Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
File:                     7v_0DYu0okhy4Bun9C465j7ghfU.mft (raw, json)
Hash identifier:          tu2IyJ01xOZ9fANgMjzKiltgrU+gwmVrCr8EkhRQ+tE=
Subject key identifier:   0D:76:E6:30:42:A8:64:C7:55:97:7D:19:DE:89:1F:B3:22:38:4D:4F
Authority key identifier: EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5
Certificate issuer:       /CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
Certificate serial:       01A040851A115874380068743A05BCEF6178
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
Manifest number:          0301
Signing time:             Thu 27 Aug 2026 00:00:59 +0000
Manifest this update:     Thu 27 Aug 2026 00:00:59 +0000
Manifest next update:     Fri 28 Aug 2026 00:00:59 +0000
Files and hashes:         1: 0ZqH99V57Xuf54z1hwypjXXPfTk.roa (hash: a/D66uiFnK78JnobNYVCxo0xT6Yj6YVtDbbQ8ijoyQo=)
                          2: 7v_0DYu0okhy4Bun9C465j7ghfU.crl (hash: yGLWK3bOMW2oysUWgJtsv8G2fysEtJlnYPbuWu+FtR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:85:1a:11:58:74:38:00:68:74:3a:05:bc:ef:61:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eefff40d8bb4a24872e01ba7f42e3ae63ee085f5
        Validity
            Not Before: Aug 27 00:00:59 2026 GMT
            Not After : Aug 28 00:00:59 2026 GMT
        Subject: CN=0d76e63042a864c755977d19de891fb322384d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c9:d6:e0:62:04:d6:e6:ae:1b:1f:08:d9:c3:
                    37:e0:6e:96:07:07:82:45:c0:31:45:12:81:a6:40:
                    54:07:4a:c7:63:98:50:96:93:94:05:cc:8c:55:2f:
                    e4:f0:4c:a8:64:24:d9:2c:42:fa:5c:4c:79:19:34:
                    ea:01:e7:54:a8:16:20:f9:64:b3:e3:69:2d:4e:90:
                    1d:8d:28:83:fd:46:99:29:c6:fb:57:44:33:65:bb:
                    58:55:73:07:b3:ad:cb:77:0c:5c:a9:8f:a6:50:39:
                    e6:ac:7f:72:64:6a:a9:4a:e3:a2:0e:4e:7f:21:71:
                    a1:6c:77:a3:c9:b2:0f:f0:05:29:96:45:49:da:dc:
                    6f:df:da:af:fa:0d:87:d7:0a:4a:43:d4:40:ec:42:
                    49:a4:28:70:3b:65:a1:34:1f:49:16:c7:48:5e:d6:
                    5c:99:0f:04:a2:ac:d6:60:6b:34:40:68:71:df:c9:
                    df:2e:59:ec:92:b3:31:dd:7e:7c:16:ff:43:84:a2:
                    e7:9f:cf:99:d1:1e:ff:ab:44:f2:ef:76:3c:70:8f:
                    a4:f1:0b:a5:cd:07:fa:83:bd:1a:a2:72:44:e7:36:
                    bf:ca:b7:f1:ea:f5:dc:1a:d3:83:57:4a:19:69:1d:
                    75:c0:f4:e4:36:91:45:12:fa:48:ea:6f:75:35:bf:
                    cf:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:76:E6:30:42:A8:64:C7:55:97:7D:19:DE:89:1F:B3:22:38:4D:4F
            X509v3 Authority Key Identifier:
                keyid:EE:FF:F4:0D:8B:B4:A2:48:72:E0:1B:A7:F4:2E:3A:E6:3E:E0:85:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7v_0DYu0okhy4Bun9C465j7ghfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3ebdba-46c9-403c-8a0d-141d33c743df/1/7v_0DYu0okhy4Bun9C465j7ghfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:61:d3:66:7c:89:12:cb:0f:d3:53:47:84:51:c6:07:36:24:
         5d:8e:7f:2a:79:af:29:2f:18:55:3c:ea:82:59:33:83:87:5e:
         6b:c7:ef:c4:5f:80:b0:68:8f:cb:78:9f:dd:4e:67:e7:dd:e9:
         a2:cd:96:7e:66:e5:d9:51:9b:ca:fc:a3:3d:05:23:7b:bd:99:
         82:55:9e:f3:ab:22:45:a9:b7:f7:84:09:4e:28:80:0e:b3:11:
         97:93:67:ca:5f:5d:ec:d3:11:dd:92:ee:05:5e:c2:54:8a:1f:
         7f:cb:d7:7b:b8:51:2e:69:ec:eb:28:8b:e5:06:13:df:df:64:
         47:54:60:5d:29:b3:db:31:dc:92:01:0d:dd:13:2c:50:a4:2c:
         52:96:f6:e4:09:9b:f7:32:04:07:1d:f5:3b:71:21:b6:17:46:
         20:73:20:e8:a8:df:19:9f:ca:17:ee:3e:31:e1:6d:58:20:52:
         b5:dd:6c:aa:33:d6:77:25:dc:38:bc:0d:90:6a:92:cb:22:ff:
         e2:51:3d:b8:20:91:b4:f3:b1:ee:6a:24:5e:4a:56:0d:58:38:
         d7:b6:bd:f0:05:ac:1e:2e:ff:02:b9:41:5b:4a:2a:c2:cc:62:
         87:19:bb:ae:70:dd:ae:20:64:a1:56:25:06:0c:73:bb:8d:ae:
         cf:51:88:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:52 2026 by rpki-client