Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
File:                     eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json)
Hash identifier:          eE571NbflxqWd3h7D1A8tJa0T15lO47SSLgDyfj2ngM=
Subject key identifier:   1D:BD:22:5C:F4:B6:D5:29:D9:02:0B:5D:08:30:4E:47:93:44:8C:BF
Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61
Certificate issuer:       /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
Certificate serial:       019FAB9A73AAF0465D824E120EA9AB6D97AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
Manifest number:          02EE
Signing time:             Wed 29 Jul 2026 02:00:53 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:53 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:53 +0000
Files and hashes:         1: Sm4r_ZYf1TK-pmJlyZULA1V5IWY.roa (hash: WcFy3x0XhhNqCP1SgxYrQOhQpXbYRQ1TrY/aquk9Bhg=)
                          2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: d+/PXKD1fpKPj8mh1ucykJ9MxFN76WohEeKEqrYmYD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:73:aa:f0:46:5d:82:4e:12:0e:a9:ab:6d:97:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861
        Validity
            Not Before: Jul 29 02:00:53 2026 GMT
            Not After : Jul 30 02:00:53 2026 GMT
        Subject: CN=1dbd225cf4b6d529d9020b5d08304e4793448cbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:51:c7:32:f5:cc:34:a3:90:49:65:c2:76:
                    d1:69:ba:e0:fc:29:e2:2d:74:42:d6:cc:3f:9c:52:
                    dd:4a:be:aa:93:8b:27:c8:b3:f0:c5:92:61:00:6f:
                    ca:d0:6c:37:80:75:a8:78:1e:ef:1c:f2:44:ab:11:
                    9d:c3:bc:af:36:cd:05:5e:79:05:36:ed:d7:de:ec:
                    f9:21:cc:95:4c:2d:34:81:1f:83:b5:a1:db:87:62:
                    8e:5e:c1:ab:70:39:48:5b:e2:29:3a:77:84:cf:c6:
                    02:af:85:ea:3f:b5:a5:c0:2d:f0:72:dc:11:81:9e:
                    9c:7d:08:9c:47:41:b2:21:f3:1e:13:60:c2:90:e6:
                    76:04:c3:29:98:0e:55:16:bb:ee:c3:91:39:3f:30:
                    87:f1:9b:2f:2a:a8:2d:bb:7c:3c:c4:00:b0:33:5c:
                    99:1f:27:56:74:26:f7:b6:4c:a0:c5:46:a3:76:d4:
                    c5:17:e3:6b:44:d4:b5:8e:49:54:52:ed:50:9d:48:
                    6d:1d:18:fd:25:44:9d:11:f3:d3:78:4d:80:4f:dc:
                    46:7f:3f:25:4a:1e:0e:99:b3:18:d7:09:2c:16:99:
                    2d:68:79:04:cc:4f:37:46:42:62:83:fd:a8:46:e7:
                    27:46:9f:6f:e5:28:7c:49:98:bc:59:69:ad:2d:40:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BD:22:5C:F4:B6:D5:29:D9:02:0B:5D:08:30:4E:47:93:44:8C:BF
            X509v3 Authority Key Identifier:
                keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:68:fc:3e:55:96:1b:ee:fb:07:48:ed:0e:89:f8:1b:13:f0:
         7c:f9:83:d6:36:e5:eb:e0:88:e2:60:73:29:2f:d0:47:99:ad:
         a6:6d:41:15:e7:31:c7:1f:4e:70:73:ff:04:51:07:00:16:06:
         91:bd:1d:78:bf:55:54:c9:0f:74:eb:0f:26:f9:3f:31:4e:53:
         98:10:a1:81:1b:90:c2:c3:62:a2:d1:ec:1b:4b:2f:9b:c4:bc:
         c1:f7:bd:55:22:ee:82:ee:e7:a9:bf:1b:1c:c4:f9:f6:b4:b1:
         a1:2e:1d:39:fd:aa:ea:c4:8b:be:5f:70:44:6f:ce:07:98:44:
         ec:a8:4c:d4:1e:d4:8e:78:e9:f1:b3:a9:88:92:f9:48:5b:b7:
         1c:45:3e:c7:09:42:bd:34:dd:58:c5:b1:a4:6e:86:c0:0b:11:
         13:c2:47:88:86:d4:04:50:f4:38:92:ff:78:be:5b:1f:0e:a7:
         66:e5:1d:01:0a:18:a6:be:74:b6:1f:19:96:87:a6:58:5a:1f:
         01:00:c7:71:37:e5:50:da:7a:35:41:e1:ee:2d:3c:e0:78:71:
         c6:69:a6:a2:2c:19:8d:d1:89:6d:74:5b:f5:b5:b8:6b:34:3f:
         5c:8a:c4:cf:88:1a:1f:8b:09:4e:e6:77:89:29:1b:66:35:db:
         45:1e:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:22:22 2026 by rpki-client