Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
File:                     iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft (raw, json)
Hash identifier:          2MoL8j8JQKSZoNyY9eoMycPQl8vc9HDi81RvNGopshw=
Subject key identifier:   07:9B:E7:F7:30:0D:8D:B3:54:D7:01:23:64:BC:CC:FB:EB:EE:01:8D
Authority key identifier: 89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55
Certificate issuer:       /CN=8916aaa5d252fd90145fedac683762d6e2074155
Certificate serial:       019FDEE354200C3CA022D8A2600B10EE8E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
Manifest number:          19EF
Signing time:             Sat 08 Aug 2026 01:01:07 +0000
Manifest this update:     Sat 08 Aug 2026 01:01:07 +0000
Manifest next update:     Sun 09 Aug 2026 01:01:07 +0000
Files and hashes:         1: FjK0gZzIRFGA1r0HMqyZjh1eSaU.roa (hash: 5jTPa/LgCeRZQvqoHjBqfoQDZ2FKgfEuFxlRAqDizkI=)
                          2: iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl (hash: mumjenPT62MM6mcb7ZuUTsrHhNh6zIzKhcb72AURduM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 22:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:de:e3:54:20:0c:3c:a0:22:d8:a2:60:0b:10:ee:8e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8916aaa5d252fd90145fedac683762d6e2074155
        Validity
            Not Before: Aug  8 01:01:07 2026 GMT
            Not After : Aug  9 01:01:07 2026 GMT
        Subject: CN=079be7f7300d8db354d7012364bcccfbebee018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:37:72:96:bd:ec:a3:66:02:59:af:54:c9:8d:
                    9f:68:fc:7d:9a:c8:54:78:f4:e6:f9:3e:1c:bf:9c:
                    1f:5a:b6:c5:8a:84:13:b3:ee:d9:c2:aa:5a:33:b2:
                    52:18:05:db:3a:26:37:3e:ca:c2:25:9c:37:51:ee:
                    94:41:9c:fc:82:b1:f0:44:aa:13:1e:ce:48:4f:ac:
                    f4:99:ff:d3:c3:c7:2e:11:41:3c:fa:0e:83:34:87:
                    b4:6c:47:dd:35:26:8d:98:92:0e:5c:98:c4:98:20:
                    e5:a6:c3:be:b9:a9:21:33:ba:dd:81:44:a8:b5:da:
                    35:85:b4:1c:53:2f:07:28:c4:82:87:9c:63:03:46:
                    63:1b:0e:ad:98:89:72:59:5c:8f:dc:83:0c:99:43:
                    f7:46:1f:63:92:eb:bd:27:73:2d:ac:83:3e:b8:84:
                    81:2f:9e:b8:d1:ac:bc:d8:4d:a2:5b:87:6c:18:fb:
                    29:b2:c9:b3:a1:97:75:16:98:65:25:e1:75:96:6c:
                    fb:bd:24:05:13:36:d3:9a:a8:e7:17:62:47:1d:cb:
                    94:44:96:02:87:2b:d4:4c:3d:7f:2f:ee:fd:8a:3c:
                    fc:74:27:31:1e:ed:14:9a:e0:3a:17:d4:19:5a:22:
                    c9:f7:7c:f7:1d:42:2b:cc:ee:dc:ce:0e:02:62:5f:
                    84:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:9B:E7:F7:30:0D:8D:B3:54:D7:01:23:64:BC:CC:FB:EB:EE:01:8D
            X509v3 Authority Key Identifier:
                keyid:89:16:AA:A5:D2:52:FD:90:14:5F:ED:AC:68:37:62:D6:E2:07:41:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRaqpdJS_ZAUX-2saDdi1uIHQVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/907409-5e61-4c66-94e6-d69ea93cbafb/1/iRaqpdJS_ZAUX-2saDdi1uIHQVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fa:9f:43:3a:f6:51:50:ff:96:b5:9f:69:f5:f5:75:63:57:
         7b:b9:70:54:5e:4d:48:be:11:90:1f:a5:15:73:17:1f:89:6f:
         86:0f:82:ad:e5:11:d1:3c:85:46:ec:b9:96:4b:09:3f:b6:32:
         98:44:e8:c3:0d:db:1a:f4:81:77:ce:cf:bb:59:79:38:24:83:
         61:c4:f4:06:57:6f:50:33:ea:49:91:79:36:79:d0:46:ee:15:
         74:a5:0f:1c:9c:f1:30:d7:c5:6a:ce:b4:a1:8b:56:62:1a:29:
         53:57:fd:f9:e6:de:eb:49:2d:91:d7:13:5b:7f:c2:87:5a:9d:
         ab:42:f0:1f:75:fe:1d:8f:b8:d2:c8:d4:71:10:fe:fa:c7:3c:
         89:98:b7:24:6d:13:c4:1f:6d:d7:38:51:81:2e:1e:0e:65:69:
         54:57:f2:f3:e2:97:4d:ab:55:d9:63:da:90:d2:a0:70:6e:6e:
         4e:b6:11:7d:e3:be:9c:d1:4d:1f:1f:93:56:74:1f:1d:5b:55:
         12:d8:bb:5c:ae:d3:b4:83:e4:47:38:25:70:c1:c9:e6:e4:89:
         9f:e0:d1:f9:4e:3b:db:f4:45:29:7e:44:b2:36:55:72:9b:de:
         5f:50:99:eb:0c:c6:cf:66:91:57:17:ab:8f:74:af:ce:c7:66:
         42:18:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:59:48 2026 by rpki-client