Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
File:                     iNEpp8ePtm0Hc7yZAINX5QfB574.mft (raw, json)
Hash identifier:          vozqMOHRWDtkSr/8K3ksZpmhxy4X2kcGd/shZIeVYWk=
Subject key identifier:   2E:D5:78:62:87:FF:D8:DE:01:1F:34:CF:1F:67:C9:54:D7:FA:A3:16
Authority key identifier: 88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE
Certificate issuer:       /CN=88d129a7c78fb66d0773bc99008357e507c1e7be
Certificate serial:       019FC3A4A31C600698094379BF1475D97F4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
Manifest number:          0B12
Signing time:             Sun 02 Aug 2026 18:02:54 +0000
Manifest this update:     Sun 02 Aug 2026 18:02:54 +0000
Manifest next update:     Mon 03 Aug 2026 18:02:54 +0000
Files and hashes:         1: WJ4tfO6kiSMSkG1grDmRdHg6U_4.roa (hash: Eb3yXv0Sg6PPztcKbZR4VGFXGGjS4jiVBjwDazfbRcs=)
                          2: iNEpp8ePtm0Hc7yZAINX5QfB574.crl (hash: h4CNmQv8JP8z43qwR1/9+o0xYDeL6Mz3kQk5oaffYRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c3:a4:a3:1c:60:06:98:09:43:79:bf:14:75:d9:7f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d129a7c78fb66d0773bc99008357e507c1e7be
        Validity
            Not Before: Aug  2 18:02:54 2026 GMT
            Not After : Aug  3 18:02:54 2026 GMT
        Subject: CN=2ed5786287ffd8de011f34cf1f67c954d7faa316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:4b:54:2e:b0:73:e4:05:69:75:d6:59:c6:
                    86:5f:de:6f:19:25:b4:10:a1:f5:1a:2f:17:4d:44:
                    36:b5:b1:e7:92:87:f0:86:9c:64:0e:64:ad:d4:d4:
                    5d:f7:3e:8c:af:74:d0:79:1f:7d:74:7a:28:55:0f:
                    db:12:60:fe:50:9a:3e:4b:50:13:c1:f8:d1:a2:51:
                    44:57:08:09:46:32:a7:fa:b5:ab:9e:aa:34:4f:55:
                    bd:b0:be:d2:aa:fa:65:e5:ed:db:0f:3e:4f:df:37:
                    a2:52:b9:b4:e2:99:d0:46:8c:00:3d:c9:d9:83:d8:
                    ae:03:cc:95:9b:7d:73:f0:68:fd:14:f6:8b:1a:d5:
                    85:d5:d4:74:d0:8f:24:02:da:ff:4f:d1:92:ba:74:
                    42:92:dc:66:b8:e0:13:b5:0b:b6:d9:8a:f6:57:80:
                    06:d8:01:7e:55:54:1d:61:15:9e:f1:cb:aa:aa:4a:
                    f8:95:7b:d2:ca:42:da:af:1a:34:40:47:80:89:81:
                    9b:85:ed:46:2c:58:b9:7b:43:88:05:b7:4f:4c:9b:
                    23:bd:0f:c0:8c:7d:d8:94:01:e9:33:1a:00:af:da:
                    ee:5c:fb:53:65:95:c9:52:08:3c:af:e8:98:85:fc:
                    47:70:fb:33:75:1e:7e:59:92:7c:f4:70:61:5d:89:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D5:78:62:87:FF:D8:DE:01:1F:34:CF:1F:67:C9:54:D7:FA:A3:16
            X509v3 Authority Key Identifier:
                keyid:88:D1:29:A7:C7:8F:B6:6D:07:73:BC:99:00:83:57:E5:07:C1:E7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iNEpp8ePtm0Hc7yZAINX5QfB574.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/d86fc4-175f-423d-984e-859f7face695/1/iNEpp8ePtm0Hc7yZAINX5QfB574.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:78:f0:eb:b9:01:01:6f:0b:74:a6:bd:09:ca:be:95:1e:
         97:38:ce:96:6d:8e:c6:76:ec:46:9d:0b:2f:60:4a:25:3a:58:
         89:3e:50:83:c4:49:aa:fb:e5:52:de:4b:f5:3c:62:3f:4b:51:
         90:b7:bd:1f:57:f1:b9:70:7f:93:6a:b2:46:b0:d7:8f:20:cf:
         67:c0:aa:31:ec:83:b1:43:9b:ce:a6:ce:72:31:22:79:0d:0a:
         aa:1e:32:49:d9:f9:e7:4a:d8:3d:9e:14:04:aa:98:fd:35:b4:
         27:66:93:72:39:27:9a:d7:66:5a:d3:1f:87:4d:a6:a4:4b:82:
         4a:60:57:b6:f0:a6:8d:19:e1:be:37:a9:2c:a1:1e:45:bd:a5:
         3f:5e:07:70:cf:6f:e9:52:7d:6f:e5:e0:9c:59:fa:11:94:a3:
         0a:be:67:4a:16:35:62:1e:4b:ba:a2:32:4a:92:f5:c9:9b:f1:
         0c:6c:13:fd:2f:bb:3d:71:0d:f2:3a:4c:09:76:09:3c:51:ff:
         20:1a:7f:0a:cf:37:14:10:b0:2f:e5:1f:ca:f4:6e:8a:1d:6d:
         5c:a1:36:b2:09:d1:2d:5d:1a:ed:05:d8:ff:19:e2:d3:51:e8:
         90:db:6c:b4:80:bb:5b:1d:8f:5b:f7:42:d6:52:70:1f:a5:39:
         0f:36:c8:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 23:29:39 2026 by rpki-client