Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
File:                     fhxn8ySb-H1syWulL_G9wOeJtBk.mft (raw, json)
Hash identifier:          KIMYQE70JHWI1zCehlOyKRFQwTJRxOWLM2CxysKCSsU=
Subject key identifier:   79:B0:4B:06:27:F6:55:E2:8B:CA:C2:7C:E5:A2:63:F5:F9:77:E4:21
Authority key identifier: 7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
Certificate issuer:       /CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Certificate serial:       01A0016EED043C8FB7702E67F2598B81A81D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:00:41 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:41 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:41 +0000
Files and hashes:         1: fhxn8ySb-H1syWulL_G9wOeJtBk.crl (hash: 8Y9ru8LbCfnlq4DAS/kj1dC/fb/spa229FljKTzF44s=)
                          2: uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa (hash: ByrmQQLK2SZe1G5CS63vjY0S33+wHwZPNkpO65iKwLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:ed:04:3c:8f:b7:70:2e:67:f2:59:8b:81:a8:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
        Validity
            Not Before: Aug 14 18:00:41 2026 GMT
            Not After : Aug 15 18:00:41 2026 GMT
        Subject: CN=79b04b0627f655e28bcac27ce5a263f5f977e421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:6c:f1:cb:8e:e0:78:06:fb:3f:3b:92:6c:
                    15:6c:65:eb:29:1d:49:4a:c1:50:37:7e:42:f5:42:
                    0c:f1:74:25:72:50:04:ab:ac:57:f1:74:80:3e:2c:
                    6e:da:70:82:7d:b4:57:1c:82:a8:8b:ab:64:50:e1:
                    b2:f7:37:10:0e:9d:9c:88:84:87:78:19:bd:81:67:
                    66:94:a0:96:cc:94:88:06:76:fa:15:4f:8b:08:d3:
                    68:c3:05:d3:2a:11:0a:0a:94:f4:0b:26:df:17:79:
                    78:e0:99:96:e8:f5:47:45:8a:2f:87:cc:f3:8e:3d:
                    a7:93:40:b4:45:b3:4e:8c:74:59:e7:17:bc:84:09:
                    2d:47:04:e3:76:67:9e:0f:f4:cb:21:69:99:22:e8:
                    ac:b0:db:f9:31:f4:fc:7a:67:18:0f:f6:cc:96:8e:
                    45:7f:db:57:f3:7f:a1:44:08:fb:75:2d:c4:da:b1:
                    7f:52:18:a3:88:52:0a:d6:ba:f8:35:83:f4:95:3f:
                    58:ed:bf:7b:ff:e6:0f:50:c9:79:e1:0d:e1:1c:22:
                    94:8d:5b:6b:8f:95:72:8e:6a:a7:e6:30:a1:f8:ef:
                    52:46:2e:eb:a2:66:73:28:84:ef:bc:82:90:67:d8:
                    b5:9c:9d:2c:5f:6b:5d:84:cb:93:90:84:bf:04:79:
                    ab:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:4B:06:27:F6:55:E2:8B:CA:C2:7C:E5:A2:63:F5:F9:77:E4:21
            X509v3 Authority Key Identifier:
                keyid:7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:08:03:a9:65:08:ab:f6:f6:c9:09:37:97:44:00:96:3b:34:
         aa:6f:64:c0:19:8e:53:37:ed:0b:b6:de:9f:69:45:d4:17:9f:
         ca:f5:f1:7c:fd:6f:48:f0:fa:b3:eb:a0:a0:37:67:0a:9e:10:
         ab:1f:d2:4f:10:d6:63:9b:b6:48:ae:70:a4:b2:b0:47:df:f2:
         b1:2e:c8:4f:27:47:63:11:32:a1:1a:e8:70:39:05:dc:95:cc:
         9c:04:a8:32:12:e2:5c:1f:bd:9e:22:e8:a4:1d:4f:bb:79:08:
         4f:2c:f7:23:41:20:01:6f:c6:e5:be:bc:ab:76:ef:c4:5e:50:
         db:15:17:98:ec:51:6d:da:bf:e4:c8:bd:52:58:62:66:7b:61:
         93:dd:24:a5:9b:05:c8:27:d3:82:83:fa:d7:c5:a0:6d:67:53:
         8c:25:a9:e3:84:6c:02:9a:11:fe:09:98:3c:a5:e0:2b:c5:d7:
         99:3a:e6:be:0c:c0:06:e7:ab:59:c5:90:fe:37:8e:4b:ed:19:
         71:44:53:fe:3a:c7:47:31:f2:b3:a3:e1:d9:22:33:3e:5d:09:
         8d:4d:6e:f3:f3:ba:14:39:0f:8f:17:c3:5d:69:91:bd:a0:00:
         d8:06:43:0c:49:42:a3:72:30:90:9e:ba:b7:f4:12:14:8c:e8:
         11:79:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:52 2026 by rpki-client