Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File:                     I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier:          IpUchea5OmjezRP4UyxmtEQzzGvbIGKepJ6BR0zbZJY=
Subject key identifier:   D6:2C:C0:21:92:F4:EB:80:F7:DC:3F:64:D3:59:71:B9:0F:77:99:B7
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer:       /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial:       01A00281B70B62B9EE5E2220FC4F1387F0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number:          1A07
Signing time:             Fri 14 Aug 2026 23:00:50 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:50 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:50 +0000
Files and hashes:         1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: oZvfbxbwT1cLoCaHS7Q2QySZ+p7wgGjrjubJEPkY3vg=)
                          2: YV5YbyzQ4v-R-M9sTv2X0MLou60.roa (hash: Wnl73KWmj3QlZUmHv6GR1P0QHj68SNwwAwR9VDBTafI=)
                          3: _IN-lUbsVoIujOIBhlqniYDIAj4.roa (hash: OVNWFTAvftStnpg3u2YMXcX4JyBnzVvFH9bIqxUH8FU=)
                          4: b0HKN9ab1P1Sr3YvvuEwkf7syng.roa (hash: 9hsVaqxhAVdgsjntPxtz6LrMJOjEjADE4hMXgvvmdoo=)
                          5: t_VAikl6AuDV7KY1lJg71qWe6PI.roa (hash: 5EWDR0oT5pCzdNuqq4gxPs1dK+scKpifLsg8E3R3q10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:b7:0b:62:b9:ee:5e:22:20:fc:4f:13:87:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
        Validity
            Not Before: Aug 14 23:00:50 2026 GMT
            Not After : Aug 15 23:00:50 2026 GMT
        Subject: CN=d62cc02192f4eb80f7dc3f64d35971b90f7799b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:81:76:e4:d1:ea:5a:04:29:d6:36:e0:04:
                    dc:05:ef:e4:b4:10:78:a7:21:5d:2e:3d:ce:fd:b1:
                    98:3b:8d:8d:81:b6:38:82:ea:2f:60:22:d3:b9:35:
                    36:26:0c:2c:de:36:07:d6:9b:5c:10:fd:fd:33:48:
                    59:5c:25:a9:9d:25:8f:29:5a:9d:2b:a5:ca:f4:48:
                    63:f2:c2:e6:cd:42:22:df:ca:70:a1:c9:ec:a0:c6:
                    ce:14:d6:69:c7:24:75:b7:87:29:06:ad:95:e4:fe:
                    b2:b9:41:ab:e5:97:c9:33:92:1a:bb:e7:38:8b:2e:
                    42:26:1d:63:31:81:1a:88:ed:b5:2e:91:d3:94:c3:
                    b8:df:2c:98:69:d5:c0:94:36:15:d3:de:54:54:cd:
                    2e:a0:e3:86:32:f1:68:38:71:90:72:8c:0c:be:52:
                    76:17:7a:2a:58:77:da:7d:8e:a3:0b:a1:33:19:00:
                    f3:e1:ba:93:2d:e3:ca:43:65:f6:d4:a5:5b:1f:ca:
                    c0:ad:87:89:40:bc:11:ef:ed:db:26:37:8b:25:69:
                    d4:f8:06:fe:d3:94:72:c9:a9:f4:61:24:cc:1e:a8:
                    b2:b1:ac:d3:44:f5:b4:87:83:3f:8f:d9:3d:55:52:
                    ae:52:37:bb:b8:38:b5:2e:47:94:64:02:17:e2:c9:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:2C:C0:21:92:F4:EB:80:F7:DC:3F:64:D3:59:71:B9:0F:77:99:B7
            X509v3 Authority Key Identifier:
                keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:32:ca:21:77:bb:6f:48:b8:ac:50:08:15:c1:f5:70:64:d0:
         6f:9d:11:f4:bd:a1:d1:38:de:e3:ed:fd:64:43:b6:21:32:44:
         08:2a:f6:7f:1e:2e:eb:92:b3:1a:9c:3a:58:be:ad:7f:4b:ca:
         2a:71:c2:b3:fd:79:20:c1:b3:6e:be:36:2d:95:cd:58:a1:ca:
         ba:4d:a0:dd:1f:f8:b1:43:cf:9e:49:b5:d6:9f:17:16:27:68:
         ae:b7:ac:a6:46:ff:fb:9c:2e:f3:8e:38:bf:ac:ca:83:20:06:
         7d:53:cc:6c:71:0a:89:c1:15:95:6d:52:90:36:db:90:e1:06:
         45:21:85:02:c4:ec:88:1f:87:89:fa:5c:90:e0:cb:c3:53:21:
         ad:9d:8b:6f:c4:e0:b4:5e:26:f9:0b:20:48:bf:2e:28:8b:21:
         2c:5b:87:93:89:e5:ce:ee:45:73:44:d6:21:db:dd:f4:4f:08:
         ba:76:8b:4d:c3:e7:3c:b2:15:d4:4d:6c:86:21:60:23:20:bd:
         f5:7d:98:41:eb:12:60:bb:5e:e0:18:7e:88:81:92:de:c0:a7:
         e4:26:cb:42:6f:be:71:2a:6e:d9:0c:e1:b5:fa:e5:88:8e:55:
         4a:dd:48:46:84:26:da:16:d9:15:86:e5:09:01:c4:57:d2:3b:
         81:0f:ee:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:16:52 2026 by rpki-client