Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
File:                     7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft (raw, json)
Hash identifier:          PNHbN7bnqFG6oBXErN3NiAOGwrSYX7ebxQNZhgWydjA=
Subject key identifier:   77:2B:C7:1A:B9:91:E0:AA:72:E6:ED:B6:EF:E1:E3:47:AE:70:62:86
Authority key identifier: ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41
Certificate issuer:       /CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
Certificate serial:       01A002143A0E19BF66CDE7E46F0D9878109D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 21:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 21:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 21:01:14 +0000
Files and hashes:         1: 1zEvIox69c2lph8To4y01za8sxk.roa (hash: NK/LeMgA4R1YoY3PIzw3AAc8sU/wtNG17ZKOs8j1HAs=)
                          2: 7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl (hash: a7icvAJwfOcB7mmJwQVMfVE3CfjKOaAZ0cvq0hdb7Sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:14:3a:0e:19:bf:66:cd:e7:e4:6f:0d:98:78:10:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8e8797ea068357ad6bb03a35c95bd7034e1541
        Validity
            Not Before: Aug 14 21:01:14 2026 GMT
            Not After : Aug 15 21:01:14 2026 GMT
        Subject: CN=772bc71ab991e0aa72e6edb6efe1e347ae706286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c1:ba:67:43:bb:4d:2e:40:6f:e5:0d:c5:06:
                    d8:b2:55:19:75:91:12:0e:aa:bd:27:7f:bd:53:b5:
                    d1:81:f2:e4:71:ae:a6:3f:65:43:88:b7:32:ab:ae:
                    b8:39:50:58:0a:3f:32:d5:ab:b3:1a:4f:02:31:2f:
                    60:9a:f0:74:29:a8:f6:21:d0:e3:30:b6:7f:34:3c:
                    28:ff:a4:9d:3f:77:69:98:de:b3:fc:6a:1e:90:e8:
                    8b:62:67:45:54:01:12:6b:6b:d4:66:1b:29:b1:cd:
                    58:cf:81:8e:6d:e5:4d:c6:9a:f4:3a:30:3b:85:90:
                    0f:c1:d9:fe:49:f6:80:64:6c:10:92:19:f1:4c:ff:
                    eb:0c:fb:ca:bd:9b:91:b8:1c:17:2f:12:9a:4f:3a:
                    69:6d:54:6f:9c:ad:ae:8d:cf:6d:95:12:41:ce:50:
                    05:58:4f:70:50:36:1a:8b:7d:60:c9:35:7b:fd:40:
                    b0:6c:b6:1a:16:6e:47:aa:a3:33:cc:7a:90:ff:d4:
                    b6:27:a0:81:74:e0:33:3a:2a:09:22:76:70:a2:2c:
                    26:fc:5c:39:37:1e:98:1c:08:9a:e2:67:51:13:96:
                    39:cf:92:51:87:00:16:6a:a8:7d:cd:2f:45:ac:84:
                    8b:26:93:44:02:e7:9a:11:5f:d4:5a:66:fb:bc:47:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:C7:1A:B9:91:E0:AA:72:E6:ED:B6:EF:E1:E3:47:AE:70:62:86
            X509v3 Authority Key Identifier:
                keyid:ED:8E:87:97:EA:06:83:57:AD:6B:B0:3A:35:C9:5B:D7:03:4E:15:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7eb409-7f13-486d-86a8-ae1b0acd28a8/1/7Y6Hl-oGg1eta7A6Nclb1wNOFUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:75:33:ba:d9:39:cc:c4:6c:a9:b6:3f:10:ff:25:95:dc:fb:
         9f:51:00:f7:79:84:d2:21:0c:93:55:65:ce:d2:34:c7:da:16:
         5e:96:5f:ac:ee:e8:16:a7:0b:51:aa:11:34:b9:9e:c3:1b:51:
         17:40:ce:ee:8e:22:55:c8:6d:01:65:ff:85:c3:54:d6:80:cc:
         0c:f0:88:5e:ea:53:e1:29:4a:b2:ea:a0:ba:c1:db:6a:66:39:
         2c:37:f6:bd:a4:61:3c:53:c0:e9:e6:79:c3:7b:a8:ac:1e:0f:
         e3:e3:15:02:12:e4:58:2b:50:5c:35:70:4b:97:8b:d3:b8:f7:
         2c:ed:fb:4f:72:1e:7f:cc:69:e7:8a:0f:ed:e9:eb:d9:eb:1c:
         07:c8:0b:e1:b0:10:c8:7a:7a:fb:88:c2:7a:e1:bf:52:ca:75:
         70:e6:1f:ca:07:ed:58:2e:a4:7f:06:a9:21:bb:aa:da:90:3c:
         60:3e:18:e4:00:fc:b4:10:13:74:02:8f:2b:f1:f9:19:f6:1b:
         30:e4:68:87:7b:1a:c9:f5:6c:80:29:54:36:e0:e9:5b:76:f8:
         0e:4d:16:b9:dc:47:18:52:d6:6c:5b:ba:d6:0d:80:79:1c:ec:
         d1:44:d0:ee:93:8e:3c:d3:39:04:cf:43:f7:f3:6d:1a:7c:e0:
         9a:63:96:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACFDoOGb9mzefkbw2YeBCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkOGU4Nzk3ZWEwNjgzNTdhZDZiYjAzYTM1Yzk1YmQ3MDM0
ZTE1NDEwHhcNMjYwODE0MjEwMTE0WhcNMjYwODE1MjEwMTE0WjAzMTEwLwYDVQQD
Eyg3NzJiYzcxYWI5OTFlMGFhNzJlNmVkYjZlZmUxZTM0N2FlNzA2Mjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcG6Z0O7TS5Ab+UNxQbYslUZdZES
Dqq9J3+9U7XRgfLkca6mP2VDiLcyq664OVBYCj8y1auzGk8CMS9gmvB0Kaj2IdDj
MLZ/NDwo/6SdP3dpmN6z/GoekOiLYmdFVAESa2vUZhspsc1Yz4GObeVNxpr0OjA7
hZAPwdn+SfaAZGwQkhnxTP/rDPvKvZuRuBwXLxKaTzppbVRvnK2ujc9tlRJBzlAF
WE9wUDYai31gyTV7/UCwbLYaFm5HqqMzzHqQ/9S2J6CBdOAzOioJInZwoiwm/Fw5
Nx6YHAia4mdRE5Y5z5JRhwAWaqh9zS9FrISLJpNEAueaEV/UWmb7vEeAZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcrxxq5keCqcubttu/h40eucGKGMB8GA1UdIwQY
MBaAFO2Oh5fqBoNXrWuwOjXJW9cDThVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgt
YWUxYjBhY2QyOGE4LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS83ZWI0MDktN2YxMy00ODZkLTg2YTgtYWUxYjBhY2QyOGE4
LzEvN1k2SGwtb0dnMWV0YTdBNk5jbGIxd05PRlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0XUzutk5
zMRsqbY/EP8lldz7n1EA93mE0iEMk1VlztI0x9oWXpZfrO7oFqcLUaoRNLmewxtR
F0DO7o4iVchtAWX/hcNU1oDMDPCIXupT4SlKsuqgusHbamY5LDf2vaRhPFPA6eZ5
w3uorB4P4+MVAhLkWCtQXDVwS5eL07j3LO37T3Ief8xp54oP7enr2escB8gL4bAQ
yHp6+4jCeuG/Usp1cOYfygftWC6kfwapIbuq2pA8YD4Y5AD8tBATdAKPK/H5GfYb
MORoh3sayfVsgClUNuDpW3b4Dk0WudxHGFLWbFu61g2AeRzs0UTQ7pOOPNM5BM9D
9/NtGnzgmmOW9A==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:36 2026 by rpki-client