Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
File:                     EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft (raw, json)
Hash identifier:          vofW3h1gDMtQ1DSREVe3CwEvHdRX61fGLMd5nrVPwE8=
Subject key identifier:   07:97:52:1B:E2:8B:D0:FB:28:80:03:19:F2:5D:6A:48:7D:13:CC:D4
Authority key identifier: 12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF
Certificate issuer:       /CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
Certificate serial:       01A002F070BD7CA0B38690691AC66F3D0C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
Manifest number:          19FF
Signing time:             Sat 15 Aug 2026 01:01:46 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:46 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:46 +0000
Files and hashes:         1: 4HH9zRXt6jgp28sGXm07XuPDRMc.roa (hash: FNyw5fp1M2JkVAkPuohA+aXKSHGMRk2b+kZbdRtLBdk=)
                          2: EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl (hash: BRsHeKddwEzNY8Z2fNUBf2begt+eIhpY6jNqfIVbvIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:f0:70:bd:7c:a0:b3:86:90:69:1a:c6:6f:3d:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=123ad9e6ce2651d95ad18656ecbb93536189faaf
        Validity
            Not Before: Aug 15 01:01:46 2026 GMT
            Not After : Aug 16 01:01:46 2026 GMT
        Subject: CN=0797521be28bd0fb28800319f25d6a487d13ccd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:67:d9:a6:25:8c:a9:01:66:24:99:3b:a9:c6:
                    47:0e:f5:13:06:c4:67:3f:58:62:4c:34:29:ee:01:
                    35:dd:9c:3b:cb:02:a6:20:00:28:35:c8:69:4d:39:
                    fd:b6:0b:90:46:e8:e5:b5:ed:5b:b8:47:ec:39:3a:
                    9b:e7:00:b5:93:c9:8c:ce:05:02:dd:fc:32:b2:ae:
                    53:42:89:0f:b1:65:c8:b3:a5:d8:7d:6b:5e:d1:28:
                    2d:27:bd:f8:4d:be:59:2b:93:a1:e3:a6:f0:6f:46:
                    7f:65:aa:74:4f:3d:38:a2:99:35:37:9b:21:3c:e9:
                    e4:ec:43:82:cc:fb:19:38:ce:86:d9:84:c8:13:6f:
                    e0:d8:3f:ef:11:d0:1d:19:dd:2f:0e:a1:4b:7f:f0:
                    57:09:57:cc:94:9a:a0:b4:32:01:f3:ce:ee:ea:8d:
                    10:11:d9:ae:94:f1:39:6c:4a:bc:15:7a:4b:7a:6b:
                    65:79:f9:c4:64:7d:ea:c8:c4:1c:f9:81:62:10:4d:
                    ba:7a:10:c4:8e:e5:60:d9:68:e8:1e:7f:5f:94:d4:
                    76:57:22:5c:37:b9:14:44:21:dc:9b:3b:2d:23:8b:
                    c2:80:c9:84:13:63:d7:1f:5b:78:3f:c8:dd:7e:ff:
                    e8:10:5c:e9:ca:72:47:b5:c1:6f:a6:d8:d0:dc:0f:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:97:52:1B:E2:8B:D0:FB:28:80:03:19:F2:5D:6A:48:7D:13:CC:D4
            X509v3 Authority Key Identifier:
                keyid:12:3A:D9:E6:CE:26:51:D9:5A:D1:86:56:EC:BB:93:53:61:89:FA:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/204fae-f7bd-4f70-911a-1b192371f442/1/EjrZ5s4mUdla0YZW7LuTU2GJ-q8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:65:b1:0e:77:25:8f:77:e9:ee:dc:40:3d:c7:5e:1d:c9:89:
         1d:ef:6c:da:96:bc:ec:4d:c9:21:5d:61:e7:f3:83:2a:36:1b:
         a4:82:bb:ea:0e:6b:8c:56:f9:1d:ad:c9:48:6e:3e:71:2d:4b:
         96:87:8c:a6:b7:af:8e:cc:0d:b7:75:78:4f:b1:ab:53:71:72:
         13:47:67:33:99:c6:5f:de:40:8b:ef:a9:64:65:88:ca:56:87:
         09:18:52:64:7f:9a:6a:69:2c:77:81:0d:21:71:cd:be:7f:be:
         e5:eb:18:40:9b:de:b8:70:72:4c:f6:0f:b8:5d:24:dd:b5:9f:
         17:9a:84:ee:21:23:26:15:4a:ab:93:b9:09:47:5b:67:e8:64:
         a4:e9:79:3a:e6:58:0d:27:34:b3:f5:96:12:f1:d3:e4:94:e9:
         41:51:b4:07:d7:fe:fe:cd:95:6d:d9:db:1b:5c:3e:83:e3:23:
         5a:5a:54:6b:2e:50:c0:7a:a6:b8:7d:80:6b:3e:98:a8:b1:9f:
         ac:c8:6f:48:cc:13:a3:ec:c0:7e:75:16:1a:a5:85:1a:6c:b8:
         32:41:be:11:a1:0e:67:c1:f8:2f:2b:b9:f7:41:7e:b3:99:2f:
         8e:47:9b:18:08:7a:6c:7d:93:f8:29:a7:d2:68:57:62:da:dd:
         c9:17:52:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC8HC9fKCzhpBpGsZvPQwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyM2FkOWU2Y2UyNjUxZDk1YWQxODY1NmVjYmI5MzUzNjE4
OWZhYWYwHhcNMjYwODE1MDEwMTQ2WhcNMjYwODE2MDEwMTQ2WjAzMTEwLwYDVQQD
EygwNzk3NTIxYmUyOGJkMGZiMjg4MDAzMTlmMjVkNmE0ODdkMTNjY2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2fZpiWMqQFmJJk7qcZHDvUTBsRn
P1hiTDQp7gE13Zw7ywKmIAAoNchpTTn9tguQRujlte1buEfsOTqb5wC1k8mMzgUC
3fwysq5TQokPsWXIs6XYfWte0SgtJ734Tb5ZK5Oh46bwb0Z/Zap0Tz04opk1N5sh
POnk7EOCzPsZOM6G2YTIE2/g2D/vEdAdGd0vDqFLf/BXCVfMlJqgtDIB887u6o0Q
EdmulPE5bEq8FXpLemtlefnEZH3qyMQc+YFiEE26ehDEjuVg2WjoHn9flNR2VyJc
N7kURCHcmzstI4vCgMmEE2PXH1t4P8jdfv/oEFzpynJHtcFvptjQ3A/qhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAeXUhvii9D7KIADGfJdakh9E8zUMB8GA1UdIwQY
MBaAFBI62ebOJlHZWtGGVuy7k1NhifqvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEt
MWIxOTIzNzFmNDQyLzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8yMDRmYWUtZjdiZC00ZjcwLTkxMWEtMWIxOTIzNzFmNDQy
LzEvRWpyWjVzNG1VZGxhMFlaVzdMdVRVMkdKLXE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHGWxDncl
j3fp7txAPcdeHcmJHe9s2pa87E3JIV1h5/ODKjYbpIK76g5rjFb5Ha3JSG4+cS1L
loeMprevjswNt3V4T7GrU3FyE0dnM5nGX95Ai++pZGWIylaHCRhSZH+aamksd4EN
IXHNvn++5esYQJveuHByTPYPuF0k3bWfF5qE7iEjJhVKq5O5CUdbZ+hkpOl5OuZY
DSc0s/WWEvHT5JTpQVG0B9f+/s2VbdnbG1w+g+MjWlpUay5QwHqmuH2Aaz6YqLGf
rMhvSMwTo+zAfnUWGqWFGmy4MkG+EaEOZ8H4Lyu590F+s5kvjkebGAh6bH2T+Cmn
0mhXYtrdyRdSfA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:47 2026 by rpki-client