Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
File:                     7gItaN8GanYaO-hkGnG7acFeJy0.mft (raw, json)
Hash identifier:          aYzFzv9T2aNT4NvxAPgKm1p7KU6dgzKeeR//VLWfhgc=
Subject key identifier:   C6:5D:9C:3A:D4:E7:20:54:5B:78:CA:D9:72:09:0E:CA:AC:3E:CF:70
Authority key identifier: EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D
Certificate issuer:       /CN=ee022d68df066a761a3be8641a71bb69c15e272d
Certificate serial:       01A0408531D1F92E5AF7D20B088062997838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
Manifest number:          0153
Signing time:             Thu 27 Aug 2026 00:01:05 +0000
Manifest this update:     Thu 27 Aug 2026 00:01:05 +0000
Manifest next update:     Fri 28 Aug 2026 00:01:05 +0000
Files and hashes:         1: 7gItaN8GanYaO-hkGnG7acFeJy0.crl (hash: qOrX3fbuVVZF64BFt8vdWFsEWWbWoZxjrl7HZCiqDq4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:31:d1:f9:2e:5a:f7:d2:0b:08:80:62:99:78:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee022d68df066a761a3be8641a71bb69c15e272d
        Validity
            Not Before: Aug 27 00:01:05 2026 GMT
            Not After : Aug 28 00:01:05 2026 GMT
        Subject: CN=c65d9c3ad4e720545b78cad972090ecaac3ecf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:72:d9:c3:d8:4a:6b:e3:ba:3a:6d:6c:6d:3e:
                    65:2b:ef:95:20:e0:67:49:c9:59:1a:78:90:5d:1c:
                    fd:00:9e:6e:1e:f1:3a:ba:c3:67:36:a0:ff:55:94:
                    1e:b8:66:c0:20:f3:db:8b:bf:77:96:a6:b2:c7:6c:
                    7b:90:a3:f7:d4:10:04:e9:6e:d7:a4:89:43:84:af:
                    89:61:d4:48:dc:04:75:71:5e:54:9a:11:cd:d9:b6:
                    0d:da:b7:1f:71:db:5d:2c:a5:da:39:b4:2f:a7:ee:
                    7b:4a:9d:46:04:0a:39:04:4a:f6:62:44:f7:2e:e4:
                    40:06:6e:6c:3e:10:9f:b7:28:54:ae:8a:40:b5:70:
                    14:89:a4:e7:54:9e:e4:c6:59:f8:5c:20:05:37:f1:
                    bd:fb:43:c2:15:6b:fd:00:e6:b6:19:8a:fb:76:da:
                    e7:bf:07:82:9b:bc:74:8e:3b:5d:3a:eb:4d:4f:d2:
                    27:7e:b3:a5:b6:0b:8a:0f:96:e0:15:22:06:ce:d3:
                    ba:59:87:93:ad:ce:96:6e:5e:bc:2f:84:12:b0:06:
                    e5:3e:61:3c:2d:98:5f:6f:61:90:6d:4a:ae:9e:57:
                    59:ec:4f:32:12:b9:38:ea:df:20:50:fe:97:4d:d1:
                    e8:e6:86:eb:ac:c5:dc:e7:ce:0b:a3:93:6b:c1:e6:
                    70:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5D:9C:3A:D4:E7:20:54:5B:78:CA:D9:72:09:0E:CA:AC:3E:CF:70
            X509v3 Authority Key Identifier:
                keyid:EE:02:2D:68:DF:06:6A:76:1A:3B:E8:64:1A:71:BB:69:C1:5E:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gItaN8GanYaO-hkGnG7acFeJy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eae6b4-5687-4e4a-845e-742f7c8685ed/1/7gItaN8GanYaO-hkGnG7acFeJy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f3:3d:44:d0:15:e1:24:96:a1:e5:34:26:86:a5:56:97:fe:
         69:ce:01:e4:aa:b8:4d:26:6c:78:04:1f:54:0e:d5:c6:8f:1f:
         88:39:bd:34:e3:f9:d2:24:27:bd:52:ff:3f:1a:bf:87:ef:84:
         42:0b:4d:59:18:4c:46:f5:a9:6a:d7:b3:46:8d:9c:95:04:03:
         a9:e8:57:88:06:4b:a3:8b:a1:e5:f8:24:44:b8:30:c4:9e:df:
         9a:fe:38:d3:eb:ff:1f:ea:d9:60:63:d6:b1:d3:a2:5b:71:1d:
         1d:eb:e8:a3:67:61:85:d9:9a:2c:fb:07:35:9a:ea:98:fa:f6:
         76:9f:ce:7d:1e:a1:14:40:06:c5:57:4e:e9:2c:5a:c4:a3:e4:
         b9:2f:7e:26:39:98:86:4a:9d:fd:56:9c:35:68:eb:b6:7d:22:
         f8:37:67:66:9f:b3:a0:1c:88:18:9b:41:b1:37:c6:d8:b0:72:
         96:8f:d9:87:ad:fb:2c:e2:e7:cf:19:5b:1b:43:1d:4e:60:c0:
         22:c0:22:11:cd:2c:18:1a:b2:c7:4d:39:29:1e:3b:a1:d3:d0:
         0a:86:a5:76:79:69:20:7e:1c:ca:7b:a8:25:16:5b:12:a5:e4:
         71:a0:6d:ba:57:3a:69:f4:57:95:e1:c8:d7:a7:c2:0d:47:6c:
         87:95:c5:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBAhTHR+S5a99ILCIBimXg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMDIyZDY4ZGYwNjZhNzYxYTNiZTg2NDFhNzFiYjY5YzE1
ZTI3MmQwHhcNMjYwODI3MDAwMTA1WhcNMjYwODI4MDAwMTA1WjAzMTEwLwYDVQQD
EyhjNjVkOWMzYWQ0ZTcyMDU0NWI3OGNhZDk3MjA5MGVjYWFjM2VjZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63LZw9hKa+O6Om1sbT5lK++VIOBn
SclZGniQXRz9AJ5uHvE6usNnNqD/VZQeuGbAIPPbi793lqayx2x7kKP31BAE6W7X
pIlDhK+JYdRI3AR1cV5UmhHN2bYN2rcfcdtdLKXaObQvp+57Sp1GBAo5BEr2YkT3
LuRABm5sPhCftyhUropAtXAUiaTnVJ7kxln4XCAFN/G9+0PCFWv9AOa2GYr7dtrn
vweCm7x0jjtdOutNT9InfrOltguKD5bgFSIGztO6WYeTrc6Wbl68L4QSsAblPmE8
LZhfb2GQbUqunldZ7E8yErk46t8gUP6XTdHo5obrrMXc584Lo5NrweZw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZdnDrU5yBUW3jK2XIJDsqsPs9wMB8GA1UdIwQY
MBaAFO4CLWjfBmp2GjvoZBpxu2nBXictMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2dJdGFOOEdhbllhTy1oa0duRzdhY0ZlSnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9lYWU2YjQtNTY4Ny00ZTRhLTg0NWUt
NzQyZjdjODY4NWVkLzEvN2dJdGFOOEdhbllhTy1oa0duRzdhY0ZlSnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9lYWU2YjQtNTY4Ny00ZTRhLTg0NWUtNzQyZjdjODY4NWVk
LzEvN2dJdGFOOEdhbllhTy1oa0duRzdhY0ZlSnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfM9RNAV
4SSWoeU0JoalVpf+ac4B5Kq4TSZseAQfVA7Vxo8fiDm9NOP50iQnvVL/Pxq/h++E
QgtNWRhMRvWpatezRo2clQQDqehXiAZLo4uh5fgkRLgwxJ7fmv440+v/H+rZYGPW
sdOiW3EdHevoo2dhhdmaLPsHNZrqmPr2dp/OfR6hFEAGxVdO6SxaxKPkuS9+JjmY
hkqd/VacNWjrtn0i+DdnZp+zoByIGJtBsTfG2LBylo/Zh637LOLnzxlbG0MdTmDA
IsAiEc0sGBqyx005KR47odPQCoaldnlpIH4cynuoJRZbEqXkcaBtulc6afRXleHI
16fCDUdsh5XFdw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:46:45 2026 by rpki-client