Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
File:                     EHbBYnj8gh4e75Mv3qmz3WPKayE.mft (raw, json)
Hash identifier:          jpVl8v/HH+MEHM5l440DnrzM/3hvLOvvRtxv0NN8t80=
Subject key identifier:   5D:71:39:16:70:6A:40:A9:2F:E6:55:85:D6:15:F0:C5:62:A8:22:A7
Authority key identifier: 10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21
Certificate issuer:       /CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
Certificate serial:       019FA9AC35BF852DCA8297422A8DA53A5C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
Manifest number:          0A0C
Signing time:             Tue 28 Jul 2026 17:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:03 +0000
Files and hashes:         1: EHbBYnj8gh4e75Mv3qmz3WPKayE.crl (hash: WP1DXDtwLx4UoseVbAU0vLBDtDzMGyqs1kqXIE5qeu8=)
                          2: q7k3Jgi45VhxVB2FaU-fxYdycok.roa (hash: aUl7kjDi6eCHksQ88LJAOR22rf6+FmaVUEOAmzpORAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:35:bf:85:2d:ca:82:97:42:2a:8d:a5:3a:5c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076c16278fc821e1eef932fdea9b3dd63ca6b21
        Validity
            Not Before: Jul 28 17:01:03 2026 GMT
            Not After : Jul 29 17:01:03 2026 GMT
        Subject: CN=5d713916706a40a92fe65585d615f0c562a822a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:36:b5:26:dc:29:c7:cd:d8:17:f7:c9:13:
                    3b:2c:a7:6c:dc:f7:83:5c:ca:8a:51:f3:47:93:7c:
                    de:81:31:75:10:df:b2:22:04:7c:1f:95:0d:82:cc:
                    c3:0b:68:00:61:ab:c9:e0:d2:d4:6b:3f:9d:3f:35:
                    04:c4:21:e5:86:ab:b1:81:f8:63:ed:db:d6:07:2b:
                    18:c4:a8:7d:72:20:4d:22:75:2d:38:c3:87:0f:f1:
                    26:e8:eb:34:2a:f0:5b:d3:ce:81:01:47:c4:1e:58:
                    3c:f9:28:96:1f:85:b1:98:75:5d:e4:61:89:b6:9e:
                    12:4f:85:d4:9e:11:2a:7f:a0:b9:43:7f:8f:a9:8a:
                    b1:4f:53:fa:ef:4c:26:d0:98:7f:30:94:77:b8:d5:
                    fb:92:89:c4:60:e9:43:f0:8d:2b:b1:82:d3:64:f1:
                    7f:28:4f:b8:7e:f7:e5:a8:8e:d8:52:79:dc:9e:77:
                    31:16:dd:d6:4d:55:04:d8:8a:61:b0:cc:bb:40:a9:
                    f4:e2:0a:b4:9b:62:81:f4:be:7e:39:65:bc:9c:2f:
                    08:12:91:d0:6c:60:82:ab:61:d6:32:b0:19:e3:a8:
                    89:bb:b6:c1:62:13:19:e9:12:8a:22:28:21:2c:a9:
                    78:32:55:ed:fc:75:d0:07:a0:c0:cd:51:7e:6a:68:
                    e6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:71:39:16:70:6A:40:A9:2F:E6:55:85:D6:15:F0:C5:62:A8:22:A7
            X509v3 Authority Key Identifier:
                keyid:10:76:C1:62:78:FC:82:1E:1E:EF:93:2F:DE:A9:B3:DD:63:CA:6B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHbBYnj8gh4e75Mv3qmz3WPKayE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/82b10e-638f-4267-bc24-d494d997d398/1/EHbBYnj8gh4e75Mv3qmz3WPKayE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7a:69:c7:0d:20:b7:d3:0e:6a:a7:a8:3a:67:97:ef:7e:70:
         95:f5:1b:8b:79:29:c3:6b:85:7c:60:2a:30:92:ca:6d:15:2c:
         b5:4b:5d:93:09:ae:30:8f:2f:c7:bb:07:c9:05:a4:61:eb:41:
         73:04:54:e7:af:19:04:f9:ba:b6:bd:44:93:60:ea:92:a8:1a:
         9b:8c:0f:b0:03:a4:ec:7e:af:c7:17:2b:c5:04:38:28:9d:59:
         5e:c1:79:53:b6:fc:37:4f:fa:bb:d9:5f:6d:be:0a:06:57:1d:
         76:d2:b8:df:55:62:83:04:f0:6e:5f:c2:6e:93:f6:6a:71:c9:
         5f:ce:ac:4e:52:63:01:3d:50:cc:01:c6:19:8e:21:e8:3a:b1:
         4b:17:a2:a9:bd:9d:39:a9:eb:8f:1c:78:41:2d:7a:c6:01:ed:
         02:b7:5d:8c:52:33:29:c0:b5:14:2a:d9:dd:74:ec:98:9b:c5:
         f0:c4:97:c1:5f:e5:34:60:09:ea:a0:7c:e9:aa:c7:bf:8f:d6:
         83:79:09:f6:5e:f5:5b:d2:2e:b1:ff:67:6c:8c:6e:1a:4d:1e:
         1b:1e:a8:93:3c:08:bb:68:76:72:80:f6:e7:c1:49:1a:0d:6a:
         7e:a1:0a:d6:d1:c2:27:31:6e:59:ed:a0:8c:c8:8a:ef:5a:f0:
         a6:a7:d5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:07 2026 by rpki-client