Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          j5flMrzXGoSh4K+g4meb7kcTW9k1DNx2iSm5KojwDPI=
Subject key identifier:   55:9E:0A:1B:66:08:D1:73:2B:18:A2:71:00:03:B6:02:E6:18:D0:43
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       019FA9ABB76CCDA5EB0B7DC156B9338F4738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          1430
Signing time:             Tue 28 Jul 2026 17:00:30 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:30 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:30 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: n99XXluHrkON06MFQttH5NRhLDnRlsPu+KsBa4ww1ww=)
                          2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:b7:6c:cd:a5:eb:0b:7d:c1:56:b9:33:8f:47:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Jul 28 17:00:30 2026 GMT
            Not After : Jul 29 17:00:30 2026 GMT
        Subject: CN=559e0a1b6608d1732b18a2710003b602e618d043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7d:6b:6d:a9:97:a0:e4:45:57:da:92:b8:b2:
                    fa:83:fd:ab:f8:a0:4a:18:ac:30:93:3d:96:a2:b1:
                    d7:e8:d5:12:62:39:39:88:88:35:8b:2b:45:b3:d8:
                    e7:c8:77:c4:32:8d:d6:50:d1:3d:f6:dd:f1:0d:c3:
                    1f:a7:c6:22:26:75:45:c2:cf:69:34:d0:64:11:8a:
                    46:5f:3f:11:a0:63:e2:0e:78:17:60:9b:69:0c:04:
                    b8:2f:94:f1:e0:b2:34:98:dc:eb:ff:2f:7a:26:25:
                    9f:d3:7b:c7:f1:ea:b1:54:e6:31:05:48:21:a5:13:
                    72:d4:45:48:2d:f9:d0:5d:25:2b:9b:08:1e:c1:09:
                    2a:1d:5c:cd:e9:13:89:d5:43:32:5a:6b:4a:01:2a:
                    17:e5:90:ca:6f:20:d3:e9:30:28:2e:63:42:4a:f4:
                    65:1d:9f:f7:e1:d2:ab:50:e1:30:f9:8f:fd:f7:79:
                    7d:8d:0c:d6:94:58:ad:23:b4:cc:8a:ed:a1:7a:ad:
                    f8:9f:bb:d0:63:28:df:a6:fc:1d:d3:64:0f:d8:17:
                    56:c3:df:30:20:09:65:ac:5b:8a:ee:2c:ab:e9:8a:
                    b7:6a:6d:41:45:69:04:74:07:16:b0:7b:bd:13:d3:
                    fa:98:67:1d:0c:b5:80:b2:ec:92:3e:cd:f8:8d:a9:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9E:0A:1B:66:08:D1:73:2B:18:A2:71:00:03:B6:02:E6:18:D0:43
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:95:6f:1f:cc:52:93:bb:01:83:2d:83:f5:80:9f:e8:51:94:
         74:29:aa:31:3e:80:6d:d7:23:15:54:75:18:51:6e:54:a2:4b:
         54:36:86:8d:38:f8:ce:05:e5:54:d9:45:11:29:09:55:00:6f:
         21:60:90:02:4d:a6:77:d1:6f:7f:ae:5b:fe:36:6f:22:82:08:
         e4:e3:39:4e:87:73:2d:10:1a:77:5b:3f:ba:37:28:f0:6f:26:
         c8:45:d3:d1:a4:6b:19:e3:2b:d3:7a:2d:91:3f:f0:c6:ae:fb:
         a8:23:39:a9:86:86:86:22:ba:1a:90:ec:e1:13:cf:3a:95:7f:
         f4:77:6d:0b:62:ed:b0:6b:f9:b5:bb:3e:bb:3e:31:50:8f:15:
         21:aa:61:2b:5e:24:cd:44:31:cd:a5:f9:37:f7:a6:02:64:be:
         43:2f:5f:6e:53:f8:79:cf:b3:48:cb:3b:f8:b8:24:c3:53:1b:
         b4:40:76:8f:d5:7c:6a:35:eb:6d:8b:80:6f:ef:79:86:0e:43:
         a4:1e:a4:28:71:3a:79:d3:2a:25:35:b5:11:7e:fb:e8:b4:cc:
         2c:33:ce:0c:c9:49:e9:a0:65:52:a3:8f:02:b6:e5:35:91:e6:
         26:e9:d2:72:12:73:4b:35:c0:b1:21:60:41:c8:43:bc:20:19:
         d6:d5:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:05:52 2026 by rpki-client