Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          IhhO8JVDPhh4o9BDQ7iU2/EM59NnInatEQEBz3ZpY/A=
Subject key identifier:   D3:C3:D4:DB:82:DA:78:2E:03:2F:CD:38:D7:BC:D6:F3:E1:CB:A5:BE
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019FD94F7A9D7E983CE04187FD4D26FA6E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A39
Signing time:             Thu 06 Aug 2026 23:01:32 +0000
Manifest this update:     Thu 06 Aug 2026 23:01:32 +0000
Manifest next update:     Fri 07 Aug 2026 23:01:32 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: KP7yU43RDsNF3GqFluK5/l8uceT5A4vN0ds4VwgoMG0=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:4f:7a:9d:7e:98:3c:e0:41:87:fd:4d:26:fa:6e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug  6 23:01:32 2026 GMT
            Not After : Aug  7 23:01:32 2026 GMT
        Subject: CN=d3c3d4db82da782e032fcd38d7bcd6f3e1cba5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:3d:b4:9f:3e:d6:a0:da:77:5c:18:3c:10:
                    56:05:55:85:6d:22:45:a8:38:72:6a:44:bf:5d:3f:
                    09:2f:49:e9:dc:9a:c1:1f:f7:f0:d3:a1:8d:cd:64:
                    76:2f:37:77:92:bc:07:fc:a7:3f:52:d8:ec:73:18:
                    61:42:8d:c3:f9:03:dd:43:2c:b6:38:65:c7:90:86:
                    c9:0a:18:5b:72:b1:58:2b:92:ff:14:4d:3c:8f:18:
                    49:c5:46:69:d8:13:63:02:03:ae:12:34:f9:74:77:
                    1c:dd:ba:78:f4:8f:cb:c8:af:02:46:9c:28:08:3c:
                    2b:4f:34:a7:66:a8:a3:a3:3c:de:12:34:4f:1b:ff:
                    9e:b5:43:46:1a:18:70:c2:32:ed:d3:01:25:e4:e6:
                    67:37:a8:63:a8:32:1c:91:7c:03:f4:ff:21:0e:da:
                    6c:a1:e8:15:4e:ab:80:a3:6e:32:cb:26:51:03:ae:
                    c5:c1:ef:98:5d:44:d7:ba:1a:c6:e2:73:53:75:b9:
                    8e:ac:43:77:83:2f:26:94:f4:b9:c8:41:45:57:82:
                    4e:0f:91:1b:ec:48:d3:25:a7:fe:b2:c4:95:e9:17:
                    a9:ed:2a:95:2c:7e:09:7b:a6:cf:b7:ff:19:f6:f2:
                    c7:e6:fa:5c:70:73:4d:ce:9b:ea:2b:45:60:bd:b7:
                    b9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C3:D4:DB:82:DA:78:2E:03:2F:CD:38:D7:BC:D6:F3:E1:CB:A5:BE
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:98:a0:d6:3b:dc:eb:2a:d4:f3:5f:5a:80:09:81:73:2e:
         d0:c4:da:0c:cd:d8:55:09:2d:0c:b1:c1:c3:f9:ad:1b:c0:be:
         6d:56:77:e5:db:a2:6f:43:f7:92:37:a3:6d:22:71:c9:bb:70:
         07:62:08:24:d5:66:84:60:ff:04:d8:55:08:b3:a6:70:09:ae:
         9c:84:75:d0:a9:89:a2:cc:6f:2f:d7:be:2c:37:8e:4e:d4:f3:
         83:29:15:12:f5:4a:5f:f4:59:bb:b5:83:1b:e1:22:ab:ac:86:
         15:34:61:22:1c:f3:36:f8:7a:b1:1d:cb:39:c1:02:42:32:fc:
         dd:24:02:fd:e8:37:c9:4d:72:ad:13:4e:94:1f:8e:f1:75:a0:
         cb:dc:c6:6a:05:e3:a5:ff:ed:f2:ab:75:61:76:3b:ca:35:96:
         79:63:dc:6b:e8:60:42:d2:19:8b:05:dd:30:f8:42:0e:ad:c6:
         15:38:a5:21:3f:b3:77:0b:ed:e1:40:3b:2a:99:b0:6a:0d:ec:
         63:ac:c6:39:50:1b:99:99:bf:63:f1:91:93:6e:b7:b8:ac:81:
         06:47:ef:ae:04:83:99:6a:1f:f5:54:71:fe:62:76:36:cc:f2:
         f5:6b:7b:78:e5:ff:1c:75:03:ab:bd:53:f7:05:60:c1:2a:03:
         06:01:bd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:54:05 2026 by rpki-client