Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          a1K7BAZoIHas612Z6rSX2+ctVAlqKWlq27I9kDWLVVs=
Subject key identifier:   50:62:86:32:8D:4A:35:32:81:37:8D:C1:22:86:AF:63:4B:64:05:4D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       019FB49E3651F4F9472141F4DFF9E5546F89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A26
Signing time:             Thu 30 Jul 2026 20:01:35 +0000
Manifest this update:     Thu 30 Jul 2026 20:01:35 +0000
Manifest next update:     Fri 31 Jul 2026 20:01:35 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: mqIS7TgvGGWFnGkGbD1G1SxuxQ0Q7UYv5pIqUeqsKhw=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 31 Jul 2026 20:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:b4:9e:36:51:f4:f9:47:21:41:f4:df:f9:e5:54:6f:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Jul 30 20:01:35 2026 GMT
            Not After : Jul 31 20:01:35 2026 GMT
        Subject: CN=506286328d4a353281378dc12286af634b64054d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:85:e1:94:ba:cc:c8:95:89:e0:0b:82:fb:90:
                    43:01:db:85:ef:d6:64:51:0c:53:18:32:16:5d:93:
                    01:14:5b:9c:ce:eb:e6:6c:fc:a4:ae:68:47:b9:95:
                    68:da:af:e2:04:7d:f1:71:3b:22:01:2f:6c:75:4b:
                    4d:36:a5:be:9a:f5:8c:22:53:fb:1d:30:bd:11:63:
                    e8:0f:20:5b:28:6e:b9:28:3a:29:4e:ab:62:c7:d9:
                    a0:ea:d7:87:15:6d:6f:7b:db:e6:6c:cb:75:f1:64:
                    75:a5:40:7c:d4:14:bb:be:17:23:3e:f6:b8:0f:3c:
                    10:50:dd:eb:2e:ba:6b:26:05:49:a1:e6:b0:b1:57:
                    5e:b4:8f:7a:75:93:7d:8a:51:f4:cc:02:5b:1a:cc:
                    1a:d2:af:95:14:9f:77:0f:89:fc:de:51:17:03:48:
                    b6:be:4b:59:f8:a4:89:09:7d:6e:06:d6:22:bd:eb:
                    6b:ab:7a:97:a1:c0:17:19:01:7c:7e:1f:20:2b:fb:
                    23:8d:32:1d:c8:03:de:01:fc:0d:34:a4:7b:26:d3:
                    f7:88:d0:39:0d:ce:8b:d2:7b:fb:30:d8:6c:72:b3:
                    1b:f7:f1:cb:be:f2:3c:ff:cc:e3:08:b0:e6:41:4e:
                    c7:c2:0f:31:6d:8a:a1:59:59:06:1e:09:a1:74:ef:
                    49:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:62:86:32:8D:4A:35:32:81:37:8D:C1:22:86:AF:63:4B:64:05:4D
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:74:8f:6d:ab:98:a0:37:3d:79:2b:9f:93:fc:2a:0a:a2:23:
         23:2e:d2:ca:b4:5c:1f:b9:2c:73:bd:b3:32:f6:33:c7:36:b3:
         04:2c:c2:b0:b4:cc:14:d4:87:00:83:aa:18:1f:76:16:1f:66:
         b4:9a:0a:4a:e4:41:93:ee:55:1f:9b:78:8f:92:8d:0a:37:58:
         ed:cb:d6:5a:65:40:cd:a5:40:55:0a:27:c6:63:b3:6b:2d:d4:
         f3:c6:66:06:d6:2c:83:d5:1d:73:4f:1b:8e:25:16:a9:a4:ac:
         51:ca:5d:30:ad:d9:20:d9:54:b2:d4:33:f7:60:67:ad:92:a4:
         58:62:30:65:07:8f:84:13:74:de:67:1f:13:6d:78:da:68:88:
         9d:08:f5:cf:29:a4:fc:09:bc:75:16:1c:fe:e4:ec:90:70:c4:
         47:49:61:e2:40:02:6d:69:9f:14:fd:86:20:4d:24:eb:63:c1:
         be:0c:12:4a:fd:6b:88:26:d9:62:bf:63:e5:37:b9:09:e9:9e:
         07:e7:fc:6d:b3:97:c4:a6:12:f5:38:ea:91:14:78:26:56:00:
         77:af:0b:40:c1:78:9f:ff:ca:44:de:6a:9e:05:7c:52:d8:d8:
         b2:46:97:d0:c7:55:28:f3:67:42:4c:1b:db:80:29:95:bd:96:
         ec:b6:25:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 31 03:58:53 2026 by rpki-client