Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
File:                     7vUxSu71EyMZT9himFitIPuS3-c.mft (raw, json)
Hash identifier:          /0qT2NLcwc7osWRgSaRXJ0B5fWwok/50IbVUF2W0idE=
Subject key identifier:   29:C7:C4:C7:3F:F3:63:5A:9E:51:BB:97:BE:68:D5:3F:36:8A:E2:35
Authority key identifier: EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7
Certificate issuer:       /CN=eef5314aeef51323194fd8629858ad20fb92dfe7
Certificate serial:       01A02620DD7ADDF17FF1A943581E03370168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:01:22 +0000
Manifest this update:     Fri 21 Aug 2026 21:01:22 +0000
Manifest next update:     Sat 22 Aug 2026 21:01:22 +0000
Files and hashes:         1: 1-uHXLfEeiYHiTch5MI0Zp7Q1bh4.roa (hash: G3Wer1Ja0Zg4WiASwJya45QDTKp9SQuCj+KiMND2RVA=)
                          2: 5_lXPJSQU9TySGTavGFbItKITBs.roa (hash: DekZ9D2qFWZa7Ez80mvuUtfA/Ri8J/rWEExk+hN+XO8=)
                          3: 7vUxSu71EyMZT9himFitIPuS3-c.crl (hash: rMcpoWOugqLWlNkdNBrox3iYUe6tHxjakTcXrsoXx4I=)
                          4: 96qX2JLpDjn2X07felwpqaF7sjY.roa (hash: 8OLwijPizXuspcA2/2yKy+kso5hdoNgbsBiOkwU1wxA=)
                          5: 9bd2LKn8XCQKvN2LMDzf8_9A0sI.roa (hash: TbUpkh62Q6DCQx4wcGP/0x2T9DL2M0Cq6VM3i1VEMz8=)
                          6: HhZ_QfAVVWEjTUgyEZALP1SKayk.roa (hash: pzcqmWDZa4DD01+YgVwG705sYe7vn0DSP8QcQqTdsWY=)
                          7: IM-GaBMyAt8Wx5LQkr0Q2YeWPKo.roa (hash: WNroGT5F6T4UYLI7vxb3TnN4UxlV1OI9972pLF7MpP8=)
                          8: Jp0cb6lmAjIofXK10GnisV8ZJq0.roa (hash: E8QA5JIxNVXPh+bj011j4mkyCxYWDlMzp8siE3PNiv8=)
                          9: O9sZuea9ueIX-lBdeStJj66-2JI.roa (hash: B1HtqKm4bakXSo5Bvqf1h8mPwoWz2JJwr3pKb7a7K4Y=)
                          10: TXIMOOFbySOl_fCyrIFwzH38_Nc.roa (hash: zx/ZoqOHnaqrqnJEUUNhOkPvA4KyM2M6D+k4QPkptDg=)
                          11: _0QOD1iLOQ7nNSalXlUFq8l1DKc.roa (hash: 9LxeCfnSlKfLVjaLSznS7g6keBzye2Y5wzmO6/J4hdM=)
                          12: _3ArQV0WIang3Y6566MNDlymPSM.roa (hash: S0JVvSQqWxE9GBFw98DT6M/IND88wYzRZCFMXx8E6pY=)
                          13: fsEmSsUpWyo53f9AQKnorEz_4ww.roa (hash: tkIjMfF+pTOIvEkol8ZxDkjRrmIQ6yvvI8WH2ZoXkO4=)
                          14: oGynhP4aXvthVu259k5PADuu7eI.roa (hash: oFg8RD6YZkwg8VcybZyXsgYWwcUBqNDlpQuxw8vIo6c=)
                          15: uLYhHXi716fKyjZfx2gzJ3EGUdo.roa (hash: Ui8rN3SnhBXRoOn5kXrAN5pwwH6pPo/nTDK8l35up3k=)
                          16: up_4n9Lp5vZ0pW68blQb7h8SkG0.roa (hash: GmaLLFqrP/x4pgyZv+ywc9zn/BT0CMhI9r8ah9CWbhA=)
                          17: wOVkqT7ztZXxGTTzuM5l0LfJavk.roa (hash: jmFTZuFqzg3pZRsa0IUrlDUzQ6n73sahy63N4xlRN5w=)
                          18: yFXrcqKEf7nJS9o-jQnPMUU9qVg.roa (hash: UNp8aNbRb0sX19Cut1y01pHMseIIL4CXte8eLcUOE4w=)
                          19: ypq3zheWfc4DE8P4z1cwHhkjBYI.roa (hash: VKYU1qGd4RJ3o10B1EDz3EAb01WtMqx2qvaOQyXihWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:20:dd:7a:dd:f1:7f:f1:a9:43:58:1e:03:37:01:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eef5314aeef51323194fd8629858ad20fb92dfe7
        Validity
            Not Before: Aug 21 21:01:22 2026 GMT
            Not After : Aug 22 21:01:22 2026 GMT
        Subject: CN=29c7c4c73ff3635a9e51bb97be68d53f368ae235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:20:c6:0f:ef:a4:0c:d5:30:e6:89:c1:2c:4a:
                    39:4d:8f:a9:f6:24:f5:79:6c:d1:e7:60:fd:ef:44:
                    fc:17:ae:e3:49:48:c9:0c:8d:eb:8f:8b:bf:f1:24:
                    e5:31:05:bb:7c:c3:47:89:48:49:9c:78:38:6b:f5:
                    bf:fc:1d:a7:56:c0:63:25:37:73:f1:fb:81:77:55:
                    a9:ee:a8:fd:ce:04:b4:bf:62:46:e3:e0:08:b2:78:
                    02:cb:78:b4:4d:2d:5d:d7:dc:22:21:e1:f2:5a:6c:
                    92:e5:90:95:2f:37:7a:c3:5c:a8:32:03:dd:54:eb:
                    c3:ce:21:62:70:c8:49:55:5f:ad:73:ad:bd:77:9b:
                    29:09:9f:39:16:a5:ae:0e:bc:92:d6:b5:76:32:5f:
                    bb:da:47:58:cc:aa:12:cc:37:b4:67:fb:5c:fb:4a:
                    0a:df:69:fc:ac:34:41:34:6e:52:ef:fa:c0:11:64:
                    b8:d9:e4:c8:ca:a2:89:31:db:42:65:0e:f6:3d:23:
                    d7:c6:b5:3f:51:ea:ed:db:ee:0d:18:56:d6:a6:57:
                    c4:f1:9c:1e:80:00:4a:27:82:d4:32:c2:c1:7f:7a:
                    b0:d2:fc:0d:c6:44:78:d8:71:ce:5f:c4:69:99:12:
                    40:7b:04:b4:6d:9d:8f:1d:93:86:68:28:04:d0:06:
                    53:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C7:C4:C7:3F:F3:63:5A:9E:51:BB:97:BE:68:D5:3F:36:8A:E2:35
            X509v3 Authority Key Identifier:
                keyid:EE:F5:31:4A:EE:F5:13:23:19:4F:D8:62:98:58:AD:20:FB:92:DF:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7vUxSu71EyMZT9himFitIPuS3-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7vUxSu71EyMZT9himFitIPuS3-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ff:ed:63:80:50:f1:b3:6c:86:0e:ed:ed:a1:d1:bb:cd:b9:
         eb:78:c9:95:a0:60:9b:d8:65:a2:29:21:36:00:09:10:80:40:
         a3:df:c6:3f:a4:6c:f3:66:26:4d:76:3b:d1:39:e6:64:6c:73:
         ea:42:0d:75:4b:3c:10:b1:a2:af:62:c1:32:66:df:ee:0c:71:
         b3:67:dd:2e:19:9c:45:fc:c2:2f:69:5b:66:a4:86:60:04:02:
         4f:38:61:4f:35:b4:bf:c4:5a:1b:f9:6e:ac:9d:0e:94:0a:e5:
         09:02:2e:5f:a0:a2:c2:9b:03:17:83:2f:9a:ce:24:2c:93:72:
         35:fc:bf:3d:54:ce:f5:5e:b4:55:ea:ac:a7:ca:ae:f0:b1:d5:
         f6:a1:19:0c:a6:46:4c:10:a7:e3:4e:8a:7a:ce:4b:ea:9d:ba:
         05:a8:5e:6b:49:c7:f4:b3:fb:10:8f:da:6a:f8:e4:04:2f:a6:
         87:c8:cc:18:91:a8:cc:98:b5:23:77:f9:83:cb:d3:bd:76:4b:
         15:3f:78:02:b6:61:8c:b9:49:22:bb:d0:4e:7e:1d:4a:23:b7:
         51:09:6f:35:8e:af:92:20:8d:2e:32:de:9b:54:94:ad:57:34:
         ed:d9:ac:8b:c7:b9:c8:a5:24:4d:af:97:b5:dc:18:c7:91:95:
         11:54:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:22:35 2026 by rpki-client