Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
File:                     ElV9TH4Hxulcs5EpLcEYZvZhn10.mft (raw, json)
Hash identifier:          3BVMQfCPGDQsmjQqQvwsElcXoaIR0gNo++nQ3umGoAk=
Subject key identifier:   62:EF:E8:80:99:B7:F1:06:79:13:19:6C:E5:90:21:D9:56:81:A2:77
Authority key identifier: 12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D
Certificate issuer:       /CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
Certificate serial:       019FAAF5CBB227B5D5706463DB8A61EE0F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
Manifest number:          0249
Signing time:             Tue 28 Jul 2026 23:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:02 +0000
Files and hashes:         1: 8iHCL-HIsWmSQWcboIJtcTz5dA0.roa (hash: yMhfyArXlBp53ltADAhKVaNnmVsKrW5l1Xn8ONQr2Og=)
                          2: ElV9TH4Hxulcs5EpLcEYZvZhn10.crl (hash: EZ2y4Uk1ah7atDSnhAXOnl4UAOF/p/YfwoodfI2nDgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:cb:b2:27:b5:d5:70:64:63:db:8a:61:ee:0f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12557d4c7e07c6e95cb391292dc11866f6619f5d
        Validity
            Not Before: Jul 28 23:01:02 2026 GMT
            Not After : Jul 29 23:01:02 2026 GMT
        Subject: CN=62efe88099b7f1067913196ce59021d95681a277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:0b:da:62:fb:3f:1a:66:5f:fa:d0:23:44:
                    c1:c9:ea:30:c2:d6:45:5b:64:e2:2c:5b:35:ef:c4:
                    3f:e9:7b:39:89:da:23:23:ba:5e:2c:ea:11:28:c0:
                    c4:d3:64:69:c7:7d:d7:3b:cf:ca:f3:41:f4:c1:30:
                    1a:67:97:9e:58:4c:d6:5f:b8:8a:43:bf:31:2d:ae:
                    2b:da:4c:7b:65:f0:43:5e:9a:ef:2d:83:29:3d:03:
                    6d:fa:c5:84:b3:b7:04:26:b9:a1:31:55:36:64:0b:
                    4c:cd:6d:7a:88:0f:a8:c2:00:5b:14:b8:2e:a4:96:
                    72:4d:f9:d1:40:1c:15:60:8e:65:64:0c:29:f7:f1:
                    ab:54:2e:99:c7:e2:42:d4:f9:bc:29:52:f5:ce:e7:
                    97:8e:b1:f9:f6:3d:75:d5:e7:32:5c:bd:83:06:29:
                    6d:11:db:06:4c:38:38:9d:d8:cf:24:c6:2c:4a:1f:
                    af:7c:0a:71:ac:86:dc:7d:55:53:ad:70:91:78:f4:
                    35:b4:32:e6:43:07:5b:83:8c:4f:ea:fb:99:2e:35:
                    14:34:4f:d7:3c:fd:12:cd:20:f6:90:e0:cc:7d:38:
                    40:3c:3d:8c:18:c3:6f:f5:04:68:fa:a1:31:d7:3e:
                    7b:16:8c:67:d5:3d:cf:5a:93:17:2c:ca:dc:fd:17:
                    6d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:E8:80:99:B7:F1:06:79:13:19:6C:E5:90:21:D9:56:81:A2:77
            X509v3 Authority Key Identifier:
                keyid:12:55:7D:4C:7E:07:C6:E9:5C:B3:91:29:2D:C1:18:66:F6:61:9F:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ElV9TH4Hxulcs5EpLcEYZvZhn10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/456505-ce32-4a5b-a2a8-bd4f7b728995/1/ElV9TH4Hxulcs5EpLcEYZvZhn10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:fc:e3:0b:d5:3b:04:b0:a5:cd:ba:e3:9b:63:12:3d:10:
         83:35:c8:68:73:54:87:61:7f:7b:37:74:45:51:29:22:88:bc:
         8b:1b:a7:86:62:83:93:84:da:08:05:6d:24:4f:22:29:86:6c:
         22:84:b0:d7:7f:9e:cd:62:3f:a3:0b:d1:83:da:2c:79:22:97:
         cf:e0:18:2d:fc:ca:6e:0b:1e:85:dd:50:18:9f:6f:0b:cd:4a:
         80:f5:47:08:2b:8f:a1:88:96:8c:a6:17:cb:50:72:a4:b7:f7:
         7b:1b:12:a3:3b:2f:5a:8c:e2:fe:2d:83:1d:fa:76:65:ef:ec:
         33:7b:77:ce:38:c5:2c:6a:8d:7c:2f:43:ce:e6:c9:a3:41:cb:
         16:39:b1:1e:54:44:c8:0e:84:c6:33:3f:6d:07:fa:12:52:7a:
         87:f2:a2:39:eb:d2:04:43:9f:76:61:83:88:4c:b0:12:34:a9:
         c0:64:a6:17:90:0d:59:2d:3f:f7:f3:30:74:4f:5d:47:29:a8:
         79:6a:df:de:65:1c:a0:a6:8b:1f:c1:9c:e9:be:ac:2d:b2:f5:
         7a:14:65:60:8e:ba:1f:08:e1:a4:53:b6:ab:be:7d:85:0e:10:
         6a:42:ae:a3:ae:c5:fb:ab:b4:e4:7c:70:05:5b:23:fd:d5:d8:
         26:88:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:09 2026 by rpki-client