Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
File:                     EEXazIN3mMPmzzH00nlGozsN5mE.mft (raw, json)
Hash identifier:          RJfkime1911aX3qIl9jA20oZwFnwiBd/tsr5NJzZoLk=
Subject key identifier:   81:BB:52:15:37:8D:3E:8D:26:70:DD:46:1B:9F:7F:59:D9:4B:80:6B
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Certificate issuer:       /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial:       019FA9758295E428C0B824694FE396BD0C03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
Manifest number:          19F0
Signing time:             Tue 28 Jul 2026 16:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:18 +0000
Files and hashes:         1: 005Bqn6EcQE2kRRYutDaRw8mbu4.roa (hash: Ya4LLXNAwjE1h+4Ix0wQYttNBpWpSYxEcBwtehuCJrU=)
                          2: Bsg46Hh18W2wtrBYU_MmVQa11_M.roa (hash: Wi9xpJM6gyN312GNJefY/RNhxBIItO+fm/kcAGluLLQ=)
                          3: EEXazIN3mMPmzzH00nlGozsN5mE.crl (hash: 9U9Ko6G6HdqudEGj7MYXFNOPmKtwWplkgONaIwPcVvs=)
                          4: pnsSYMuSCnD02i5X7aNjfb6KV2Y.roa (hash: gAxKlvosqMdTFPRmtfb6Fr6F4VKWhUBjaqqguPZxYyQ=)
                          5: zVElElmNHqfMWbO7Mv_RAuDBQI8.roa (hash: fH2ooaFDH4XMWbMf68BiYaDtG2yS/k654MGObWqqQkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:82:95:e4:28:c0:b8:24:69:4f:e3:96:bd:0c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
        Validity
            Not Before: Jul 28 16:01:18 2026 GMT
            Not After : Jul 29 16:01:18 2026 GMT
        Subject: CN=81bb5215378d3e8d2670dd461b9f7f59d94b806b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:e4:10:4b:5c:fd:b6:ad:c0:c3:cd:3b:3f:
                    5b:6c:e0:77:29:08:77:0f:42:a2:77:e1:50:69:90:
                    5c:84:64:06:17:9f:6e:75:0c:7c:62:48:cd:c1:f0:
                    af:70:7e:52:e5:3c:32:e7:f0:91:98:e3:a6:09:5d:
                    51:61:eb:b8:cd:96:0a:20:fa:82:fb:7f:f6:bc:27:
                    55:a6:37:b9:3a:6c:ff:7f:48:69:1a:d6:e9:9e:ac:
                    2d:cd:c9:57:ec:cf:83:0f:51:b9:1a:6e:6d:54:98:
                    60:5e:70:06:d1:24:50:3d:72:ed:07:c6:c8:93:5c:
                    81:2f:bd:ab:3b:38:b5:c7:d0:43:ad:ea:6d:91:4f:
                    83:6f:ad:6c:76:48:02:c5:db:38:54:74:31:f1:4f:
                    fe:6c:32:72:01:26:15:a6:3c:ff:c1:a5:8d:19:f3:
                    34:af:d5:b8:ab:2b:53:85:c7:f2:52:28:e4:9c:4d:
                    ed:17:a6:b3:99:40:24:41:aa:06:42:7c:62:28:f3:
                    45:27:91:d5:20:62:e5:88:74:cf:c2:b3:ba:b5:78:
                    04:98:0b:cf:9a:4d:3e:d9:5e:c3:c7:e4:fb:19:f5:
                    1b:7c:b3:05:71:c7:51:89:04:4a:d6:69:37:3e:21:
                    08:28:29:69:44:00:4f:76:20:7f:30:e8:df:00:6a:
                    66:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BB:52:15:37:8D:3E:8D:26:70:DD:46:1B:9F:7F:59:D9:4B:80:6B
            X509v3 Authority Key Identifier:
                keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:16:55:89:1d:74:aa:13:96:38:0c:65:7a:32:98:b0:6c:c3:
         17:aa:a0:55:74:5c:40:11:24:4f:d5:7c:d7:e7:9d:15:8c:bb:
         19:25:a2:ac:96:1e:e8:e4:a6:18:ca:f7:1c:65:35:1e:84:a0:
         cd:24:d4:8d:10:44:e1:3a:08:31:b5:07:de:af:04:1d:7a:19:
         7b:8a:8b:f7:af:96:94:c9:b9:53:fa:25:8e:0b:97:83:64:f3:
         fe:77:23:f8:a4:1b:e8:46:fe:e1:51:2a:07:ce:08:4d:e3:87:
         51:f1:dc:f1:a7:e8:04:74:fe:89:07:d6:b0:bd:7f:10:9d:89:
         01:13:13:b5:c0:53:4f:f5:d2:01:e7:1c:28:e1:fe:b4:13:3f:
         80:3d:98:ae:06:b8:e5:05:0b:52:6e:b0:d6:a0:cd:e0:19:94:
         f8:78:ce:c4:12:9f:c8:c0:7a:6a:2e:c5:56:73:df:e2:a1:7e:
         c6:66:d0:d9:16:9b:ba:fa:de:f1:6a:0d:5f:13:f2:48:55:08:
         b8:22:52:0d:8d:bf:69:3a:42:cf:54:b1:e9:a9:cf:cb:93:a7:
         ab:ea:c6:a3:93:5c:ea:40:e2:d7:d9:75:5d:5f:f8:55:04:29:
         c4:30:30:25:c2:f2:f4:1b:0f:b5:bc:e2:0e:4c:fd:ee:46:f9:
         ad:53:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:55 2026 by rpki-client