Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
File:                     EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft (raw, json)
Hash identifier:          /64YElF/EEsMAwl/vpec3eM/PAdnVhTlp3Inl27wtpc=
Subject key identifier:   BF:1C:AB:6F:EE:27:0B:D6:DA:74:6A:F5:9D:76:92:34:79:5E:7D:E7
Authority key identifier: 12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C
Certificate issuer:       /CN=1215b5ad462bc494c4324931cdf4301cda01f80c
Certificate serial:       01A0017010AC3AA7235AF4FB6E7FFB62AE77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:56 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:56 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:56 +0000
Files and hashes:         1: EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl (hash: qsXh6l68iuUiDFY4290UwQvUzLzsxYcv6bIx0TAU+HM=)
                          2: QSDL9aVFEsgN1pmAwftAE68ZkLE.roa (hash: 9l+ETcbI4z1a4gUBvTyDHkfAhvOVwGBe6uOyh4bKOpA=)
                          3: SfPsnTAjEz7s0IJwXQXEqowgAgg.roa (hash: 2beiFCnRQDFsR7VsCIm5A7EYCFJ0xA+jfhamHFduadg=)
                          4: cB_m9up9hazlPAM7xwJmzGz_w9k.roa (hash: SLDL/2B9grLRt23aK3KXLfe0T0kdFf+HkoVMaYlOQZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:10:ac:3a:a7:23:5a:f4:fb:6e:7f:fb:62:ae:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1215b5ad462bc494c4324931cdf4301cda01f80c
        Validity
            Not Before: Aug 14 18:01:56 2026 GMT
            Not After : Aug 15 18:01:56 2026 GMT
        Subject: CN=bf1cab6fee270bd6da746af59d769234795e7de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:0d:8b:a0:b4:c7:6d:ff:db:33:08:fb:3f:
                    a9:d8:86:57:32:28:7a:f0:55:e4:fc:22:30:be:44:
                    e7:39:ed:f4:70:f9:d1:14:15:07:b5:33:9d:4a:a0:
                    ef:a1:90:fd:b3:af:18:24:a3:cf:42:1b:2c:1c:0b:
                    bb:d6:18:61:5d:63:39:3a:e8:b6:36:d4:0b:33:2a:
                    49:d3:98:cb:6f:73:74:0e:2e:fd:f1:fa:3a:f0:35:
                    30:bf:0a:05:8c:e6:29:05:0a:0d:e9:7d:62:a2:17:
                    aa:97:e1:b8:c7:3e:22:9d:e5:6c:5c:96:93:43:33:
                    d7:2d:a0:c0:5d:f8:cd:17:1e:c9:c0:16:79:bb:49:
                    a7:0d:0c:9e:e3:c9:47:35:4d:33:a5:52:c3:01:8e:
                    10:31:25:9a:d9:eb:13:51:5a:e4:74:d3:0c:ae:8d:
                    6e:b0:50:c1:3a:19:55:5f:a1:99:71:e3:da:1a:b3:
                    cf:d0:2e:84:23:74:ed:54:93:d3:7f:a6:10:e8:a9:
                    41:5e:fb:05:a6:31:6f:d0:cf:47:4b:d0:78:43:82:
                    ae:a7:f8:f2:59:63:aa:90:ca:96:53:12:ee:18:9d:
                    50:c8:00:c3:e1:1c:b5:6e:2f:a2:cc:54:d0:08:1d:
                    44:4e:46:be:fb:47:a1:8c:a5:ef:2e:f6:7c:31:a7:
                    20:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1C:AB:6F:EE:27:0B:D6:DA:74:6A:F5:9D:76:92:34:79:5E:7D:E7
            X509v3 Authority Key Identifier:
                keyid:12:15:B5:AD:46:2B:C4:94:C4:32:49:31:CD:F4:30:1C:DA:01:F8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/EhW1rUYrxJTEMkkxzfQwHNoB-Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a1:1e:18:3e:ef:dd:02:42:8d:cf:84:ee:4f:9a:ad:12:5e:
         87:05:65:90:b4:af:53:46:44:42:e7:97:a6:31:45:ca:9e:c4:
         b0:f7:3e:13:cc:82:5a:23:94:36:89:48:9d:e0:af:68:83:02:
         4f:55:69:93:ee:fb:6d:8d:64:4d:1f:f0:1f:93:50:6c:59:22:
         c5:4f:05:fa:79:81:1f:50:be:ef:23:ce:44:1d:d5:24:60:cd:
         94:78:19:76:21:9e:32:91:1c:fe:05:b7:8e:11:04:aa:77:e8:
         c3:16:e6:fa:40:62:a8:23:da:5e:aa:4b:e3:f9:52:87:85:40:
         37:b9:5c:40:eb:f9:7c:00:b9:a2:8e:aa:3d:69:50:c4:f2:0b:
         05:de:a6:a3:58:43:0d:52:0c:3c:35:24:e2:e2:0f:8e:20:b9:
         f0:39:53:c2:f1:0e:15:de:71:fe:e9:6f:03:62:bd:09:dc:45:
         4e:14:bf:fe:f7:1a:b4:08:55:cd:c9:c1:3d:bb:f4:d6:02:f2:
         7e:bb:9b:59:fb:f3:b1:9a:7e:85:b2:65:3c:b5:15:43:ae:5f:
         7e:3a:98:05:53:64:e1:61:b2:99:6c:45:a4:e3:d2:55:c8:fc:
         ec:fb:9b:b2:0b:4b:69:88:08:28:9d:26:c0:47:e9:e2:f4:44:
         0a:38:fe:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABcBCsOqcjWvT7bn/7Yq53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMTViNWFkNDYyYmM0OTRjNDMyNDkzMWNkZjQzMDFjZGEw
MWY4MGMwHhcNMjYwODE0MTgwMTU2WhcNMjYwODE1MTgwMTU2WjAzMTEwLwYDVQQD
EyhiZjFjYWI2ZmVlMjcwYmQ2ZGE3NDZhZjU5ZDc2OTIzNDc5NWU3ZGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE4Ni6C0x23/2zMI+z+p2IZXMih6
8FXk/CIwvkTnOe30cPnRFBUHtTOdSqDvoZD9s68YJKPPQhssHAu71hhhXWM5Oui2
NtQLMypJ05jLb3N0Di798fo68DUwvwoFjOYpBQoN6X1ioheql+G4xz4ineVsXJaT
QzPXLaDAXfjNFx7JwBZ5u0mnDQye48lHNU0zpVLDAY4QMSWa2esTUVrkdNMMro1u
sFDBOhlVX6GZcePaGrPP0C6EI3TtVJPTf6YQ6KlBXvsFpjFv0M9HS9B4Q4Kup/jy
WWOqkMqWUxLuGJ1QyADD4Ry1bi+izFTQCB1ETka++0ehjKXvLvZ8Macg0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8cq2/uJwvW2nRq9Z12kjR5Xn3nMB8GA1UdIwQY
MBaAFBIVta1GK8SUxDJJMc30MBzaAfgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRWhXMXJVWXJ4SlRFTWtreHpmUXdITm9CLUF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKEeGD7v
3QJCjc+E7k+arRJehwVlkLSvU0ZEQueXpjFFyp7EsPc+E8yCWiOUNolIneCvaIMC
T1Vpk+77bY1kTR/wH5NQbFkixU8F+nmBH1C+7yPORB3VJGDNlHgZdiGeMpEc/gW3
jhEEqnfowxbm+kBiqCPaXqpL4/lSh4VAN7lcQOv5fAC5oo6qPWlQxPILBd6mo1hD
DVIMPDUk4uIPjiC58DlTwvEOFd5x/ulvA2K9CdxFThS//vcatAhVzcnBPbv01gLy
frubWfvzsZp+hbJlPLUVQ65ffjqYBVNk4WGymWxFpOPSVcj87PubsgtLaYgIKJ0m
wEfp4vRECjj+6A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:29 2026 by rpki-client