Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
File:                     7W2oLbx9figY-WaAtm787bEIeUc.mft (raw, json)
Hash identifier:          EgpwHpee6e7bQvvLdN0q4A4MA+87RLinJyxrnRpQiTE=
Subject key identifier:   F9:37:FA:2D:9C:CC:72:B4:95:9D:40:4A:E4:63:71:55:C4:B6:12:2F
Authority key identifier: ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47
Certificate issuer:       /CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
Certificate serial:       019FFDFFE3DE387C66B1EAC6B53494D70B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
Manifest number:          1A14
Signing time:             Fri 14 Aug 2026 02:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 02:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 02:00:33 +0000
Files and hashes:         1: 7W2oLbx9figY-WaAtm787bEIeUc.crl (hash: IeOnyevj4dEbwxNERppCjb6rijtdpJniBx2LdLH/NQk=)
                          2: JsIYFyLR74GQysEIqnGykpSJQUI.roa (hash: iaHnb3OAMXTWsBgbEKrwhuTvCOgUBCodv1kDk+4mavA=)
                          3: NKy6Tyf5RyRglBk0yV_ExDPmxuo.roa (hash: ebb1VqS7aGDzvUXqYNWhDAqOkeGUT55XR6ggJqYbSMU=)
                          4: OUVdt4o2LS_i-Gunl0nnzrdW_jI.roa (hash: LG7q3NWzE4G2vBN3PTFInwdMW/gtEeHrNbl3IVaBPnE=)
                          5: YH5NKMifzBmhf3nIG20jcgRcBU0.roa (hash: V5cTAFBzO7CMX8CCIxzqRfhGsna670gP9hgi/NVqRBc=)
                          6: mCt7UGq2s1qnA69MYZljhYxWiD4.roa (hash: qi5pYWU2cgvvhT1J3aGpMqhq1J2xvA8Deh0/Hh6j/Rg=)
                          7: sRMtAiiTomuNQjvyhVAd07KYQM0.roa (hash: 1ZDSFc07GgvbF2RmQMqVaUItzv9tv/zTWoNdPvDIoXs=)
                          8: sjgUHUj_TSMku2aB-f61amSIyCM.roa (hash: /+JjugGAK765zafXtIVOVPtipqmOZ3WaKKGK25tgoO4=)
                          9: zhcr9I3s3OVNgzaih7vQHJr6C0Y.roa (hash: nLQ289DooRLgqJOtJaVgt01KECd6y0NdXrqka7CO4Ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:ff:e3:de:38:7c:66:b1:ea:c6:b5:34:94:d7:0b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da82dbc7d7e2818f96680b66efcedb1087947
        Validity
            Not Before: Aug 14 02:00:33 2026 GMT
            Not After : Aug 15 02:00:33 2026 GMT
        Subject: CN=f937fa2d9ccc72b4959d404ae4637155c4b6122f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:aa:1e:d3:a4:4e:31:2c:f1:3e:3f:05:31:
                    86:69:ad:45:4e:db:a4:4d:d8:09:94:29:c8:3e:55:
                    eb:b1:fc:bb:d3:81:19:ef:dc:1b:82:77:b5:17:f3:
                    25:84:7b:6b:01:4c:ba:9f:9d:48:b4:c9:66:86:8c:
                    10:cf:32:70:87:ef:40:ae:44:27:09:27:16:fa:ec:
                    d5:d0:b5:0e:0c:24:1b:1b:5c:ac:e9:57:90:d1:fb:
                    8c:f6:77:a7:ac:7e:f4:e1:5e:66:42:c2:a5:66:3f:
                    21:c7:05:9e:4e:fd:60:49:d3:e9:92:76:9a:2e:d9:
                    76:1c:61:50:cb:fd:1c:e2:9d:a8:0d:92:3e:dc:72:
                    84:95:39:ce:bb:62:f9:cb:9b:b5:80:92:83:4f:78:
                    50:10:66:a2:98:0e:c6:4a:28:ab:49:37:73:ea:84:
                    37:56:94:df:5d:ea:53:99:bc:bf:5c:51:59:1e:bf:
                    0f:d0:9d:bb:e2:bf:03:5a:fd:9a:a4:cf:d1:7e:02:
                    1e:78:4c:e8:f0:3d:bd:83:b3:8f:8a:a5:f2:ad:26:
                    df:18:09:6f:a3:28:93:84:9d:b2:0d:09:56:5e:fc:
                    93:a4:c6:9f:78:93:03:ea:bc:38:2c:96:5a:25:dd:
                    d1:b7:73:34:96:42:01:0b:94:4c:6b:6e:e5:88:1c:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:37:FA:2D:9C:CC:72:B4:95:9D:40:4A:E4:63:71:55:C4:B6:12:2F
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A8:2D:BC:7D:7E:28:18:F9:66:80:B6:6E:FC:ED:B1:08:79:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2oLbx9figY-WaAtm787bEIeUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3549fb-e3a3-4124-b3b0-59957787b015/1/7W2oLbx9figY-WaAtm787bEIeUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:a3:b9:c3:96:27:4a:1c:c9:67:19:8c:e8:3a:f5:bd:ec:
         5b:35:d8:04:39:45:a1:ab:29:b8:8e:a9:4d:8a:83:3d:f3:66:
         e2:2a:ac:1a:ea:74:53:d6:0d:8d:cc:58:5f:e0:61:3d:a9:73:
         d5:bf:70:29:04:b9:4d:9c:85:8a:a0:05:b0:6f:84:9a:a5:20:
         89:e1:d7:e1:b3:9c:a0:4e:51:d6:af:5c:5c:a0:3e:42:f4:de:
         43:0d:75:f4:42:e5:0a:94:8e:ae:f9:e0:b1:e0:83:b8:1f:6d:
         ed:9d:55:a8:23:95:b5:a1:ab:c8:56:50:b7:9f:5e:65:11:56:
         3c:d1:3e:2e:a3:03:45:0b:d6:d4:05:60:cb:00:a7:02:28:b8:
         7a:77:b0:84:cd:50:89:47:51:27:8f:93:23:c7:77:07:37:d1:
         0e:87:4c:2b:57:14:37:1a:f3:70:ad:1e:4b:f8:cf:86:c9:e2:
         43:39:59:3d:d7:81:df:9e:58:63:dd:56:a9:42:84:86:95:6b:
         78:6d:c8:f5:00:94:40:f2:d5:78:1e:aa:cd:47:5a:54:0d:32:
         95:37:76:00:f3:1b:c4:56:72:94:47:2f:aa:4f:44:41:62:ce:
         d0:58:3e:11:89:0b:03:c5:cc:bd:9b:c1:bf:3b:54:d1:66:6f:
         c9:7f:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 03:37:25 2026 by rpki-client