Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          pgtuj3D7SuecjeKhFcbrCAbeFNbMq+3eysx4CPKGd5s=
Subject key identifier:   38:35:95:8C:8E:D6:5D:92:29:E3:EE:4C:BC:71:84:8B:74:BD:27:35
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A020C3312FD1218C31B79618C75AE6FB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A5E
Signing time:             Thu 20 Aug 2026 20:00:58 +0000
Manifest this update:     Thu 20 Aug 2026 20:00:58 +0000
Manifest next update:     Fri 21 Aug 2026 20:00:58 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: DvswU03PNkKPgZxFsZd1vPA3HWKfpBCuSXagTKak8XU=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:c3:31:2f:d1:21:8c:31:b7:96:18:c7:5a:e6:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Aug 20 20:00:58 2026 GMT
            Not After : Aug 21 20:00:58 2026 GMT
        Subject: CN=3835958c8ed65d9229e3ee4cbc71848b74bd2735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:ab:00:d6:67:3f:96:a1:8d:d6:db:ac:b7:
                    03:2b:5e:93:d3:fc:ce:f2:44:4e:1a:a3:23:64:25:
                    c9:cb:8f:74:e8:b6:4a:50:8a:b9:a9:0c:1e:48:a7:
                    ac:81:66:7c:31:fa:f4:7e:26:cc:52:ef:d3:2c:ba:
                    7d:a8:96:ca:30:d5:d7:1e:34:ac:2d:a0:93:78:40:
                    a8:e5:3b:f7:3f:fa:81:e1:f6:49:47:fa:01:cd:df:
                    67:9f:ff:0a:52:43:d6:a3:8b:1c:97:b8:9e:72:74:
                    e7:41:5b:77:b0:d6:68:fa:76:91:5c:cd:f3:24:6a:
                    b5:a8:17:9e:1d:4f:93:ff:1b:7d:ed:4d:d8:18:93:
                    c0:32:06:5f:55:12:e5:7f:41:53:d8:00:1c:52:23:
                    fd:c9:63:bd:39:55:8b:03:49:b0:90:78:95:d9:0c:
                    ff:2a:30:1e:9b:00:0d:61:6e:84:68:84:02:b0:96:
                    e0:fa:6a:db:0e:eb:9b:dd:b0:09:b9:bf:29:2f:36:
                    49:5f:4d:c7:22:e9:a5:44:97:73:50:e0:4b:9d:6a:
                    63:97:7d:dc:57:3d:48:ec:e4:fb:9c:b9:71:7f:62:
                    21:c4:ae:90:d8:22:e9:b0:e1:2b:73:39:28:e3:f8:
                    05:97:b7:15:51:02:c8:9e:50:0b:ae:15:8a:7a:e0:
                    7e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:35:95:8C:8E:D6:5D:92:29:E3:EE:4C:BC:71:84:8B:74:BD:27:35
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:50:63:62:77:ab:22:18:d1:52:cc:c8:af:50:ab:36:f7:24:
         2a:51:e6:d9:01:e4:f8:67:ce:37:47:58:15:3e:84:83:2a:19:
         75:d8:b3:bb:bf:d6:86:fc:9b:76:95:53:e1:41:39:11:64:d1:
         77:19:c9:39:af:f5:65:31:d5:08:ac:c5:f8:98:d1:e4:f5:dd:
         e9:23:48:93:7d:3f:7d:a2:4f:c4:1c:7c:d3:5f:d4:7a:57:2e:
         ac:ca:03:38:16:89:b4:f0:80:0c:d7:19:b6:33:72:fd:f6:89:
         54:9b:28:f3:14:f2:95:f7:d9:ca:85:e5:b8:56:ef:cf:f8:1c:
         3e:3a:cb:01:f4:a0:2a:ab:f7:d3:77:d8:68:49:e2:4e:7b:8b:
         15:47:ef:54:60:18:54:4e:e2:c1:73:d0:7b:16:4c:17:d7:81:
         eb:5b:06:2b:03:60:c4:91:20:41:0b:15:b1:d7:f6:b9:2a:6c:
         da:fb:8c:4b:db:2b:47:14:b4:ab:ae:0c:66:c1:09:a4:01:33:
         2d:56:af:7d:2e:67:ed:ce:d9:1a:5b:e7:18:ae:2a:b8:55:2e:
         ce:38:76:33:b6:c8:2a:0b:6b:ab:da:04:4e:16:eb:b4:62:5a:
         4b:fd:d0:62:cc:33:c4:0a:a1:fd:05:94:72:ae:78:b9:ee:44:
         15:ef:d1:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:59:27 2026 by rpki-client