Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
File:                     elsD4kg77RNDh7_DBHoTmJ_epB8.mft (raw, json)
Hash identifier:          OQ1T2n+Y1W5tDjbjEv1sNksVmTK9xdtt6AcwEuZ7P/o=
Subject key identifier:   3B:D1:5A:B5:0D:E8:79:98:C2:F0:64:20:A6:09:80:75:A5:BD:BC:24
Authority key identifier: 7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F
Certificate issuer:       /CN=7a5b03e2483bed134387bfc3047a13989fdea41f
Certificate serial:       019FDA990460D7DB30E3E086DBC51DADE654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
Manifest number:          0A45
Signing time:             Fri 07 Aug 2026 05:01:28 +0000
Manifest this update:     Fri 07 Aug 2026 05:01:28 +0000
Manifest next update:     Sat 08 Aug 2026 05:01:28 +0000
Files and hashes:         1: 1jLJCus46gm-AStfLL9q2M5Ho3g.roa (hash: XrU3m/+eSwJdl/VMMh61KI+6fAsJ3/LwxcvviYIdgKo=)
                          2: QdrNcN-oAM5Z8NA93nywrdwjlpY.roa (hash: dR7J85RI6taLvzWRGM0v5+kdTnGBa4MyfOc9jNOLw3w=)
                          3: elsD4kg77RNDh7_DBHoTmJ_epB8.crl (hash: a95Zc5ZrOxFNLMiecVA0sTZhIcAekOeX2v3aZdlunVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 05:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:da:99:04:60:d7:db:30:e3:e0:86:db:c5:1d:ad:e6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a5b03e2483bed134387bfc3047a13989fdea41f
        Validity
            Not Before: Aug  7 05:01:28 2026 GMT
            Not After : Aug  8 05:01:28 2026 GMT
        Subject: CN=3bd15ab50de87998c2f06420a6098075a5bdbc24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:cb:01:17:8a:26:b5:b7:83:69:47:69:c7:
                    80:50:65:62:1c:e4:1c:13:26:c3:3c:c3:46:c7:8c:
                    1e:82:ac:dd:a4:3b:94:ae:66:f8:60:f6:be:17:13:
                    59:19:31:29:ba:95:98:70:1b:17:6c:23:5a:a8:84:
                    43:bc:40:f3:a9:49:c1:5f:7d:19:a4:16:c4:24:82:
                    58:6d:c5:83:13:55:be:fd:85:01:fa:b6:c9:3d:5b:
                    0c:11:c5:47:2a:a1:c2:85:3c:89:b8:e0:03:5b:5b:
                    93:06:1e:39:50:4b:f8:36:c7:5b:5b:af:34:b5:c3:
                    f4:07:01:a3:0f:b1:6e:48:fe:5e:6d:8a:f2:d7:d8:
                    43:75:95:8f:c4:c9:e7:d2:f1:99:39:5f:3c:ee:67:
                    c2:1d:67:e7:d4:db:14:da:e2:92:5a:4d:d7:a1:37:
                    ee:00:af:0c:6a:c5:e6:9f:3e:29:84:86:58:a3:8d:
                    61:14:c2:ae:14:22:44:82:9f:4d:c9:2b:43:a9:68:
                    7d:33:86:22:6a:cf:70:2e:13:29:87:c0:25:99:b6:
                    96:ae:fd:4f:a6:a3:2d:f6:4a:97:14:0e:36:04:c0:
                    fb:b6:28:58:c4:8a:c0:81:74:07:69:9b:17:6b:c3:
                    07:49:84:a8:28:e8:2a:5f:aa:d9:00:5e:be:d0:41:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D1:5A:B5:0D:E8:79:98:C2:F0:64:20:A6:09:80:75:A5:BD:BC:24
            X509v3 Authority Key Identifier:
                keyid:7A:5B:03:E2:48:3B:ED:13:43:87:BF:C3:04:7A:13:98:9F:DE:A4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elsD4kg77RNDh7_DBHoTmJ_epB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3d1760-e4e6-4667-a54c-71e561cb78e9/1/elsD4kg77RNDh7_DBHoTmJ_epB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:34:db:d9:98:2e:a5:16:91:99:6d:49:ec:2f:91:7d:7f:ae:
         e1:7d:ac:43:21:36:53:fe:40:47:a5:0b:5f:ea:68:b6:ae:83:
         12:12:84:ac:86:06:e4:bd:7d:8a:83:dc:bb:92:65:26:ac:f6:
         61:12:2a:9d:70:fb:9e:15:43:85:7a:79:d7:4d:58:92:d7:81:
         08:79:dc:73:aa:ce:6c:ef:23:17:d5:c0:6b:cb:70:ca:9b:72:
         57:93:c8:ed:7e:47:b1:e3:8f:8c:44:cf:4f:04:b8:b1:a4:4c:
         e6:ad:84:95:6b:9b:04:ae:f7:c1:06:e8:93:b7:84:af:d7:4b:
         fc:7c:4c:b7:79:04:8b:80:0a:41:b7:7e:1a:7f:ac:bb:04:b9:
         75:01:00:6d:d6:66:c9:33:81:b2:96:23:8c:57:9f:2a:36:c7:
         20:e1:fb:56:8f:9b:2c:b7:83:26:ef:75:23:07:a0:27:fb:29:
         00:7b:45:88:0c:20:f6:bd:6a:1c:75:d8:23:9c:9e:dd:c0:a9:
         89:b9:7d:c7:14:01:a8:45:25:6f:e9:c7:45:04:0f:c8:ea:5d:
         a9:bf:10:11:29:41:58:68:5a:9b:a8:fc:eb:aa:1d:26:c8:8c:
         9a:5f:ce:4b:e9:40:8a:1a:2b:63:9a:af:25:f4:d8:fc:ec:c2:
         69:57:9e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/amQRg19sw4+CG28UdreZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNWIwM2UyNDgzYmVkMTM0Mzg3YmZjMzA0N2ExMzk4OWZk
ZWE0MWYwHhcNMjYwODA3MDUwMTI4WhcNMjYwODA4MDUwMTI4WjAzMTEwLwYDVQQD
EygzYmQxNWFiNTBkZTg3OTk4YzJmMDY0MjBhNjA5ODA3NWE1YmRiYzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/LAReKJrW3g2lHaceAUGViHOQc
EybDPMNGx4wegqzdpDuUrmb4YPa+FxNZGTEpupWYcBsXbCNaqIRDvEDzqUnBX30Z
pBbEJIJYbcWDE1W+/YUB+rbJPVsMEcVHKqHChTyJuOADW1uTBh45UEv4NsdbW680
tcP0BwGjD7FuSP5ebYry19hDdZWPxMnn0vGZOV887mfCHWfn1NsU2uKSWk3XoTfu
AK8MasXmnz4phIZYo41hFMKuFCJEgp9NyStDqWh9M4Yias9wLhMph8AlmbaWrv1P
pqMt9kqXFA42BMD7tihYxIrAgXQHaZsXa8MHSYSoKOgqX6rZAF6+0EH1EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvRWrUN6HmYwvBkIKYJgHWlvbwkMB8GA1UdIwQY
MBaAFHpbA+JIO+0TQ4e/wwR6E5if3qQfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMt
NzFlNTYxY2I3OGU5LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zZDE3NjAtZTRlNi00NjY3LWE1NGMtNzFlNTYxY2I3OGU5
LzEvZWxzRDRrZzc3Uk5EaDdfREJIb1RtSl9lcEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAzTb2Zgu
pRaRmW1J7C+RfX+u4X2sQyE2U/5AR6ULX+potq6DEhKErIYG5L19ioPcu5JlJqz2
YRIqnXD7nhVDhXp5101YkteBCHncc6rObO8jF9XAa8twyptyV5PI7X5HseOPjETP
TwS4saRM5q2ElWubBK73wQbok7eEr9dL/HxMt3kEi4AKQbd+Gn+suwS5dQEAbdZm
yTOBspYjjFefKjbHIOH7Vo+bLLeDJu91IwegJ/spAHtFiAwg9r1qHHXYI5ye3cCp
ibl9xxQBqEUlb+nHRQQPyOpdqb8QESlBWGham6j866odJsiMml/OS+lAihorY5qv
JfTY/OzCaVeeqg==
-----END CERTIFICATE-----
Generated at Fri Aug 7 08:41:46 2026 by rpki-client