Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          YPetxiZl+Pb2/nW5mrWI4bEULm/CJZ+6MSDEQwtjP94=
Subject key identifier:   58:3B:B9:65:C4:03:F6:B4:AE:D2:18:D9:BB:D5:3F:25:DC:F6:AE:51
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       019FAA198DBC6635494F0FC53DCFB13DE6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          085F
Signing time:             Tue 28 Jul 2026 19:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:29 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: eY9ZZQkaAf9g6n0jVSkUCVDZ5rXAqqJSbVVjqLWnBt8=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:8d:bc:66:35:49:4f:0f:c5:3d:cf:b1:3d:e6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Jul 28 19:00:29 2026 GMT
            Not After : Jul 29 19:00:29 2026 GMT
        Subject: CN=583bb965c403f6b4aed218d9bbd53f25dcf6ae51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6c:11:34:89:1b:7f:b9:1b:0c:02:cd:b7:6a:
                    42:b9:1e:7b:0e:7d:db:33:df:1b:18:82:79:28:ba:
                    44:f3:16:36:c1:4d:75:5a:6c:15:e9:16:1e:ab:cc:
                    a8:19:3e:24:20:fd:9f:a1:33:98:26:ab:e1:5f:6c:
                    3e:7f:c7:ad:3b:3e:ef:f6:d6:af:7a:21:1b:bd:f2:
                    ca:5c:06:13:b8:70:10:a6:29:30:d7:56:d4:e3:47:
                    e6:b9:25:ab:59:b7:8d:78:a1:ba:87:45:ac:64:f3:
                    13:91:45:32:04:e2:98:98:68:48:cd:59:15:3d:96:
                    32:5b:5e:52:6f:cd:5e:e3:0d:b7:b0:61:10:40:ac:
                    42:22:af:7b:10:3b:55:64:04:6b:22:c4:53:f2:95:
                    63:ab:39:20:7d:a0:3b:1d:b8:0c:ac:a1:4b:fe:d7:
                    8c:aa:49:c9:1d:4d:5a:20:1b:d2:8a:46:44:f2:0f:
                    6e:3d:68:f3:c5:70:ac:97:12:f7:3a:15:d3:8c:fe:
                    83:d4:78:bf:16:d2:1a:77:c3:f1:8f:f8:9d:ee:16:
                    80:03:0d:65:f6:21:42:1b:6b:83:25:84:31:4c:c3:
                    fe:06:bb:e2:f1:0d:f1:10:27:68:78:3d:37:9e:05:
                    79:d7:e5:50:3c:97:80:6a:40:e8:3c:1f:7c:e4:60:
                    0c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3B:B9:65:C4:03:F6:B4:AE:D2:18:D9:BB:D5:3F:25:DC:F6:AE:51
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:da:33:2f:ea:92:2d:a7:42:65:ed:e8:ed:6a:10:1f:76:7e:
         d3:ab:64:3a:e3:1f:94:53:91:df:8c:f3:13:96:94:48:d8:13:
         ab:63:7c:04:3a:26:ca:ec:76:81:11:6c:20:cf:d1:25:e1:c0:
         ab:75:26:da:c9:3a:2e:57:5e:4e:32:c5:4d:de:66:b1:48:e2:
         6f:d4:60:eb:38:fd:f0:ba:09:d7:6c:8f:fb:82:49:80:c2:3d:
         df:71:c3:4d:82:17:2b:c1:30:92:b0:d3:10:7e:65:64:d5:24:
         a2:a1:63:3e:e7:28:43:81:8d:b0:c0:53:b1:27:8f:a4:db:3d:
         26:65:76:fc:b3:ef:f5:f3:36:4e:ce:f6:b1:d9:d3:71:fb:b1:
         bf:f2:39:9b:ba:b5:4b:9d:af:29:23:7e:f9:b2:5c:0a:4c:4d:
         35:5e:bc:ed:88:8d:8a:1f:17:46:93:d1:d0:46:82:85:2d:bf:
         6b:38:10:0a:4c:05:c5:a6:ff:70:4b:39:37:8a:b0:29:84:f3:
         ad:21:e2:07:65:1d:66:d4:ce:60:06:dd:00:2d:5e:ce:56:69:
         d8:f2:37:ba:af:40:1c:eb:cf:82:e6:dd:e7:03:ec:fa:b6:d5:
         00:cb:b6:4f:4e:39:77:9b:af:84:d8:46:1f:a8:91:a0:6c:bb:
         56:5e:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:10:55 2026 by rpki-client