Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          DYu9/IPho3avyrvm6wdV+3ZvNCbR7bc7BdHcrmeSpbM=
Subject key identifier:   BC:55:37:57:81:17:59:C3:80:1F:F0:4D:47:25:88:90:A5:E2:2D:FF
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       019FAA50D2EF4DD7DC1FA75631F41DB56BE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 20:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:51 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: Os8rjhol0jaKtsUjU9ZY9NmHdTp6wfhoyUNnJ27tLyA=)
                          2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:d2:ef:4d:d7:dc:1f:a7:56:31:f4:1d:b5:6b:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Jul 28 20:00:51 2026 GMT
            Not After : Jul 29 20:00:51 2026 GMT
        Subject: CN=bc553757811759c3801ff04d47258890a5e22dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5b:4b:e9:30:dd:4a:64:80:92:bd:78:68:3b:
                    71:04:03:aa:8b:ca:36:fa:4f:57:0e:79:90:01:e3:
                    b9:1d:33:90:7e:5f:c0:86:1a:74:08:ab:2c:3a:91:
                    37:ac:c1:97:89:22:db:63:22:f8:d2:03:69:59:94:
                    94:74:e5:69:c9:ab:c1:9e:79:c7:12:6f:25:95:fb:
                    18:9a:fa:f7:ad:29:bb:7f:68:5f:5d:a6:93:f3:09:
                    ba:ef:3f:0c:5b:18:e1:39:8e:7e:b7:ce:78:57:05:
                    c0:cb:30:55:2a:48:e6:c4:61:da:78:57:b5:54:43:
                    c8:c4:38:13:24:39:6f:71:ed:56:52:10:a4:36:82:
                    bf:7b:32:93:e8:b3:f4:e5:4f:e9:ec:82:e4:57:d0:
                    34:2a:64:c9:72:05:25:67:00:29:5a:d0:54:75:27:
                    76:30:ce:30:d0:bb:1e:9c:ab:7b:25:a0:c8:49:58:
                    31:76:2d:89:42:d6:1a:9b:82:40:88:59:e3:a7:51:
                    e1:6d:06:29:c8:3c:e4:48:67:2e:91:b7:b8:e9:4f:
                    ad:0a:fb:e5:9c:e6:ef:4e:40:c4:e8:c8:b2:86:ed:
                    76:4a:bb:8d:9f:c6:0b:ac:b8:da:a1:c4:d4:e5:4a:
                    a1:36:d1:b5:61:a1:f2:86:de:41:6c:10:bf:94:c9:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:37:57:81:17:59:C3:80:1F:F0:4D:47:25:88:90:A5:E2:2D:FF
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:d6:a0:13:64:a3:e5:f5:1f:f0:dc:0e:23:82:8c:86:54:f2:
         17:42:b9:36:68:87:b4:57:2f:18:e9:bf:ba:08:b7:f4:78:fe:
         80:92:49:8f:93:68:5c:26:ba:07:6a:d3:b4:23:be:b1:29:ed:
         ba:da:7a:00:d8:fd:a9:84:01:b8:72:6a:da:e1:02:74:0c:68:
         68:33:a1:8d:24:6a:0a:86:bf:ff:c6:07:85:a8:1e:93:2a:18:
         54:43:fd:d3:c2:92:02:8c:cd:ba:80:5b:9a:ec:4e:9d:2b:a4:
         fa:79:45:e2:52:5f:a5:15:7a:c3:63:03:89:a8:8a:bc:ed:df:
         31:bf:e5:3d:c9:e7:7b:88:7c:04:55:fa:43:cb:ea:f5:81:46:
         92:c4:ea:b0:e8:b7:1b:98:e4:76:a3:6a:56:a8:f8:43:e5:ed:
         f0:c5:d9:a4:f6:51:0f:41:53:4e:1e:79:d0:1b:c1:9e:04:e8:
         25:84:24:a7:cf:8c:b5:a2:5e:bd:3f:57:67:6f:89:8c:ab:a7:
         1e:83:8d:8f:66:41:3a:80:32:9a:28:25:5d:86:86:99:9a:31:
         87:8a:ad:31:6a:0f:f9:1a:17:38:25:72:a2:30:b9:e3:b7:cd:
         26:bf:b4:b1:d2:37:0d:b4:f5:84:ec:57:e6:c0:df:5e:5f:7b:
         ad:26:85:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:05 2026 by rpki-client