Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
File:                     7SGj8xKknz6djGxEyd4TOp7Yd-o.mft (raw, json)
Hash identifier:          ot9yXB3hK8Vy2gALOkDbPtdMT6AwIzg/zj3bndPJQJ0=
Subject key identifier:   0E:84:FC:B9:98:3C:CD:D3:0F:2E:98:F4:B7:D9:32:93:06:6B:8B:D8
Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Certificate issuer:       /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Certificate serial:       01A03FA985EE87EE642FBF21B7A0CE3B9733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
Manifest number:          02C6
Signing time:             Wed 26 Aug 2026 20:01:09 +0000
Manifest this update:     Wed 26 Aug 2026 20:01:09 +0000
Manifest next update:     Thu 27 Aug 2026 20:01:09 +0000
Files and hashes:         1: 7SGj8xKknz6djGxEyd4TOp7Yd-o.crl (hash: JBlpmfyThySnyNplajyJkXGZ5HKe/9t+wc/ZU7dDZyU=)
                          2: QBDeh8-FvDO0AkQLiktV9k-NtVM.roa (hash: tI3DlxFpE7QxnE4bKmU+VTwjoA3hd05ITjU2EuSCJxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:a9:85:ee:87:ee:64:2f:bf:21:b7:a0:ce:3b:97:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
        Validity
            Not Before: Aug 26 20:01:09 2026 GMT
            Not After : Aug 27 20:01:09 2026 GMT
        Subject: CN=0e84fcb9983ccdd30f2e98f4b7d93293066b8bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1f:5e:d2:ad:0d:9e:e1:c0:e7:fc:0f:d0:ce:
                    6d:77:ee:18:38:ac:cd:d9:b0:87:7d:6b:82:e9:ef:
                    2f:e8:d3:84:db:af:5d:7c:ae:30:d9:60:e5:23:a1:
                    bf:0c:a8:06:bc:ae:00:29:ff:32:46:1b:31:d5:19:
                    f7:06:ab:75:ad:83:2f:f1:d7:a0:57:b8:64:ea:59:
                    d1:bf:4f:7d:18:a4:91:80:c8:fd:c2:8d:a9:eb:26:
                    cd:28:68:bd:48:60:25:2a:14:16:79:fd:95:91:dc:
                    72:2a:61:19:0b:9b:06:58:ee:06:7f:01:71:c6:a3:
                    bf:f4:ae:6e:82:87:bd:3b:05:bd:15:d0:30:8d:ba:
                    bf:4d:9d:a1:31:34:fd:b0:21:40:22:9b:7f:a6:76:
                    c5:a9:a2:c3:11:38:54:47:47:72:04:0a:42:1f:97:
                    c6:84:be:73:1a:5c:92:0f:ad:66:51:aa:1a:2f:ab:
                    0d:e0:fd:23:1f:be:37:da:2d:4c:cf:61:f5:f4:22:
                    45:29:c1:53:b0:54:b6:06:5b:ca:67:a0:48:a0:2c:
                    f6:e7:8a:89:b5:c0:c0:db:bb:1a:a8:9b:45:23:e8:
                    7d:43:6e:38:34:db:63:93:79:80:59:1c:45:4f:56:
                    b3:0e:a2:d4:e2:f9:25:7a:2d:7e:a3:d6:e8:87:02:
                    ab:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:84:FC:B9:98:3C:CD:D3:0F:2E:98:F4:B7:D9:32:93:06:6B:8B:D8
            X509v3 Authority Key Identifier:
                keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f7:7f:a0:57:d0:bc:3b:30:25:c0:70:b5:72:79:79:8a:f1:
         6c:61:df:26:33:e4:a7:f5:3f:ea:5a:18:5e:56:f1:8f:29:5e:
         22:76:8f:5a:06:f8:e1:a5:7d:9a:65:67:f2:f2:68:63:7f:f3:
         c6:a3:65:46:e0:93:94:16:c6:0d:97:6e:74:62:85:3f:73:ea:
         57:31:aa:1a:c1:f7:21:08:17:41:4a:3d:54:fe:0c:ba:0d:30:
         ad:d9:ca:9a:8f:0f:43:8c:b9:7c:28:c0:e3:d2:ce:e4:23:ec:
         82:06:14:33:2f:85:d7:d0:c4:03:cb:b0:12:c6:38:ff:5a:f5:
         34:91:80:cf:de:f3:d3:64:47:5c:13:da:0a:21:5e:e0:a9:a9:
         cf:27:46:a6:56:88:fc:60:47:3c:d8:9b:ad:29:94:d5:28:81:
         dd:16:ef:19:cf:50:ca:e8:70:cb:56:fa:db:52:f2:ce:6a:f6:
         d8:67:3d:a7:e6:c6:d8:7d:15:47:1e:64:42:7f:36:97:d1:f6:
         86:d7:f0:5e:05:56:ca:c2:81:8f:45:2b:c4:c9:12:9c:41:61:
         96:a9:67:6f:40:c8:25:ce:42:30:c5:d7:f6:38:0e:7a:88:2f:
         2c:c9:41:8f:ec:4d:d8:21:67:22:e4:fe:2a:06:e8:0e:3d:b1:
         1c:e7:17:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA/qYXuh+5kL78ht6DOO5czMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMjFhM2YzMTJhNDlmM2U5ZDhjNmM0NGM5ZGUxMzNhOWVk
ODc3ZWEwHhcNMjYwODI2MjAwMTA5WhcNMjYwODI3MjAwMTA5WjAzMTEwLwYDVQQD
EygwZTg0ZmNiOTk4M2NjZGQzMGYyZTk4ZjRiN2Q5MzI5MzA2NmI4YmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x9e0q0NnuHA5/wP0M5td+4YOKzN
2bCHfWuC6e8v6NOE269dfK4w2WDlI6G/DKgGvK4AKf8yRhsx1Rn3Bqt1rYMv8deg
V7hk6lnRv099GKSRgMj9wo2p6ybNKGi9SGAlKhQWef2VkdxyKmEZC5sGWO4GfwFx
xqO/9K5ugoe9OwW9FdAwjbq/TZ2hMTT9sCFAIpt/pnbFqaLDEThUR0dyBApCH5fG
hL5zGlySD61mUaoaL6sN4P0jH7432i1Mz2H19CJFKcFTsFS2BlvKZ6BIoCz254qJ
tcDA27saqJtFI+h9Q244NNtjk3mAWRxFT1azDqLU4vklei1+o9bohwKrAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6E/LmYPM3TDy6Y9LfZMpMGa4vYMB8GA1UdIwQY
MBaAFO0ho/MSpJ8+nYxsRMneEzqe2HfqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTct
ZGYxMzRmMmEyZTZjLzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9jYjM1MGEtN2Y3NC00YTZiLWJhNTctZGYxMzRmMmEyZTZj
LzEvN1NHajh4S2tuejZkakd4RXlkNFRPcDdZZC1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKfd/oFfQ
vDswJcBwtXJ5eYrxbGHfJjPkp/U/6loYXlbxjyleInaPWgb44aV9mmVn8vJoY3/z
xqNlRuCTlBbGDZdudGKFP3PqVzGqGsH3IQgXQUo9VP4Mug0wrdnKmo8PQ4y5fCjA
49LO5CPsggYUMy+F19DEA8uwEsY4/1r1NJGAz97z02RHXBPaCiFe4KmpzydGplaI
/GBHPNibrSmU1SiB3RbvGc9Qyuhwy1b621Lyzmr22Gc9p+bG2H0VRx5kQn82l9H2
htfwXgVWysKBj0UrxMkSnEFhlqlnb0DIJc5CMMXX9jgOeogvLMlBj+xN2CFnIuT+
KgboDj2xHOcX+Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:28 2026 by rpki-client