Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          7cPXDZottErhzuysXhWh8AETyr7BJ8WpttjUuiwpXpE=
Subject key identifier:   66:89:EF:90:E1:16:8F:3F:9C:86:0C:DF:93:FC:98:94:15:7C:7D:23
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       019FDB3DE7F28BD33856446F0DF1AF9AA059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0F45
Signing time:             Fri 07 Aug 2026 08:01:34 +0000
Manifest this update:     Fri 07 Aug 2026 08:01:34 +0000
Manifest next update:     Sat 08 Aug 2026 08:01:34 +0000
Files and hashes:         1: 28zXLFeRXoHKQibLR_FN7To5SA4.roa (hash: 0h5lbt3CG3w27XHBcRA+PH1NQ7TLUhzbv0Xa/y3+zNw=)
                          2: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: KswUzZKqzWtA8LWOjqSLENNpowSFEL2mczd6lznFvUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:db:3d:e7:f2:8b:d3:38:56:44:6f:0d:f1:af:9a:a0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: Aug  7 08:01:34 2026 GMT
            Not After : Aug  8 08:01:34 2026 GMT
        Subject: CN=6689ef90e1168f3f9c860cdf93fc9894157c7d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:76:73:d0:49:ad:a6:e0:64:59:79:9f:4f:51:
                    ff:b7:83:02:9b:06:dc:4e:03:f3:5c:22:71:6b:10:
                    6d:e6:92:a0:2b:8c:06:c7:85:17:3c:30:8a:c0:b3:
                    7d:bd:c1:9e:16:e5:59:b0:f9:5f:6c:b1:6c:b5:09:
                    82:80:2d:59:fd:2b:d0:21:a0:00:0c:d3:d1:7c:02:
                    b8:ba:66:98:88:3f:10:83:13:8d:d1:dc:36:98:29:
                    4c:8a:10:e1:70:66:58:e2:0c:fb:b0:d2:cd:53:a2:
                    52:a7:82:69:d7:45:2d:6c:00:57:03:b7:f5:11:15:
                    85:c9:87:c1:61:c7:fc:7f:cc:e7:7c:d9:f8:34:66:
                    d3:4d:26:be:c8:ac:78:da:de:15:d3:f4:9d:b2:db:
                    69:16:1e:9f:83:e9:f3:4c:4c:5a:16:34:55:32:c9:
                    3c:33:e6:ba:f0:87:67:c8:d9:d0:fd:13:30:2d:33:
                    e8:59:4e:9d:3e:75:0c:11:5d:c1:c8:e5:4f:4b:5f:
                    e6:02:9c:4e:b2:8c:66:89:18:a8:94:5c:ca:a3:52:
                    e2:eb:7c:69:46:1f:9a:c5:b4:10:16:fb:df:99:9b:
                    07:df:f1:fe:b0:24:80:9a:39:48:87:bd:6f:66:b1:
                    fe:92:52:ff:f7:b7:40:47:4e:21:e4:03:62:0f:ac:
                    29:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:89:EF:90:E1:16:8F:3F:9C:86:0C:DF:93:FC:98:94:15:7C:7D:23
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:8d:e0:42:07:3a:1f:ad:72:bb:b8:75:55:c5:8a:3d:8b:
         c7:68:20:ef:3c:65:d1:f6:7d:0a:b6:11:b0:e6:6f:a0:69:09:
         ba:12:ed:fe:8e:4b:1a:c0:74:1c:9b:c7:31:f1:31:e3:88:18:
         c3:d0:68:a1:25:1b:d4:5b:6a:31:b1:de:df:4c:0b:f1:05:19:
         c5:8c:f2:4f:04:23:8d:d4:06:91:8f:ae:4b:d7:2b:07:c9:6d:
         ae:93:ad:ae:f5:cb:40:8b:b6:c0:ec:6b:c3:31:55:c3:f0:70:
         69:04:34:ce:9f:1c:53:dc:46:93:cf:67:e5:03:a2:ff:86:32:
         ae:a5:5a:a6:e2:28:cd:d7:f7:ce:47:bf:a9:e4:71:6e:13:ec:
         b5:0d:5e:6b:41:4e:26:df:4f:f3:60:31:0c:19:a5:1d:2d:bb:
         20:e6:7f:c8:95:0d:56:c4:2c:0f:79:62:46:06:1b:cc:79:d4:
         04:08:e2:7d:c8:2f:2c:74:c7:2e:74:20:8e:1f:3d:45:db:5b:
         18:94:31:3a:52:3a:bf:be:b1:20:7c:4e:b4:6a:eb:66:0e:88:
         8c:c8:b0:26:15:ea:51:f9:47:21:d6:5f:85:e1:64:f5:43:ac:
         74:5b:48:8b:a5:6c:ce:04:13:ca:0c:34:3b:a0:9d:f5:76:e7:
         ef:5c:7a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 11:39:28 2026 by rpki-client