Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File:                     67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier:          9Nng0vQ4bL348P+z8gDOBB5/Xw4y1sVxHclPoJx0MPk=
Subject key identifier:   7E:61:72:B0:6C:29:77:A8:8D:3B:3F:FF:A9:11:D6:4A:98:3E:40:13
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer:       /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial:       01A001A606DBBC57744EB456D05FAFFF9B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 19:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:52 +0000
Files and hashes:         1: 0KVhdWswKr_djyzc4q9eQ8kRLWI.roa (hash: EU0OR8kpxj0Z2H6F74ajzDLtwUVwT1ciE/qFvGVs0Rw=)
                          2: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: LG1LTUOU3ty7ZiDDfTMYzmqQCx7bijUevWhqI+CsQWg=)
                          3: whA7R8JHYB_rcFJRNTHcskelA6E.roa (hash: HG5G1IpzBPU5qry70Qtlk4SiqFVGwO8ZlSb7hfa+/Bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:06:db:bc:57:74:4e:b4:56:d0:5f:af:ff:9b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
        Validity
            Not Before: Aug 14 19:00:52 2026 GMT
            Not After : Aug 15 19:00:52 2026 GMT
        Subject: CN=7e6172b06c2977a88d3b3fffa911d64a983e4013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:13:90:12:37:8b:1c:85:f4:c4:95:7a:b8:
                    83:f3:92:86:3f:a9:3c:2b:e3:38:e3:87:66:9a:f8:
                    6c:40:88:7b:f7:7f:10:41:9b:5c:d6:1e:03:86:d2:
                    fb:62:50:1d:68:bf:80:e4:b7:94:91:c9:dd:85:ce:
                    88:2c:c0:e4:6c:c3:1a:3e:f1:d4:5c:a2:12:9c:af:
                    75:56:77:a6:b4:d4:3a:7f:b6:d3:4e:6e:19:90:bf:
                    19:a8:99:b3:1e:08:33:35:6e:ae:03:17:6a:5e:77:
                    da:c4:7a:92:c5:45:35:ee:1d:c4:85:6e:97:00:5a:
                    d8:48:45:ea:06:e5:34:6f:39:20:dd:a3:ce:4e:c5:
                    5a:b3:cf:cd:0e:b9:51:f3:ae:6c:f6:df:77:2f:01:
                    84:74:fe:1f:4f:4a:e0:05:4d:59:7d:40:d3:88:8a:
                    fe:a7:ff:74:9d:2a:95:01:88:cd:4b:d8:d5:a2:35:
                    8f:d6:30:10:33:03:1d:2b:3f:e5:b2:40:c6:2d:49:
                    c2:ab:7f:72:c6:a4:2d:db:80:54:c7:8b:f3:86:35:
                    dd:0a:95:c8:bf:13:e8:76:c5:a5:80:76:5d:1c:13:
                    4f:06:c0:ef:dc:81:40:09:1b:c4:0c:53:7d:fa:60:
                    58:c6:83:5f:c9:fd:e9:9b:7b:6d:12:d9:9d:97:a2:
                    08:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:61:72:B0:6C:29:77:A8:8D:3B:3F:FF:A9:11:D6:4A:98:3E:40:13
            X509v3 Authority Key Identifier:
                keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:4d:bd:54:eb:d3:27:df:33:ab:10:71:b1:14:6e:ad:3d:24:
         af:4e:47:70:52:d1:c0:2b:9b:b3:9c:d4:ba:a6:cb:fc:cb:51:
         7d:14:f5:8f:75:54:81:bd:30:6b:e2:b5:3f:2a:67:36:48:63:
         a8:ea:bc:21:b2:96:f2:4f:27:1e:d1:50:c4:4f:de:f4:5a:cf:
         e8:9b:37:c1:c5:0d:56:f6:c2:50:e6:79:f8:4a:d7:63:7e:a8:
         09:6b:7b:08:14:30:82:f8:dc:37:74:45:fa:14:b2:40:4a:d1:
         90:fa:19:2b:b4:78:9c:f0:61:83:a6:46:a2:e2:41:35:72:30:
         bd:e9:b2:1f:86:fd:18:ed:88:43:23:b5:1b:1e:5e:1b:b7:03:
         7a:5a:78:23:18:09:a8:96:cb:22:8f:73:6f:0e:28:13:a5:8d:
         b9:59:f6:55:8c:e6:9d:8b:39:df:a8:22:54:44:07:9d:28:dc:
         34:23:7c:e9:56:a6:a8:bb:c7:45:ac:95:18:b7:e4:60:24:28:
         be:64:1a:6d:88:ea:66:18:a8:fc:4b:30:f6:df:06:a6:6b:b8:
         db:98:f7:4b:01:75:b1:05:7b:8c:5a:a9:d6:56:19:72:b9:fa:
         96:b1:ad:3b:7d:8f:9b:ea:2b:c5:79:27:d9:3e:80:7e:7f:3e:
         2c:7f:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:18:32 2026 by rpki-client