Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
File:                     eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft (raw, json)
Hash identifier:          slUynYeN2zR1TLB902ubDPUmuba9SePCcTSEw2qQRZg=
Subject key identifier:   11:DE:87:F3:0C:66:21:5A:51:37:1C:54:21:48:32:DF:0D:99:70:4C
Authority key identifier: 79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D
Certificate issuer:       /CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
Certificate serial:       01A002143E5D301FA10F6A3851598D81B291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
Manifest number:          0234
Signing time:             Fri 14 Aug 2026 21:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:16 +0000
Files and hashes:         1: MHfXLodJ1lTLubHBUzEu-y-nQd8.roa (hash: v+heG+utge9KSHpg0rUF2i0HpIa/3KcrihN3fHNBOZo=)
                          2: ad2pJPLMCY9-MtsOQUWfkJzvGjk.asa (hash: znBGDedW1a6RheuPxFAgpjdNY4UU36DMoXaL/AWeESU=)
                          3: eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl (hash: +uFMvvXIpQxUxMIEDimwGb08VPAyGSttrcT8pXGyWxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:3e:5d:30:1f:a1:0f:6a:38:51:59:8d:81:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a4b1fbbad1cb6a8b1c7d33737ad72bcd9b8d9d
        Validity
            Not Before: Aug 14 21:01:16 2026 GMT
            Not After : Aug 15 21:01:16 2026 GMT
        Subject: CN=11de87f30c66215a51371c54214832df0d99704c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5f:6e:4f:39:d2:ad:b6:6b:58:84:1a:98:ec:
                    e0:0b:8a:23:ec:f0:9d:32:19:48:1c:01:57:03:66:
                    74:2c:8e:4b:ab:e5:35:80:29:48:28:d2:bb:c7:f7:
                    66:7d:df:79:47:1c:14:e2:a8:d0:96:bc:15:d1:6e:
                    80:f5:58:ca:ce:2c:76:93:7a:5c:f3:ee:2d:c0:02:
                    bf:12:00:84:bf:44:35:7e:00:83:08:88:b6:cb:88:
                    c5:08:e3:7a:35:55:62:e0:02:93:9b:c4:35:82:af:
                    8c:cc:1c:50:e9:93:c2:7e:b0:02:87:b8:3d:53:99:
                    e9:96:53:fe:93:b8:67:1c:0d:2d:87:cf:b0:7c:c0:
                    5d:09:9f:6a:c1:eb:bd:e5:43:aa:77:da:f2:4a:5d:
                    14:d4:a7:b9:cf:46:38:92:f3:db:d5:1c:b0:fe:d4:
                    a4:96:65:3c:f9:9c:7c:ab:c1:7a:b0:83:89:55:86:
                    0d:7c:ce:c4:04:9b:01:dc:09:5a:7e:18:4b:52:86:
                    3f:9f:00:23:9b:fa:d3:39:b1:d3:a7:a8:2d:16:e7:
                    c7:a1:cc:34:62:82:70:82:82:c9:2e:11:95:a5:51:
                    f2:cf:99:5c:57:31:19:7e:fc:3a:da:8f:7f:ce:0d:
                    6a:5b:59:75:af:c6:40:ad:0d:37:63:ad:7d:8a:98:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:87:F3:0C:66:21:5A:51:37:1C:54:21:48:32:DF:0D:99:70:4C
            X509v3 Authority Key Identifier:
                keyid:79:A4:B1:FB:BA:D1:CB:6A:8B:1C:7D:33:73:7A:D7:2B:CD:9B:8D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaSx-7rRy2qLHH0zc3rXK82bjZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b3a41c-e456-4f99-93e6-a98110adb67e/1/eaSx-7rRy2qLHH0zc3rXK82bjZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9d:44:df:14:df:59:8f:4a:3b:9e:7e:92:06:e9:c5:e1:e7:
         e6:f2:3f:5b:25:82:b5:94:94:62:af:f5:c4:22:bb:e1:bf:6b:
         08:e1:2a:91:01:c0:06:51:13:74:dd:79:4d:21:95:69:cd:e9:
         68:ca:8e:6c:81:31:00:4d:bc:f4:83:d9:c6:ca:0c:be:01:e1:
         dd:b1:0d:f0:93:8b:07:fd:a2:a0:78:46:78:4b:f6:2d:e1:0b:
         9a:9a:78:d6:1b:d7:f7:14:de:1e:47:5f:8d:61:b5:ef:e6:4e:
         cf:c3:6b:ad:f2:8e:ad:4a:aa:c2:df:c3:f0:34:54:38:f5:25:
         5a:ec:29:db:55:87:2c:c1:c6:ee:3a:f4:99:71:33:f6:c5:fa:
         7f:fe:1d:4a:a9:67:9e:97:4e:b1:a7:88:d3:72:04:3d:94:b3:
         65:00:35:b1:c6:41:98:5c:d7:79:b0:f1:a7:2a:aa:33:ee:1f:
         30:16:9f:a0:70:ae:a5:22:0e:d4:33:98:f5:81:2c:13:30:f8:
         37:7d:98:08:03:c7:00:f4:7c:e4:07:1d:1b:56:4b:a3:1f:30:
         d7:1d:d8:b8:a6:02:10:f4:1a:47:cf:53:91:b6:4f:c5:2d:e9:
         50:c2:b7:22:09:f3:83:6c:c6:57:be:b2:5b:0c:8b:aa:87:5f:
         36:18:5a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:19:20 2026 by rpki-client