Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
File:                     EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft (raw, json)
Hash identifier:          aAtiTEI7vMcgwzS7I+fzwmULmlmeEu4lHi6/RfAv60M=
Subject key identifier:   AA:FE:B3:AC:ED:27:99:C8:A1:D5:D4:6F:0E:62:A1:AA:D4:0C:55:FD
Authority key identifier: 11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55
Certificate issuer:       /CN=11e512976b91a2967ebce10ed4052ece12b14155
Certificate serial:       019FA8625F151F8A8A8B10FBD71427AC123A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
Manifest number:          0D31
Signing time:             Tue 28 Jul 2026 11:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:46 +0000
Files and hashes:         1: C_swQ1amU9xoTLneSqK5rEPwSHY.roa (hash: kd5UBDyTUyD8YdrwighS1kP5DDkufkXNg0jZY2oswQA=)
                          2: EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl (hash: mX4Q3mXT2PRYeT3GnFL8Eska8is60yJsDStRvkDRtig=)
                          3: FrHMIqU1nyql5fH458yK8iNimJU.roa (hash: HPL1MkQufVuqDT5rCNUypCZgqKjP0W6MbJyxk8JQnmg=)
                          4: winuxMCIMGCWTsiZdugMqwv5WZg.roa (hash: TKNpHnOSd+fkBMQkgcz+gS3AAX2dTYjFIei9VWwZPxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:5f:15:1f:8a:8a:8b:10:fb:d7:14:27:ac:12:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e512976b91a2967ebce10ed4052ece12b14155
        Validity
            Not Before: Jul 28 11:00:46 2026 GMT
            Not After : Jul 29 11:00:46 2026 GMT
        Subject: CN=aafeb3aced2799c8a1d5d46f0e62a1aad40c55fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:be:6f:3e:b4:31:06:58:30:1b:48:23:ce:
                    86:5a:87:c1:f4:df:58:f4:40:d7:b6:7e:d9:21:ca:
                    45:00:f1:ac:17:a7:17:99:51:36:25:5f:14:0b:a6:
                    cb:78:c7:ad:31:ad:8a:ef:e7:b6:ef:bc:cf:6c:d8:
                    c6:2a:dd:63:50:7a:02:57:66:9a:90:f2:99:78:50:
                    c6:71:89:d3:35:51:9b:29:a6:5f:9b:a3:a0:f3:bb:
                    8d:61:28:08:d8:09:0d:28:23:fa:b6:1b:83:37:7f:
                    14:d1:3f:68:1b:f1:ab:29:43:b9:f6:cf:4a:ae:3a:
                    f0:e9:e8:34:43:e6:dc:84:6a:0d:ba:84:bd:77:1c:
                    e2:06:84:18:de:00:cb:25:7f:91:7d:b6:39:d8:bc:
                    21:41:fc:2f:2d:c1:22:b1:dc:c2:f8:5c:f2:62:25:
                    7b:8b:5e:44:5e:c9:a7:14:00:88:89:4d:b8:c0:24:
                    ee:e3:d9:43:eb:58:ec:fd:45:c1:10:d5:f3:a4:bc:
                    eb:92:9d:84:b3:ad:76:f0:5b:a5:7e:b0:a4:58:3d:
                    31:15:ff:b5:a7:c0:f6:dd:e8:f1:c9:dd:bb:cd:65:
                    be:7b:8d:51:bb:3f:80:92:51:1c:dc:1d:fc:f4:6c:
                    0b:9c:f1:5c:8e:aa:d0:01:9b:07:77:f9:da:51:d8:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:FE:B3:AC:ED:27:99:C8:A1:D5:D4:6F:0E:62:A1:AA:D4:0C:55:FD
            X509v3 Authority Key Identifier:
                keyid:11:E5:12:97:6B:91:A2:96:7E:BC:E1:0E:D4:05:2E:CE:12:B1:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeUSl2uRopZ-vOEO1AUuzhKxQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/17a3c0-e97a-4306-bce4-7ff32b6ffd1e/1/EeUSl2uRopZ-vOEO1AUuzhKxQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:ca:e2:bc:ac:99:b6:33:15:8f:a2:f6:ed:50:46:10:85:93:
         6c:d8:9d:1a:5b:04:bd:65:8a:99:7b:12:d9:35:b0:f7:d2:52:
         77:34:a1:ca:26:92:0e:85:d6:1f:78:b6:9d:05:ed:89:7c:72:
         0d:0c:c8:28:4a:44:fd:fc:45:53:4b:76:ff:f7:8b:86:d5:e5:
         45:98:f4:dd:7f:a1:80:f8:4b:71:db:1e:4e:e2:7a:5c:ab:e8:
         2b:60:e3:20:4c:de:85:ec:8d:cb:b8:98:76:15:e5:a5:3f:f9:
         a2:41:61:d0:d7:43:bd:2c:3f:c5:5b:d6:ca:64:76:7e:43:70:
         86:be:91:d6:5e:86:13:4e:91:4b:ee:37:fc:b6:fb:04:0d:4f:
         bc:33:47:37:0b:05:4b:cb:c0:50:6e:3d:ff:0a:82:bd:10:76:
         2c:b5:31:06:0b:a0:68:24:34:86:74:f3:60:bb:d8:1b:9e:93:
         17:c2:17:90:aa:8c:ee:b5:83:53:1c:22:d4:1f:5a:05:7d:c1:
         92:d6:42:5b:e0:cd:60:83:cd:88:ed:6a:63:d0:fa:f1:b1:cf:
         b5:2d:c1:e2:3a:6c:0d:55:69:78:d9:3e:2e:1e:de:a9:a4:ad:
         a5:b2:14:3c:c2:09:4b:99:63:8b:d2:80:7d:60:6c:73:f8:e7:
         b1:b4:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:46:30 2026 by rpki-client