Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          Z/qpEksc3ZLTlODNuAyQH2LBMToW022+li6ZQiQOBOo=
Subject key identifier:   7E:A4:22:2C:83:9A:98:D9:0C:FE:F1:7C:49:44:B5:22:21:8D:D7:58
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       01A002B89093BA268F9D44B91215B5AC4C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1991
Signing time:             Sat 15 Aug 2026 00:00:45 +0000
Manifest this update:     Sat 15 Aug 2026 00:00:45 +0000
Manifest next update:     Sun 16 Aug 2026 00:00:45 +0000
Files and hashes:         1: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (hash: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s=)
                          2: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: 5H63Or18vsOAmjnIcGZlsiGAUTQg6t7Oo+s74do7O1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 00:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b8:90:93:ba:26:8f:9d:44:b9:12:15:b5:ac:4c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: Aug 15 00:00:45 2026 GMT
            Not After : Aug 16 00:00:45 2026 GMT
        Subject: CN=7ea4222c839a98d90cfef17c4944b522218dd758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a9:7f:d9:98:bd:86:de:1f:fe:26:5e:72:d9:
                    24:26:9f:b7:2f:8c:b1:61:c9:98:e8:81:ed:96:35:
                    d8:e1:ba:16:62:f4:57:54:b3:ad:90:c8:65:49:84:
                    8c:2b:5f:06:25:6b:04:40:98:1d:4d:aa:15:c9:96:
                    5b:24:84:70:f8:0e:fa:f3:47:e6:ec:b2:99:12:01:
                    3a:a1:fe:4f:2c:82:88:c6:63:d1:8d:bf:34:53:f8:
                    0b:04:ee:2c:2f:e9:65:aa:c1:ae:6c:e5:e7:7e:77:
                    c3:7a:59:b0:ba:1f:fb:fa:b0:86:02:47:74:b1:d4:
                    1d:17:c4:3e:5e:e9:ec:cb:9f:83:eb:ff:d3:8f:89:
                    bc:44:d7:1f:14:7f:f8:5a:33:33:a6:75:d5:c6:76:
                    1d:a5:61:e0:98:ba:b9:11:07:f9:9a:07:6e:dd:96:
                    75:4a:fd:82:12:05:34:f5:37:1b:82:74:92:38:e0:
                    b1:b7:26:39:5c:a8:19:3e:8d:e7:86:8f:ce:d8:3b:
                    5a:6a:d3:1d:48:db:8d:d9:c4:b2:da:d2:86:20:93:
                    2f:69:85:36:a5:6d:0a:5e:ec:63:e4:41:e8:ba:ef:
                    21:b6:60:d0:fe:b7:83:f6:bf:4b:72:ac:41:b3:3b:
                    1e:ab:ae:c2:d0:0e:ed:3d:ae:06:62:3d:75:fb:19:
                    aa:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A4:22:2C:83:9A:98:D9:0C:FE:F1:7C:49:44:B5:22:21:8D:D7:58
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:e2:38:50:5f:a0:89:05:10:73:20:37:6d:a0:80:48:31:17:
         18:6a:c1:92:dd:3f:64:ca:94:66:80:82:dd:ea:14:7a:44:24:
         c8:d9:63:fd:22:e9:b7:4a:9d:e9:ad:0b:6f:d9:35:2f:50:82:
         56:9f:68:8b:f5:27:2d:7a:81:53:8d:45:3d:8c:99:1a:8e:70:
         aa:43:fc:77:1c:fd:fe:b1:7b:b3:b3:60:6c:03:a1:53:73:18:
         6e:f5:d6:52:85:6a:10:97:14:75:75:a3:41:a3:7d:bd:d0:9e:
         6b:87:08:68:f1:d6:f9:3d:78:b2:0d:c9:26:60:a9:45:d4:6e:
         48:84:92:40:e2:47:79:e0:3d:5d:cd:dd:8b:b9:e7:42:bb:b1:
         89:c9:e7:01:9b:52:12:21:f0:0d:27:e2:50:f0:d0:ed:0c:0c:
         70:9c:b0:66:a7:47:9e:f3:d3:b8:86:6f:4f:46:d9:4b:af:2b:
         94:8f:e9:70:21:3d:bc:54:a9:4f:64:70:65:9b:06:1e:27:f7:
         67:29:50:4e:eb:a1:08:f2:7f:69:7c:2e:dd:d4:f5:fc:18:e1:
         8f:a1:4c:80:81:f4:51:e3:d6:1e:7f:42:54:fd:5c:58:0f:d3:
         b0:10:6f:dc:bf:05:82:86:20:a6:27:20:3e:b3:14:9b:4a:27:
         f5:c8:47:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:29 2026 by rpki-client