Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
File:                     7etEJKvYbW70jbnnZG9TnG0QyIY.mft (raw, json)
Hash identifier:          Us4fzl9kCtHT1SdTzuzuUhQ9883F0MvNtsHtcLDD100=
Subject key identifier:   8C:B2:7F:1D:8B:54:ED:3A:6D:E9:BF:5E:9B:FC:E0:78:D4:1B:F6:A1
Authority key identifier: ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86
Certificate issuer:       /CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
Certificate serial:       019F19B1DBE3F7A6DC1C722482BC9DC44BED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
Manifest number:          0ACE
Signing time:             Tue 30 Jun 2026 18:01:54 +0000
Manifest this update:     Tue 30 Jun 2026 18:01:54 +0000
Manifest next update:     Wed 01 Jul 2026 18:01:54 +0000
Files and hashes:         1: 7etEJKvYbW70jbnnZG9TnG0QyIY.crl (hash: kjI9SsU4e5/TYVXXZ/w7HEFToCsSqKBfh8FbunfwiSg=)
                          2: C77YJP8fJa8-Zz4rlDlE0c9emSo.roa (hash: DN6PsoZ+s4zlPu3wgZ94PNHVaR06pVMEb9575uK0WK4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:b1:db:e3:f7:a6:dc:1c:72:24:82:bc:9d:c4:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edeb4424abd86d6ef48db9e7646f539c6d10c886
        Validity
            Not Before: Jun 30 18:01:54 2026 GMT
            Not After : Jul  1 18:01:54 2026 GMT
        Subject: CN=8cb27f1d8b54ed3a6de9bf5e9bfce078d41bf6a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:87:7a:51:34:81:5f:e8:bb:72:95:4e:59:
                    e6:ad:e9:b0:27:05:f7:42:8b:97:14:ad:ad:be:f8:
                    17:96:33:b2:7a:72:db:62:b9:55:d1:1b:d3:01:52:
                    bb:02:d8:2a:93:fa:8a:27:2e:70:41:25:33:b3:12:
                    b5:88:8d:ee:b2:dc:09:1f:c9:46:b9:ec:64:8f:87:
                    04:25:50:98:55:d4:b6:6e:af:40:0d:ac:ec:d4:31:
                    eb:96:11:72:f7:a1:4c:26:24:4b:a9:d0:5e:bf:55:
                    10:dd:2a:35:53:58:00:8c:b6:b2:60:fe:f4:de:91:
                    66:86:3b:ee:68:83:65:6a:0f:f6:4d:e7:0a:09:43:
                    3c:f4:65:b3:fd:51:d1:12:f3:15:30:95:16:5a:fa:
                    c8:d3:bd:9b:c5:9a:9a:26:ed:57:cc:0f:10:72:4c:
                    ce:5e:b6:0e:e5:26:e5:42:4d:cc:ad:27:d7:e5:da:
                    b3:d1:e5:ea:53:59:8f:a2:bc:3e:74:6d:aa:ec:48:
                    a4:1e:eb:a9:7e:da:6b:3b:ce:ed:a6:21:3d:4a:cb:
                    60:e2:f3:b0:5c:a1:d5:92:5f:87:97:cc:db:44:7c:
                    0c:f5:27:a2:a8:9a:8b:41:02:2e:9e:68:67:d6:66:
                    dc:34:97:0d:75:26:1c:6f:79:31:3b:9a:12:7e:ea:
                    4b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B2:7F:1D:8B:54:ED:3A:6D:E9:BF:5E:9B:FC:E0:78:D4:1B:F6:A1
            X509v3 Authority Key Identifier:
                keyid:ED:EB:44:24:AB:D8:6D:6E:F4:8D:B9:E7:64:6F:53:9C:6D:10:C8:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7etEJKvYbW70jbnnZG9TnG0QyIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/51b31a-7e50-4a1e-9f69-16d3a0ea49ae/1/7etEJKvYbW70jbnnZG9TnG0QyIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:81:c7:7b:47:6f:90:92:4b:25:ec:a4:e9:07:81:bc:84:26:
         2f:d1:ef:a4:5f:52:b4:2f:92:8f:85:26:25:4e:fb:e9:2c:5f:
         47:1e:55:7f:25:40:16:90:03:f0:05:c6:82:7d:9c:65:a6:05:
         27:00:eb:02:3e:ac:64:c3:99:3d:ea:ce:2f:bd:57:2c:55:ab:
         6a:e2:70:52:31:95:43:4a:f6:55:32:1e:22:62:af:13:d9:ed:
         62:76:13:6c:d4:67:ba:f3:ec:d7:43:73:f6:c9:86:09:a5:1a:
         43:1d:5a:ca:11:10:81:9e:95:19:e6:9c:45:bf:f4:95:e2:66:
         09:e9:37:1d:87:08:3c:09:1c:13:70:76:11:0f:85:8f:36:e5:
         33:df:a0:08:c8:5d:a9:95:98:86:97:9f:5c:d2:db:f5:3e:18:
         b0:1b:fa:14:5c:d4:ec:d4:cc:dd:77:60:b1:fd:1b:aa:b7:c1:
         08:7f:f5:a3:bb:0f:77:f6:d9:c1:1c:93:c3:5a:45:a7:72:ce:
         8f:db:b9:e0:fb:32:29:7f:3a:3d:e6:be:2e:a4:79:48:27:ff:
         bd:89:bd:a4:b8:d1:c4:3b:5a:44:91:c6:8b:fa:d0:73:bc:48:
         3a:b3:ed:cf:f0:c7:1d:55:69:36:e7:80:8a:ca:ca:70:7b:5e:
         07:30:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:04 2026 by rpki-client