Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
File:                     7FraDckAoTyDtwrD9Yf7jC4d8DA.mft (raw, json)
Hash identifier:          MSeanj5boEmwr17VsLBZbBUR8Xxw/2qbwuWg8mehgOE=
Subject key identifier:   C5:74:14:EE:BA:02:2B:B8:5B:A7:A9:8F:0B:B0:F9:65:05:50:7E:A3
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Certificate issuer:       /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial:       019FAAF550C66CD2AC5EC3F925092498B098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
Manifest number:          19E0
Signing time:             Tue 28 Jul 2026 23:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:31 +0000
Files and hashes:         1: 4h2CKrEG0zBXhUvh0QRtju6nDO8.roa (hash: 7r8KAs2j6Yww58kBTUpyYdSq5ad0gOR+q03EcWoTYfs=)
                          2: 7FraDckAoTyDtwrD9Yf7jC4d8DA.crl (hash: 53PahlDfbIn9Mqqqt3Y8ewLjV7KrkBlrPKdg48aOkBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:50:c6:6c:d2:ac:5e:c3:f9:25:09:24:98:b0:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
        Validity
            Not Before: Jul 28 23:00:31 2026 GMT
            Not After : Jul 29 23:00:31 2026 GMT
        Subject: CN=c57414eeba022bb85ba7a98f0bb0f96505507ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ac:e6:1e:f2:5a:15:7f:5c:a5:6c:b6:b9:3a:
                    a1:1b:f2:91:d7:32:f6:5d:5b:53:f6:31:39:92:56:
                    df:b4:5b:12:9f:2e:79:1e:50:16:40:8a:32:c3:6b:
                    7a:30:d8:09:74:f0:ac:c2:0f:1c:c7:0f:da:50:2d:
                    ee:58:07:50:e8:78:d7:5f:a1:e4:ff:e5:b3:f2:06:
                    bf:41:ec:40:19:e5:e1:12:4b:e6:a6:1e:fe:d7:b0:
                    4c:2f:fa:e0:20:9a:5f:39:8b:e7:89:2f:3c:94:e0:
                    78:6b:f5:6a:02:64:0f:86:83:ed:66:c6:30:0b:78:
                    76:64:7a:3e:0d:71:7b:96:4c:e5:6e:05:e0:b5:c8:
                    b4:43:55:ed:55:62:eb:e1:c7:c4:8b:e2:ff:97:4e:
                    79:c6:d2:90:cc:06:2c:c8:4a:dc:95:a1:75:60:1e:
                    f5:00:93:50:0a:c1:de:a5:ce:fe:56:80:0a:e5:ce:
                    cc:fd:67:71:79:4e:47:1f:d8:2f:53:5f:06:eb:58:
                    52:02:73:e6:49:9f:51:e6:aa:ca:5d:39:3c:1d:e8:
                    25:db:36:12:56:93:54:a8:5e:a1:2b:da:d3:8a:b9:
                    19:d4:ed:e3:41:5a:65:85:f6:dc:c8:4b:f7:96:b1:
                    00:f2:b7:a8:11:db:bd:b7:a7:27:f9:aa:ee:aa:fb:
                    5b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:74:14:EE:BA:02:2B:B8:5B:A7:A9:8F:0B:B0:F9:65:05:50:7E:A3
            X509v3 Authority Key Identifier:
                keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:50:92:62:5e:e6:d5:8e:cc:8e:e7:24:ab:c5:fb:0f:84:3a:
         a2:25:78:71:21:3a:bd:7e:bb:e1:86:2e:64:be:9e:3e:be:b2:
         ad:e0:4a:9f:4f:f6:e1:2a:20:95:0d:ac:f1:20:1a:92:fc:2c:
         27:31:2d:81:a8:e9:31:bc:c6:c9:e1:23:0e:44:64:20:f9:fd:
         f7:03:dd:58:df:5f:60:dd:f9:ae:5f:18:d7:ad:02:0d:3c:52:
         62:74:17:6d:99:76:cd:d8:e0:f8:0f:2b:ed:bc:7d:2a:39:a9:
         b1:6e:91:ae:e2:c1:12:8d:88:fc:3a:a9:61:ef:78:40:e9:4e:
         d0:ee:fc:8d:cf:7e:1e:5d:13:4b:24:00:06:60:d9:1a:fd:a3:
         fe:af:f1:b6:aa:ce:3d:eb:d3:30:22:00:81:75:09:5b:4f:95:
         e3:1a:54:9c:58:bf:64:2b:e2:ec:19:52:0b:37:7f:eb:ab:56:
         42:aa:d5:1b:32:20:9d:34:bf:8f:9a:ea:f1:ad:f4:0d:87:48:
         e7:9c:73:09:b7:e7:ad:52:6c:73:64:23:66:00:88:84:cd:2b:
         7f:87:de:46:b9:1a:d4:22:80:d9:4f:b1:95:53:8b:b1:33:8d:
         48:63:a5:d0:a8:f8:34:2a:78:e0:7a:d9:e9:ae:b8:36:4b:a7:
         46:62:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:04:22 2026 by rpki-client