Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File:                     ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier:          odPG0+PTr92kGnOnmjNy7zdKZLtwlChVK+Jnxpu0U+Y=
Subject key identifier:   06:61:11:C4:5B:CC:61:A2:9E:38:80:8A:35:74:FA:60:9C:19:9B:DD
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer:       /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial:       01A001A5C7B50913E0F282F9199972AA6A5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number:          107E
Signing time:             Fri 14 Aug 2026 19:00:36 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:36 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:36 +0000
Files and hashes:         1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
                          2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: UHZu3T6fOAnL+JanZvgA42OELs0VKsukdKMju5pxjO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:c7:b5:09:13:e0:f2:82:f9:19:99:72:aa:6a:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
        Validity
            Not Before: Aug 14 19:00:36 2026 GMT
            Not After : Aug 15 19:00:36 2026 GMT
        Subject: CN=066111c45bcc61a29e38808a3574fa609c199bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:e7:9f:a1:a2:ce:01:a8:77:12:d0:7a:7f:
                    49:c6:b4:33:f1:d1:a0:d6:0b:c2:f0:bd:12:8b:53:
                    f7:4f:62:b0:ff:e7:ef:31:9d:60:8f:e6:02:e0:85:
                    38:c1:c9:6b:c2:1a:be:55:b3:9f:73:38:17:7e:78:
                    b0:ad:b9:d1:73:4d:16:1d:ae:4f:d0:64:26:02:ae:
                    a8:38:61:d4:cb:12:e4:92:ba:9c:fe:7b:15:3e:a6:
                    67:d0:77:cb:fb:59:03:f5:19:32:34:c5:16:05:c6:
                    9b:7c:f8:fd:79:0e:c1:30:42:19:c7:91:27:ce:13:
                    13:80:24:19:d4:09:31:9a:32:18:8c:0d:85:c0:0f:
                    e9:cf:38:bc:69:34:10:16:0a:f5:4b:76:e8:55:7f:
                    a5:4f:ca:9d:52:b1:57:04:ad:fd:12:bc:32:29:ac:
                    c6:44:75:04:d5:db:72:d2:a7:de:f8:3c:05:90:1c:
                    28:fd:f1:b9:84:29:f9:2a:a3:33:97:81:c0:97:09:
                    66:db:c5:20:d4:0c:04:95:9d:fc:8b:71:d2:3b:47:
                    e9:d0:08:ac:02:f2:72:6a:bc:78:f7:11:5b:73:c3:
                    b3:2b:36:54:7c:92:72:7f:1b:40:8e:f6:3b:49:c2:
                    bb:1b:33:7d:16:70:71:3b:a4:e5:aa:1a:dc:78:6d:
                    b8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:61:11:C4:5B:CC:61:A2:9E:38:80:8A:35:74:FA:60:9C:19:9B:DD
            X509v3 Authority Key Identifier:
                keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:02:5e:09:00:a5:21:11:cd:bb:29:3c:6e:5e:c9:cf:f0:90:
         7e:81:98:47:d4:c4:ce:66:57:31:49:90:14:6c:3d:b3:0c:d5:
         7b:46:0a:e9:78:82:47:e7:28:c1:86:80:54:62:09:10:b8:cf:
         75:0e:a4:6f:5a:23:4e:db:48:9d:8f:89:1f:2c:58:69:51:c4:
         63:9b:d8:90:16:05:36:88:b8:3b:08:58:13:3b:43:87:61:19:
         5d:c7:0f:7f:e3:7f:f2:3b:76:44:58:8d:0f:6a:4c:63:eb:f4:
         56:b4:fc:a1:74:0d:4b:1f:2d:42:c1:fc:52:e9:20:48:9e:20:
         54:12:41:04:74:d3:38:20:a3:a3:8f:e0:60:6c:01:d4:81:5e:
         0c:8f:94:36:92:e2:b8:a3:f7:9b:c0:51:28:0a:69:16:8f:75:
         af:d1:b7:9f:3d:7b:8c:1b:98:6e:c2:d0:81:a4:b5:e6:0c:96:
         6e:25:99:7d:bf:6b:d8:e9:07:c8:a7:02:da:80:e4:36:79:bc:
         08:27:02:1c:19:fd:97:de:a0:87:4b:1a:9f:45:d8:01:cf:da:
         55:26:38:50:ec:55:5b:c2:8c:a1:08:34:3d:5f:45:fe:2c:91:
         58:db:dd:d7:30:b0:10:7d:3f:97:6d:dd:47:34:30:02:fd:d9:
         cd:e8:87:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:25:19 2026 by rpki-client