Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
File:                     e1l6Sw_khublyFue4D5ym97H570.mft (raw, json)
Hash identifier:          Y8imXOvkc4d52VcOf5qSTc7K5g9quL1okjCE/f9FXyk=
Subject key identifier:   EF:E8:EC:9F:33:FB:C9:28:37:5B:FD:19:2A:27:D3:85:35:F9:2A:8D
Authority key identifier: 7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD
Certificate issuer:       /CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
Certificate serial:       019FAABE727374148BE566D80800F4514C5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
Manifest number:          0D57
Signing time:             Tue 28 Jul 2026 22:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:35 +0000
Files and hashes:         1: V9PWKj4xB85axZ-pPoY3y8jfmGI.roa (hash: IXWd/a+RKpFfjxBBgClFTno9TLNCTt1rJRxcU8qS3Bw=)
                          2: e1l6Sw_khublyFue4D5ym97H570.crl (hash: 8HurefNkIFd62c8lx6lECWOEBYJzdKTIfpKzjudIon4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:72:73:74:14:8b:e5:66:d8:08:00:f4:51:4c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b597a4b0fe486e6e5c85b9ee03e729bdec7e7bd
        Validity
            Not Before: Jul 28 22:00:35 2026 GMT
            Not After : Jul 29 22:00:35 2026 GMT
        Subject: CN=efe8ec9f33fbc928375bfd192a27d38535f92a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8f:be:51:97:c6:28:d4:fe:75:6e:7b:b2:00:
                    a4:6b:5e:6a:f9:b3:7d:43:b8:0d:3e:82:c5:d3:35:
                    ad:64:cc:2c:b3:f2:98:2b:f8:6f:d6:b3:7a:36:f9:
                    f3:d2:28:e4:a4:32:01:65:71:52:b5:88:4f:20:74:
                    59:e4:7b:83:7a:e2:10:d7:eb:0e:b6:dc:8f:b4:78:
                    cd:4c:a0:aa:a5:3e:1b:b6:11:35:75:ef:45:24:b0:
                    9f:b2:de:3c:40:f8:33:c3:0a:07:ea:f2:38:9f:08:
                    b4:5a:1a:18:94:9d:99:03:32:f2:b8:74:d6:26:c4:
                    72:37:f0:e0:c7:fa:01:45:65:39:16:51:7d:42:ac:
                    3f:e5:4e:54:6e:cf:43:77:ed:97:c8:fc:7e:5d:b5:
                    5f:0e:7e:ea:1e:3b:61:ee:e0:7e:d9:3f:19:7a:0e:
                    99:92:e6:52:e5:56:f7:31:f5:86:6e:a7:33:c6:36:
                    3b:18:7d:00:80:d8:74:72:b4:83:c0:63:d8:71:43:
                    db:a5:e5:c5:d0:d1:6a:cc:da:8b:39:6b:e0:85:fa:
                    28:1d:80:d2:c3:2d:97:87:c4:af:9a:76:d4:80:ac:
                    fc:e3:6f:bc:9e:40:e3:af:ce:f0:16:41:66:a0:ab:
                    2f:0f:44:f0:48:70:d1:66:b2:c8:7a:d8:31:32:22:
                    4c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E8:EC:9F:33:FB:C9:28:37:5B:FD:19:2A:27:D3:85:35:F9:2A:8D
            X509v3 Authority Key Identifier:
                keyid:7B:59:7A:4B:0F:E4:86:E6:E5:C8:5B:9E:E0:3E:72:9B:DE:C7:E7:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1l6Sw_khublyFue4D5ym97H570.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f04636-b295-4ac8-a86f-e7a382750bb9/1/e1l6Sw_khublyFue4D5ym97H570.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:58:0a:6f:90:c4:f1:b3:35:b3:7d:63:c5:df:06:32:54:01:
         9f:c4:6c:9f:c8:fb:58:2e:20:d7:17:91:37:fa:45:ce:d1:6c:
         8d:09:aa:27:ed:63:07:02:6b:c1:7f:1d:3e:4f:b2:a6:a8:4b:
         4b:55:76:a3:d1:80:7a:99:71:46:f6:2a:1e:66:76:22:b3:b7:
         3f:df:f6:47:50:bd:5c:d8:bd:fc:39:e6:c2:c9:09:44:e9:e0:
         2a:46:1b:8c:87:f3:79:3d:9a:82:a5:c5:74:1d:17:24:7f:fd:
         16:54:7b:ce:61:cd:55:82:a2:35:6c:98:67:32:10:30:ca:d3:
         18:79:03:aa:56:5a:a6:00:5c:1f:70:30:2c:3b:12:69:47:52:
         9c:ad:2f:ea:1a:91:cd:f8:65:ff:63:81:14:e7:8a:bf:11:cf:
         5b:95:fb:73:8d:28:f7:5e:13:0c:74:8a:2b:fc:fb:c5:b6:4a:
         dd:f7:c9:11:89:f2:65:0c:39:ec:89:94:ee:af:3c:43:8d:a1:
         bd:24:17:5a:00:0b:47:00:55:5f:1f:75:97:2e:31:df:84:3a:
         7f:96:ad:9c:d9:72:cd:5b:9c:b9:ad:d8:f7:b0:18:67:61:e9:
         2e:a4:5e:b7:37:46:f7:98:8d:b2:c4:fc:48:e5:c0:05:01:d8:
         d9:a2:75:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:46 2026 by rpki-client