLOVvi9M/J68qpEfatzDN0Xevd11PRhtk0raHrhr+OBm2rholNvjYTfcnGpX5
M0WkEK/hk5lkWcZ9ZI5mW4BgO+h7bVN6U4IAqjyFNsVqm6QwP/tEgOynNQnbrbFT
V9NAoIv3LVjj35PZq17tl5QOjZ5F/UyaustE/E2Hf3+GrjK45EQEIJVcp9eOi678
XCW5NYbS5srNN3tHaRbHhICafPABHnQmgtyyITylB7SUM/0IFONdQ9qNJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDI/fKq02LfcRkuGha4cFk6T6y+JMB8GA1UdIwQY
MBaAFBBPmR1V1qUXFDHHTBqly+splUfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEt
MjVhOGMwZDlmMDAyLzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi83ZmFmMmItM2U2OC00MzgxLWE1OTEtMjVhOGMwZDlmMDAy
LzEvRUUtWkhWWFdwUmNVTWNkTUdxWEw2eW1WUi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9slv2N/
UCd8/++/Vj/zMzRRTEUzLQQBXsJhC/joJij4O7o4JtjonLxSMx+220gT0gRZlUUD
huPXn0Uw2zWuoqpWqTdQp815Gnz1Z88+xgj9dEk120JjDkHjzljshyf3Zk4RWRtX
LOImzVJ4V+F+6j6VafeR5XK/7kxgFX5Xoy2hvv2Nxq+uumThR8YT/dlNM3lxcpJp
iwpTcYaMLENbjtvbZOyrUBvvOJm6ZkAp64RJ5MnXHY8fRjjJZmV0UlZTH3u/e1iz
A0SehoOco6oPTkSQ+zHoYi/PpamnixlZcZu6Srz9qo2o6amD9W0r/kN6YrP4hpRB
Nmid7RNUD8HZkg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:50 2026 by rpki-client