Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
File:                     68eblrav29rstN8gQ40TbDgujS0.mft (raw, json)
Hash identifier:          98AhmLOscG1ISBL+j896cqEJRc7onIbo0FdQFTyi6WI=
Subject key identifier:   87:B0:2B:30:D8:1B:F0:85:BE:31:22:D6:78:E6:72:72:73:9E:31:C2
Authority key identifier: EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D
Certificate issuer:       /CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
Certificate serial:       01A03F3BFEDB6E54FCED6B092B4BD24FF078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 18:01:31 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:31 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:31 +0000
Files and hashes:         1: 68eblrav29rstN8gQ40TbDgujS0.crl (hash: NCw6WQHZ9K4oT4Vphq5kbNZ7+N3LWwInQaABBGClx/k=)
                          2: XWXdPFbNew782HEBRcsR75N8I6E.roa (hash: O/wTZsRn6pYeIL3wiTECfyYWWAfLVEcLCSgYI0EujJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:fe:db:6e:54:fc:ed:6b:09:2b:4b:d2:4f:f0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc79b96b6afdbdaecb4df20438d136c382e8d2d
        Validity
            Not Before: Aug 26 18:01:31 2026 GMT
            Not After : Aug 27 18:01:31 2026 GMT
        Subject: CN=87b02b30d81bf085be3122d678e67272739e31c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:02:65:1f:1e:a6:ea:7e:b9:09:39:23:c1:
                    d8:a3:80:fb:9a:2e:ae:bd:46:a9:2b:d9:07:79:d7:
                    44:cd:4a:cf:29:66:1e:f0:95:e8:2c:ca:8f:2f:56:
                    a2:25:e2:40:06:3e:26:96:00:56:dc:13:67:31:64:
                    f9:8a:ca:e0:f8:f5:f7:fe:11:ed:7c:ba:14:09:df:
                    19:19:22:23:80:c6:fe:34:7b:bd:fc:6b:66:49:c9:
                    e8:03:2d:29:70:07:45:e3:2a:3c:b6:c5:29:39:84:
                    26:8e:9a:38:b8:0d:33:c9:bf:c8:db:ed:50:fb:10:
                    73:3e:aa:99:b1:ae:80:02:2e:dd:ca:f1:b6:e5:fc:
                    de:ff:10:a8:ea:0c:b9:a7:b2:b1:e5:e3:c9:25:10:
                    5a:0a:68:2a:e6:02:a0:54:10:3f:f2:1e:b2:d0:45:
                    92:bb:11:30:09:60:c8:2d:b5:4f:a0:e8:1c:62:06:
                    11:3e:8e:09:28:82:b3:ae:72:89:ee:77:4b:f8:ea:
                    1a:cf:49:76:98:be:ba:04:1d:5f:88:68:27:20:d2:
                    b3:17:7b:d8:13:a5:c8:98:08:6a:d2:13:a1:f9:67:
                    1a:10:ad:f0:ee:c7:34:ad:a4:6d:1a:a7:1d:54:b1:
                    30:b4:a1:4d:85:02:7d:e1:07:2d:0b:23:b0:41:77:
                    be:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:2B:30:D8:1B:F0:85:BE:31:22:D6:78:E6:72:72:73:9E:31:C2
            X509v3 Authority Key Identifier:
                keyid:EB:C7:9B:96:B6:AF:DB:DA:EC:B4:DF:20:43:8D:13:6C:38:2E:8D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68eblrav29rstN8gQ40TbDgujS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/68eblrav29rstN8gQ40TbDgujS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:af:2d:81:52:82:6c:41:1c:df:d1:6a:cb:60:6c:83:8b:b8:
         63:e0:1f:6e:b7:96:94:10:e8:3b:d2:02:13:61:d1:e1:90:b2:
         c5:8c:47:a7:68:2d:f6:21:60:8e:e4:33:71:e9:44:0b:75:f1:
         da:d6:0e:b1:5e:0e:f2:a0:54:b2:8b:93:03:46:1f:76:74:71:
         fb:f4:89:f6:10:67:6a:9c:94:45:9b:92:e2:7e:f0:44:07:60:
         31:4a:b7:02:15:99:78:3b:e0:2a:5b:8a:1b:fb:be:68:7b:f0:
         8f:cc:f2:ea:3e:25:90:22:ea:8d:cc:3d:7e:92:cb:63:6c:d4:
         30:12:68:f2:de:5f:7b:dd:df:c1:24:f4:fd:25:e7:0e:61:90:
         49:02:34:21:d0:cc:dd:95:77:09:6d:34:20:3b:63:4d:63:15:
         19:a0:58:ee:e1:cc:12:81:e0:f3:db:8a:92:a9:2c:63:84:e2:
         4e:fe:a5:89:0b:be:5d:2c:bf:7e:49:c8:95:95:12:f3:cf:2a:
         ec:17:c8:67:80:0d:3a:95:1b:b2:5a:9f:e9:f3:07:48:70:f9:
         4c:c1:5d:ce:e4:9b:71:db:4f:83:94:51:87:19:7a:58:e2:ca:
         86:90:89:89:c7:60:49:08:f4:5a:ec:4e:b2:db:76:1f:dd:d8:
         6c:c9:b2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:28 2026 by rpki-client