Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
File:                     EFa81Cb9h81vQUfhMyFtAxErGBs.mft (raw, json)
Hash identifier:          mZn5H7IPI/LPtaFIUWsWZJCD/0e/z4fFdM9nGQVE+m8=
Subject key identifier:   B5:85:AB:63:A3:07:B4:5D:19:22:09:34:E0:6E:45:8A:C8:9D:5D:FE
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01A06A26965756CC969570172E7D1B246A2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
Manifest number:          1A84
Signing time:             Fri 04 Sep 2026 02:01:48 +0000
Manifest this update:     Fri 04 Sep 2026 02:01:48 +0000
Manifest next update:     Sat 05 Sep 2026 02:01:48 +0000
Files and hashes:         1: 7ELbo8DKD8QOXRjssYS6wePnETw.roa (hash: g47QYVMiNHnqnXov0OVk0NOhZUsS+pa9D0jOV0goZEE=)
                          2: 7nHuEYfzq0sxBotIwOTKnrsuqJc.roa (hash: 5KEXUpcoESrkEUXw6CAMFCGMGysz+4l5l9DNIsTbLrQ=)
                          3: EFa81Cb9h81vQUfhMyFtAxErGBs.crl (hash: 3kphzl5JK1tlpzy5/x0O2tyh5bMMw+sX2pC88nLSxM0=)
                          4: Nr7UmKzHvs5LFBWxclEXNby8v-w.roa (hash: 6yVyO1xkWu0C7uNE6Y6DPlWxOVCuyQgMCCzQsQV5E34=)
                          5: PBeIIGkcHysJPrw2bh6-t7i6h2Q.roa (hash: 8GRkaUrE7jPN3KtBvtWO8Y/2n25/ErqReEtBTVUOJOM=)
                          6: QKB2yXBKCucZIik_NUkIUu-0gsU.roa (hash: Az9ohs2u7S8Tz5MIQmRIq0++DK7ITljN4NySQ9ZLZEM=)
                          7: R15U4TurpGZ6_74GJTZ7B1mnB5w.roa (hash: nCR8dGZ8Kanmd+TAXuyL33xBxmEOGcczAv2h+qPOvfM=)
                          8: UCp9_ApWUbgQGIa1NKLJ-cS_tv8.roa (hash: yi6xNjGkjqnryzu2NNxC+M1I7oPuwMvhO/Hni9IEjDY=)
                          9: a0xEiVjzWYZWA6mFm9xUSgeK1AY.roa (hash: S+5zYJa35rHTKnwj7CXJQB2mrb0WWFh2WpXU/4m9ZOc=)
                          10: b7L24DGacCv1Jjj0E2xwOpKR_rI.roa (hash: dn3nM0XrClq6tP6low/fe+MmlfMR2imBrruQdtqUDrY=)
                          11: eJZw4lvkyTThK1hHF7ea4kiJbjI.roa (hash: Z63CbP8wrCiSbcvLHW5lkv40Jr5h6n5yJBfP7IOdvMQ=)
                          12: fiC8FoDEV1wgGCem1X1XF0O_lZg.roa (hash: /O+AtGpBwjj3rjKwzdQACIuoL2216zBEBnUVLPCtJQs=)
                          13: gHV84Ce0tQPq0MuD_bkU9QPAns4.roa (hash: re+X2TGGK92eU/L6LtTiYjKBQ/FAo99HrBg3gP7PqYI=)
                          14: gtsveEMSshs3GcdNL4F4hWCTTWo.roa (hash: RJctdCivuPc3UqTwjVyyJO6uirIWfQK/cVIp5Hcrq4M=)
                          15: i99u0goUMp8noCiOxLvsF0PjThg.roa (hash: BlAXZTEbYm5C8kWdW14+SQaoI4/b99p1HyX+X4SArGA=)
                          16: j9jFZwTJ0znYArYrP_wb7FovBv8.roa (hash: ry2e+m/h6zjqugwIc/oTaduBcZ+a/pH5c4SrYte7lzE=)
                          17: knv596giWxC-Wv303dib7Qt8Zhw.roa (hash: RYC30OCfNr/qMd5J5JMtEIe4zUUHIA5/DP4BCkCZcl8=)
                          18: pf1pBUnzxjHov513TFJHTqE4Iy0.roa (hash: Gqdsv31psN3b7M2TvRqD53MdlcZ7EHjfjPl3nHfwAmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 22:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6a:26:96:57:56:cc:96:95:70:17:2e:7d:1b:24:6a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: Sep  4 02:01:48 2026 GMT
            Not After : Sep  5 02:01:48 2026 GMT
        Subject: CN=b585ab63a307b45d19220934e06e458ac89d5dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9a:f3:65:a6:ec:d3:35:8f:76:b2:82:f8:27:
                    4e:ae:cb:07:2a:37:40:6c:13:77:f3:2e:9e:30:64:
                    06:01:e7:3f:be:a6:37:13:2c:c4:d4:65:19:e6:37:
                    7e:c2:7a:0f:06:6c:a6:f8:63:f0:8b:3c:ef:9a:59:
                    a6:ca:f8:0b:62:d9:e5:9c:f7:37:4a:04:0a:4a:96:
                    79:1b:bd:2d:04:16:29:ec:fd:88:d5:b7:d9:16:3a:
                    d1:48:e8:80:41:19:fa:78:a2:c0:94:e4:3a:a5:40:
                    43:4e:92:eb:ab:45:6e:65:d4:3f:59:32:87:d0:4e:
                    b6:a6:c4:34:33:70:3e:20:d4:28:a5:b3:8e:ff:41:
                    14:cf:1e:10:f3:38:ac:11:c9:d0:41:e9:2a:19:62:
                    34:2e:b7:94:68:b7:59:44:50:06:fd:f8:f2:1a:ac:
                    e7:bd:94:30:8b:14:b0:b6:ba:57:03:b4:0f:d3:94:
                    b7:3b:ad:db:7d:02:38:3a:72:2f:6f:df:d1:fb:f1:
                    9b:ee:c0:0f:b6:fd:78:2a:72:e1:34:23:c8:21:ce:
                    a9:54:42:77:96:b7:bf:9f:f0:0c:09:ac:e4:01:c0:
                    c4:ca:65:c7:2d:61:d2:7b:87:57:5d:8e:9c:12:9b:
                    57:3e:44:74:d4:a7:51:2c:04:73:14:9e:8f:50:8e:
                    04:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:85:AB:63:A3:07:B4:5D:19:22:09:34:E0:6E:45:8A:C8:9D:5D:FE
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:39:13:73:01:bb:b4:2b:27:66:e7:8c:91:f6:57:c1:44:
         41:31:77:9a:19:23:54:c9:e9:5b:d9:21:61:8b:c8:68:1a:4c:
         42:ef:20:b4:71:2f:01:37:b8:fb:d9:b1:3a:b7:e6:e4:1c:7d:
         90:68:72:a1:ab:10:89:32:7f:1d:dd:46:4f:28:89:67:ef:2d:
         9e:e9:22:ac:7a:22:d1:ad:2a:dd:3d:5b:e3:7b:83:30:e3:75:
         4b:89:9b:35:3b:ba:34:64:8a:e8:58:a5:a0:80:d3:53:d4:1f:
         89:2c:dd:90:6c:9f:51:7f:20:0c:54:17:00:da:53:e1:f2:3a:
         d5:b9:02:01:5e:c7:a3:b0:a4:65:3d:30:73:af:46:ac:1d:28:
         9f:b6:c9:f3:b8:77:62:ef:42:2f:69:cc:eb:e7:a4:6c:5a:d2:
         28:72:a9:c5:b2:48:f4:e4:85:38:d6:a1:93:2a:0f:cb:f6:56:
         58:b8:14:6b:e7:7b:b0:16:5e:af:78:88:0c:48:d6:4a:41:36:
         8b:e0:4e:93:66:0c:7a:91:7a:34:be:af:5a:ea:d1:8c:88:af:
         be:f0:2a:12:d1:66:7c:5a:af:92:78:eb:41:1c:e8:5c:3c:d1:
         fd:de:43:45:9c:8f:82:92:87:17:44:d0:b5:7a:e2:e3:34:bd:
         95:53:8a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:08 2026 by rpki-client