Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
File:                     EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft (raw, json)
Hash identifier:          /Z/LcRKIeVivXRsAHPnsTCHF5//SoJ6uetKrHv7ovzg=
Subject key identifier:   3F:09:FB:0D:DC:CB:ED:A6:CE:09:7D:79:E8:8D:04:B2:E3:4C:55:26
Authority key identifier: 12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E
Certificate issuer:       /CN=1226023de7c42741590f2c97140670915852366e
Certificate serial:       019FAC07CF0B522958C698CDD8275E6C875A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
Manifest number:          3F
Signing time:             Wed 29 Jul 2026 04:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:20 +0000
Files and hashes:         1: EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl (hash: 5AxjDtbLxPVNa04XNHx46aNqVwNwV1dNNiFgEkbQR8E=)
                          2: mJVNX_CVE3Scl_hPiobgJUhSU1s.roa (hash: Cir8Mch33lIGR800fZufkQADOlq/aWOCF2L+npd2Dzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:cf:0b:52:29:58:c6:98:cd:d8:27:5e:6c:87:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226023de7c42741590f2c97140670915852366e
        Validity
            Not Before: Jul 29 04:00:20 2026 GMT
            Not After : Jul 30 04:00:20 2026 GMT
        Subject: CN=3f09fb0ddccbeda6ce097d79e88d04b2e34c5526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:03:ff:53:d3:68:75:6a:79:fe:ce:cd:82:0d:
                    2c:d0:aa:07:aa:c2:92:2d:1a:c5:d2:ab:39:c2:5d:
                    3e:c5:3b:bf:48:34:4d:58:3e:f7:f9:6e:72:17:72:
                    85:a7:c4:0b:3d:e4:ee:f7:a8:57:b4:e6:50:58:bd:
                    91:f4:a8:3c:62:b4:42:ba:4f:79:24:e8:e7:e5:0c:
                    37:6a:c6:d7:1f:f0:23:c1:6f:a4:9d:3f:ab:c4:42:
                    de:be:c8:ee:81:b1:bb:31:58:05:ff:3b:c4:81:9d:
                    32:e7:9a:c0:c2:d8:0a:cb:16:59:72:bc:d4:52:59:
                    4c:c4:ae:42:ba:71:c8:33:05:6b:70:67:6a:4d:31:
                    67:d2:b3:8a:80:5c:b7:9f:dc:ca:d1:d3:ad:d4:6a:
                    a2:35:ac:91:82:48:9f:5f:e8:af:e8:ea:8a:25:24:
                    e1:0f:75:e0:7b:59:41:7d:11:f0:97:d1:a7:ae:1e:
                    78:8b:44:a3:2c:1d:18:1c:95:8e:0b:ca:a8:03:4d:
                    47:6b:f8:da:a8:7c:36:d6:1b:14:63:9a:7d:70:b3:
                    ed:33:2e:f2:8f:ee:2c:12:56:63:02:ce:b5:5b:77:
                    b9:24:72:c5:e6:b7:77:9a:01:b9:26:a9:73:44:58:
                    cb:9c:f6:b0:f4:73:25:f4:b2:b8:56:85:a0:21:41:
                    b7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:09:FB:0D:DC:CB:ED:A6:CE:09:7D:79:E8:8D:04:B2:E3:4C:55:26
            X509v3 Authority Key Identifier:
                keyid:12:26:02:3D:E7:C4:27:41:59:0F:2C:97:14:06:70:91:58:52:36:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiYCPefEJ0FZDyyXFAZwkVhSNm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0eabbb-5a6b-4340-b2d3-bfc72f7f409f/1/EiYCPefEJ0FZDyyXFAZwkVhSNm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f7:1c:fa:44:f3:71:0c:ac:4b:66:51:6c:00:75:eb:08:c5:
         cd:a8:a7:9b:e5:90:b1:fe:1b:c9:01:86:cb:8a:fa:91:55:2e:
         34:2a:80:4f:2f:f9:40:7a:6a:2d:3b:29:e1:1a:da:5a:85:11:
         62:2d:95:f2:57:85:af:bd:ed:7b:ab:2d:06:3d:a2:b3:ee:1b:
         69:60:ff:e4:2f:48:b0:ca:fc:af:08:27:ac:6c:a2:f2:1f:27:
         23:a6:f9:ac:7f:cd:4a:a6:f3:4a:a8:47:96:8f:62:9f:54:62:
         d4:fe:bb:c7:41:4a:d1:01:18:47:ca:78:2c:5c:78:11:be:b3:
         57:bb:1b:7f:c0:ca:1f:72:45:a2:a3:41:c6:84:b6:32:51:a9:
         e2:26:54:f9:4e:1c:9e:c3:47:ec:54:af:27:e8:30:a7:75:a8:
         d9:54:d0:8a:30:75:44:de:d4:18:a4:9d:22:66:60:14:5e:80:
         e5:a6:53:a9:db:3c:45:89:2b:bf:5f:96:54:34:25:67:44:bd:
         12:e0:bd:e0:e3:e9:94:f5:1a:31:08:2f:7a:cb:c5:f1:15:81:
         e7:91:75:00:69:7f:93:8b:2b:b9:2c:f6:f5:16:f7:dc:36:30:
         dc:b1:d2:41:f2:8a:66:cc:e2:82:48:7b:2f:ee:ea:7b:4e:04:
         21:fb:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:46 2026 by rpki-client