Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
File:                     7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft (raw, json)
Hash identifier:          gTB2AeIMXuJyDVm44Y0B5OiC7PyUxX9P7RTBRPB/qCs=
Subject key identifier:   FA:26:31:BC:A7:B3:4C:E8:C0:62:94:BD:3F:18:B7:99:09:90:45:4E
Authority key identifier: EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3
Certificate issuer:       /CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
Certificate serial:       01A020C35BF58D30CDA26EB7103E05EF1FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
Manifest number:          8C
Signing time:             Thu 20 Aug 2026 20:01:08 +0000
Manifest this update:     Thu 20 Aug 2026 20:01:08 +0000
Manifest next update:     Fri 21 Aug 2026 20:01:08 +0000
Files and hashes:         1: 2Zslfn__QIhx6OX48_NKfIqrzSc.roa (hash: VYnOK+rc+xOxyoEFqSm+yquuiXcM9YH3Y4gu3Gh6hXg=)
                          2: 7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl (hash: 5jbra88D+kv1VScWSVjF7qEaysAVQlhP+0tJt1ur5CI=)
                          3: U_aK72jJa-ON6gMyyHq3rWjkxhU.roa (hash: /1YQ5iJbTHBFdQHsTl7LBGFueR1LkqoE0aary4QG3rs=)
                          4: afRxnYS9xX0pCvGVtIiS73I1z44.roa (hash: 3LuTMNKBz2sfRa7X5G714MtGThF0TEEgGy5wQUhxdjE=)
                          5: vRS2jZFjxoSx-tm8vDYCL3R4utg.roa (hash: Pn3uKydeyTx0VUXK/a6rHQd1kChS2y8vCNb98B0FpoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:c3:5b:f5:8d:30:cd:a2:6e:b7:10:3e:05:ef:1f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee82a3e92c0964a26c0c091a0f15d2dd95f481b3
        Validity
            Not Before: Aug 20 20:01:08 2026 GMT
            Not After : Aug 21 20:01:08 2026 GMT
        Subject: CN=fa2631bca7b34ce8c06294bd3f18b7990990454e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:27:c8:82:98:da:97:d0:7a:88:ae:12:4e:
                    07:74:70:61:49:9e:2e:93:da:80:62:8f:31:17:88:
                    18:90:92:d4:3a:5f:27:a5:f7:58:6b:8a:0c:16:3c:
                    9a:98:15:c2:ce:86:40:82:96:3a:8c:47:d0:42:40:
                    dd:93:96:48:41:65:5f:2e:71:64:3b:be:c2:c2:00:
                    f1:fd:5d:07:ef:bc:fc:33:b5:15:ea:1d:e5:e6:69:
                    25:a1:0c:98:eb:34:22:27:c3:5d:1b:de:a0:1b:58:
                    9f:75:a3:63:d1:d3:77:db:f9:dd:a6:ba:9a:47:3c:
                    92:7e:ef:76:e1:9b:10:3a:76:95:27:5b:7a:63:02:
                    f8:ba:20:a1:c5:5b:ee:3d:8f:f1:91:ce:65:e5:18:
                    4c:f3:f0:f0:c3:45:2d:a1:55:31:78:18:68:3d:3d:
                    53:b6:03:1a:72:c2:82:c4:a6:fe:25:4c:6b:ff:04:
                    3e:e4:50:ec:ee:ea:c1:ff:71:0b:db:5d:86:c6:9f:
                    0d:72:ea:f6:29:83:f3:ae:f1:34:e8:52:ac:f4:a4:
                    c2:36:05:e9:c0:a4:ce:c0:52:0f:e6:c4:c4:90:0f:
                    ef:9a:8d:b0:fa:8b:41:1e:37:42:04:a8:36:1d:4d:
                    2f:f1:42:8d:cc:11:7c:31:68:d8:b2:fe:ea:a7:e8:
                    c2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:31:BC:A7:B3:4C:E8:C0:62:94:BD:3F:18:B7:99:09:90:45:4E
            X509v3 Authority Key Identifier:
                keyid:EE:82:A3:E9:2C:09:64:A2:6C:0C:09:1A:0F:15:D2:DD:95:F4:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/7oKj6SwJZKJsDAkaDxXS3ZX0gbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:14:f7:ac:be:a8:13:8b:9d:7a:a4:c8:33:b2:be:0b:39:fd:
         10:c6:5c:4b:5d:4f:8b:df:a1:52:d0:86:9f:92:11:df:22:af:
         71:8e:91:0b:d8:ee:75:8e:57:80:d6:fe:b0:06:2c:5b:4c:1c:
         d8:ae:25:52:a5:e6:b2:53:eb:1b:60:63:37:4c:a4:98:c5:fe:
         9a:f5:b2:ad:4c:e2:b6:ea:28:16:9b:d9:25:8d:67:49:e8:09:
         0e:c9:86:4c:05:3c:b6:c7:57:65:be:0c:93:4f:1d:9c:99:cd:
         d5:84:55:53:39:db:a7:7e:3b:4b:c5:e9:2e:9a:a7:1b:3b:3d:
         0c:79:c3:46:68:26:04:c9:d7:53:eb:0a:3f:ca:c3:24:1c:33:
         ab:49:d0:5c:aa:9f:b5:6e:9f:cc:6e:1e:18:a4:93:b2:c8:73:
         14:28:20:65:73:61:f7:2b:27:a8:9c:6a:a9:7d:99:31:92:a8:
         67:22:32:5c:05:c2:ce:17:89:23:5e:7e:1a:2d:07:33:41:45:
         23:5d:93:ff:38:59:ab:1a:90:8c:38:5e:b0:da:94:11:ec:d3:
         95:69:45:75:b4:f6:b0:f1:c2:3b:d8:f5:70:94:73:68:3f:fd:
         f1:77:61:6b:19:5c:91:d6:c9:28:da:b4:31:a9:cc:74:64:6a:
         83:bb:6b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:28 2026 by rpki-client