Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          TTUFGGbW7WrlL8t63Y1XGOfGK0zCZEUs2px4ybta9rI=
Subject key identifier:   C9:69:36:62:E7:C6:C9:BB:B0:B2:67:B3:1C:AD:37:21:71:0A:2E:3F
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       01A00137D7CE2FCF9FAC6DB1B7425963B1C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 17:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:31 +0000
Files and hashes:         1: 4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa (hash: Rohs1aSjVXWL0rCfUlHjGhKgh4NddWQEmfzTXXTVjxE=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: DMmkrvKGkXkRZS36zhWLZb7EHEIPppQlMzwpc5zXkpk=)
                          3: Lni0Hg51K4L3QNDzyIIc5yODXjI.roa (hash: gv0qHBnJC/7TrslaRP9zYprmaic9WMI2dM0X709uqrI=)
                          4: WoQboQGGusiNaqyn8jRMBDu3Vvs.roa (hash: spWQsiuCrGGqTTUZBAQNl/ggbHw2wL+q6jT+X13QEFg=)
                          5: rdfW53cfGFv_YgxwDty6e7ihnuY.roa (hash: h3oTAKzXhami9yqYo4w2QzINnY33lJyuys0rpltxvDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:d7:ce:2f:cf:9f:ac:6d:b1:b7:42:59:63:b1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Aug 14 17:00:31 2026 GMT
            Not After : Aug 15 17:00:31 2026 GMT
        Subject: CN=c9693662e7c6c9bbb0b267b31cad3721710a2e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:18:03:8a:3d:9d:76:1d:24:c2:40:2c:ed:72:
                    67:9d:43:0d:ae:b0:38:4e:c1:6a:a1:05:07:c6:42:
                    74:91:9d:9a:00:27:de:d2:9d:09:62:9b:b1:c5:c9:
                    cb:c7:05:d6:24:ab:23:17:65:06:29:23:b3:37:64:
                    c4:98:11:0c:0b:a6:c0:e4:42:0f:c5:df:ac:56:f3:
                    d7:7f:3f:13:6c:f2:a1:8e:42:ef:49:ec:ad:79:43:
                    2a:d0:72:18:d8:01:13:ed:71:1e:41:73:79:e2:4b:
                    13:f9:82:64:0e:1d:87:09:63:de:3e:c2:d8:01:94:
                    dc:18:1d:da:7c:f1:39:d9:53:67:0f:7c:9c:f2:7a:
                    fc:9b:dc:82:32:ce:ae:c5:92:40:78:14:d7:ad:fb:
                    3f:e1:39:06:0e:31:73:c4:65:e1:1d:13:e3:56:fe:
                    6f:07:fc:a2:3a:80:f5:4a:11:c3:d5:71:f5:a8:01:
                    2d:c8:be:e8:c8:40:f1:bd:90:a9:62:99:01:11:44:
                    03:1a:13:5a:c3:be:67:5b:f9:c9:fb:1a:e9:e6:eb:
                    ad:07:7a:7b:50:2e:12:bd:b9:d0:5c:b6:ba:44:60:
                    ab:46:5e:d1:d0:93:d8:da:f6:c6:20:e9:48:ff:24:
                    28:a3:1d:dd:1e:9b:38:dd:38:10:bb:23:03:c9:27:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:69:36:62:E7:C6:C9:BB:B0:B2:67:B3:1C:AD:37:21:71:0A:2E:3F
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:24:73:45:7c:36:cd:d1:5a:7f:da:53:19:02:2e:a9:02:70:
         ea:03:d9:2f:da:7d:41:13:63:8b:5e:4d:bc:f9:08:51:81:9f:
         38:a4:0d:04:07:dc:f8:21:d1:6a:23:18:82:68:eb:2d:d1:fb:
         f2:6c:74:6b:d3:11:0b:2b:67:3b:ad:e3:08:22:a1:d0:d7:ec:
         84:eb:a5:6d:89:7b:cb:e4:b3:82:ed:e7:c7:ed:d2:00:6d:2d:
         b4:0c:ec:58:91:1b:0f:12:70:02:29:a1:03:ef:4f:d1:05:32:
         ad:62:42:61:6c:96:f1:c8:61:b8:21:7a:14:b8:c6:7f:96:ac:
         80:fd:2f:e5:8b:25:dd:2c:e0:39:09:d5:c3:4b:eb:c1:a8:85:
         32:ed:fb:91:f6:42:e3:53:a0:d7:89:9c:ff:9c:6d:bd:25:cf:
         58:75:82:44:f0:a3:e2:05:67:da:16:74:f5:06:fc:8a:0b:94:
         d9:96:99:f3:25:e2:86:97:8c:2d:38:64:78:0c:c1:6a:f7:a3:
         46:52:78:8f:83:52:d3:e0:5c:15:11:e0:4a:2e:e9:ec:2d:1e:
         b9:37:ec:8e:40:d0:12:82:b7:d3:98:0d:6b:3e:32:fd:20:1f:
         35:56:59:89:b7:16:0e:aa:93:cb:82:b0:ba:d0:e7:a1:96:5c:
         fd:df:37:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:50 2026 by rpki-client