Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
File:                     egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json)
Hash identifier:          QaBaJHcTR8CWJ1oedR3nv5T8TNcbumZR73HY41x6iqw=
Subject key identifier:   BD:08:0E:6E:DE:92:8E:D9:BD:EB:31:22:79:B6:08:C1:B6:62:BB:28
Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B
Certificate issuer:       /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
Certificate serial:       01A0268E8C298EDA85CD0C1F330FFAAA787C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
Manifest number:          152D
Signing time:             Fri 21 Aug 2026 23:01:11 +0000
Manifest this update:     Fri 21 Aug 2026 23:01:11 +0000
Manifest next update:     Sat 22 Aug 2026 23:01:11 +0000
Files and hashes:         1: 9b2UfpLnOIg6wXjfE2QTm6ttJNo.roa (hash: 12XtUm4bHDNcF8dyo1Lq9YsB0tLtgpBaDpNiSMD4cTU=)
                          2: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: F9dInXL/XqQ5134EbPs2GuzfIhBSQ5YlWSLT2U6jWjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 23:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8e:8c:29:8e:da:85:cd:0c:1f:33:0f:fa:aa:78:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b
        Validity
            Not Before: Aug 21 23:01:11 2026 GMT
            Not After : Aug 22 23:01:11 2026 GMT
        Subject: CN=bd080e6ede928ed9bdeb312279b608c1b662bb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:7a:b2:29:8d:21:59:03:d8:06:7d:e9:ac:
                    d8:a9:ce:0b:3d:3a:f5:a7:b8:d3:1c:ac:68:d2:41:
                    76:e6:fb:4d:16:6e:96:51:a5:2b:12:d1:fa:01:8b:
                    6a:36:a6:fa:7d:c3:21:a5:35:59:52:ce:26:de:fa:
                    02:92:03:e2:c9:06:b7:40:9b:41:b7:98:7f:32:b2:
                    ca:a1:26:ef:37:1e:db:2f:e3:fe:c0:94:7f:2d:45:
                    fd:a3:80:2c:ea:b3:32:c5:6b:17:04:96:04:82:d1:
                    69:23:d8:5c:d4:61:51:f3:a8:44:fb:bb:6b:64:b9:
                    ca:e8:e5:ec:03:da:96:e0:54:36:a1:a8:f7:93:a3:
                    2f:f5:e0:07:18:e7:6e:e5:d0:3d:94:2a:1e:c2:21:
                    97:30:fa:7c:79:42:2d:cd:32:ff:d0:fd:49:ac:ab:
                    f9:45:19:34:e6:e2:91:81:ee:93:2e:d3:08:78:c2:
                    3c:d8:96:2f:e3:70:b5:fd:3d:0d:2c:9c:75:18:1c:
                    18:66:d5:dd:9a:e5:b2:c1:97:1a:90:7f:80:0e:42:
                    c8:9d:37:a1:b0:92:45:aa:69:b3:e0:59:fd:8f:d0:
                    1c:d6:31:cf:a1:0f:ed:25:a7:d8:a8:30:33:56:4b:
                    b9:b8:76:a6:dc:bc:1a:c0:a8:04:b1:3c:1e:3d:6c:
                    cd:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:08:0E:6E:DE:92:8E:D9:BD:EB:31:22:79:B6:08:C1:B6:62:BB:28
            X509v3 Authority Key Identifier:
                keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6d:15:a9:c4:8a:8f:4e:58:01:e4:7b:a6:79:ea:70:5a:0b:
         0d:d0:a1:0b:6c:cc:fd:69:5f:63:70:dc:23:c4:eb:dd:18:8b:
         60:1b:94:d5:0f:98:c0:d6:eb:cf:01:52:9e:2b:34:55:62:09:
         e5:c0:27:b8:9b:79:a2:bf:8f:8f:73:4f:2f:04:df:2a:d7:a4:
         97:4f:e8:9a:7f:0f:f6:43:44:50:9b:3b:24:77:25:7a:20:dc:
         17:6c:44:8c:12:8d:72:a1:fe:8c:33:96:a2:08:d3:83:8c:63:
         67:1c:95:9e:cf:4e:8c:9e:b9:d4:6d:05:c9:28:a2:3a:82:2d:
         cc:d2:76:43:fa:73:ff:2d:f5:17:41:c9:5f:51:a5:db:ec:36:
         4f:80:6c:97:ef:90:75:c2:17:46:51:b9:2c:f1:7d:d1:2f:d3:
         80:16:15:0d:90:e9:e6:8d:90:be:9f:1b:e9:21:e3:53:33:c4:
         4c:9c:ed:db:d1:ef:03:7f:bf:01:90:00:df:e3:23:80:94:11:
         da:f0:c5:6c:c3:b6:12:3d:39:98:30:71:dc:42:eb:d2:15:f9:
         60:fa:96:d1:54:e9:29:00:b4:7c:a2:00:4a:8b:99:0c:26:1d:
         0c:a1:48:0f:43:9c:86:bd:50:2c:02:8f:fc:da:74:e6:7d:09:
         20:3d:be:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmjowpjtqFzQwfMw/6qnh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhMDZlMzBhY2NkYjE3YTI1NTQ3M2JiNmMyMjRmMWZjMTU0
NThlOGIwHhcNMjYwODIxMjMwMTExWhcNMjYwODIyMjMwMTExWjAzMTEwLwYDVQQD
EyhiZDA4MGU2ZWRlOTI4ZWQ5YmRlYjMxMjI3OWI2MDhjMWI2NjJiYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQZ6simNIVkD2AZ96azYqc4LPTr1
p7jTHKxo0kF25vtNFm6WUaUrEtH6AYtqNqb6fcMhpTVZUs4m3voCkgPiyQa3QJtB
t5h/MrLKoSbvNx7bL+P+wJR/LUX9o4As6rMyxWsXBJYEgtFpI9hc1GFR86hE+7tr
ZLnK6OXsA9qW4FQ2oaj3k6Mv9eAHGOdu5dA9lCoewiGXMPp8eUItzTL/0P1JrKv5
RRk05uKRge6TLtMIeMI82JYv43C1/T0NLJx1GBwYZtXdmuWywZcakH+ADkLInTeh
sJJFqmmz4Fn9j9Ac1jHPoQ/tJafYqDAzVku5uHam3LwawKgEsTwePWzNXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0IDm7eko7ZvesxInm2CMG2YrsoMB8GA1UdIwQY
MBaAFHoG4wrM2xeiVUc7tsIk8fwVRY6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgt
ZjdjMGMyZjhhM2MxLzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgtZjdjMGMyZjhhM2Mx
LzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm0VqcSK
j05YAeR7pnnqcFoLDdChC2zM/WlfY3DcI8Tr3RiLYBuU1Q+YwNbrzwFSnis0VWIJ
5cAnuJt5or+Pj3NPLwTfKtekl0/omn8P9kNEUJs7JHcleiDcF2xEjBKNcqH+jDOW
ogjTg4xjZxyVns9OjJ651G0FySiiOoItzNJ2Q/pz/y31F0HJX1Gl2+w2T4Bsl++Q
dcIXRlG5LPF90S/TgBYVDZDp5o2Qvp8b6SHjUzPETJzt29HvA3+/AZAA3+MjgJQR
2vDFbMO2Ej05mDBx3ELr0hX5YPqW0VTpKQC0fKIASouZDCYdDKFID0Ochr1QLAKP
/Np05n0JID2+Yg==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:40 2026 by rpki-client