Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
File:                     EHWcamLieNqDEa_sj3Z3xBNj0fg.mft (raw, json)
Hash identifier:          WrFMA8YDw6+Eo5Hf9VGBJ2ctC97E50yKRydaIYT5fmA=
Subject key identifier:   F9:30:41:EA:C3:3B:BB:09:49:04:1A:5A:05:1C:FB:D6:8F:68:5C:E8
Authority key identifier: 10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8
Certificate issuer:       /CN=10759c6a62e278da8311afec8f7677c41363d1f8
Certificate serial:       01A0024AA1D7DD5943CD42625ABA2E3897B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
Manifest number:          08A8
Signing time:             Fri 14 Aug 2026 22:00:40 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:40 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:40 +0000
Files and hashes:         1: EHWcamLieNqDEa_sj3Z3xBNj0fg.crl (hash: BpSoR8bDo0yK+QFf3sPPU2wosJ+g/FmMs97UQtLVFhk=)
                          2: WzghRqzGjI_eG3WiC84nx-l-Aus.roa (hash: BkSKCwkOQoqJmPqml1/0+ldKWjkL69DMpw0CtVVRSPA=)
                          3: mHoBt9PDNYSmvIbOtBMkSD1EeQc.roa (hash: NyFP79wSko1G5ztyYBa7m1r2+XgRX6VCVkCRadeTppY=)
                          4: zIbJINmlNMbydMyHdFKjYjledsU.roa (hash: 0BP9/A/nS++GLnzB9nZAgAW2Y+hvfw4359wNr288whk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:a1:d7:dd:59:43:cd:42:62:5a:ba:2e:38:97:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10759c6a62e278da8311afec8f7677c41363d1f8
        Validity
            Not Before: Aug 14 22:00:40 2026 GMT
            Not After : Aug 15 22:00:40 2026 GMT
        Subject: CN=f93041eac33bbb0949041a5a051cfbd68f685ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:8d:54:9a:76:85:0e:0f:15:e2:c0:37:6b:
                    5c:c7:50:b6:6a:b3:01:38:35:5f:8c:dc:2c:01:f6:
                    c6:a7:9d:1f:c9:e0:55:be:21:5c:b7:6e:ff:d9:d8:
                    87:5c:88:a9:83:91:50:e2:1a:cb:e4:d4:9a:9d:81:
                    75:2c:60:04:2d:16:3d:a4:a0:20:62:4a:a0:23:23:
                    53:ca:e3:ed:cb:fd:22:7d:69:80:56:ac:de:b3:46:
                    45:cc:57:57:40:7d:ca:d5:78:68:66:01:8f:58:2a:
                    9e:3a:07:fd:e8:2f:80:6b:d2:4c:14:7b:73:fa:5d:
                    f8:3d:8a:f2:72:53:29:e5:0e:bf:cf:b6:84:7c:53:
                    65:99:87:dc:2c:f0:1e:d6:e6:9c:7c:50:05:78:24:
                    85:c0:69:ae:c9:b9:4d:9d:f6:c8:09:d1:02:a0:3e:
                    99:ea:63:da:69:03:5b:9e:c7:8f:70:f1:e9:ad:03:
                    21:ec:6f:31:ef:45:23:13:47:d6:36:01:47:4e:31:
                    c1:3d:54:35:be:1f:61:23:6f:29:84:a4:3f:e6:43:
                    a9:87:78:77:e9:90:87:e8:cd:12:a1:9a:d2:f1:32:
                    5d:ef:f6:f5:0b:b1:dc:7d:18:b6:bb:d6:f3:93:92:
                    65:41:ad:43:65:b8:e6:11:d9:cd:e1:22:24:59:dd:
                    b9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:30:41:EA:C3:3B:BB:09:49:04:1A:5A:05:1C:FB:D6:8F:68:5C:E8
            X509v3 Authority Key Identifier:
                keyid:10:75:9C:6A:62:E2:78:DA:83:11:AF:EC:8F:76:77:C4:13:63:D1:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHWcamLieNqDEa_sj3Z3xBNj0fg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a7e55a-2672-4d76-9879-2ee4ff8b0a80/1/EHWcamLieNqDEa_sj3Z3xBNj0fg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:e1:ca:fb:f8:ab:cb:77:8f:25:df:14:55:53:42:54:30:bf:
         01:6c:f3:11:87:15:05:01:55:71:16:c7:d0:7d:5a:cd:6d:27:
         84:6d:96:ec:c0:da:e9:2c:5b:78:d3:f3:41:78:1c:79:7a:ac:
         d4:3b:43:bb:69:73:3b:cf:d2:6a:da:f6:d1:03:b1:68:d2:73:
         74:a7:cd:57:f3:8a:78:8f:af:a0:78:cb:67:b5:bc:82:72:6a:
         5d:4a:9f:b2:c1:f7:74:31:27:3c:db:e8:aa:da:19:c5:ab:74:
         20:3c:77:06:a6:a7:cd:ce:03:40:27:ea:8d:13:f6:11:b8:1c:
         2f:58:29:a5:77:2d:66:10:16:4a:fa:07:4d:dd:0b:e0:96:42:
         b7:b1:df:51:d2:a7:11:43:c3:7a:1a:17:28:3b:06:1b:2f:b8:
         da:29:31:c7:7c:70:69:ff:94:d9:04:cb:d6:9b:49:dd:ac:cd:
         68:78:7b:b3:ee:8b:70:f1:26:15:82:92:61:95:46:db:6c:62:
         d7:7a:e7:e1:48:2a:35:d8:c8:6b:51:3a:cc:26:1b:cf:0c:ff:
         f5:bf:c3:a8:ca:cd:50:74:95:3e:09:4a:3c:23:c9:9f:77:fc:
         00:54:a0:9a:79:f5:00:89:63:e9:e1:e7:10:fe:c1:36:1f:23:
         8d:b4:23:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:58 2026 by rpki-client