Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
File:                     sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft (raw, json)
Hash identifier:          rw4o6bmmhzrsOMrZaGycMZ1Zxt8Cwvh26eQ0bmCfq3I=
Subject key identifier:   6F:7C:03:F0:4B:DF:BE:06:6A:0B:8B:86:11:F1:67:ED:19:F2:AD:F1
Authority key identifier: B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3
Certificate issuer:       /CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
Certificate serial:       01A0035DE83B6973F8098262134E8AF0497E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
Manifest number:          1995
Signing time:             Sat 15 Aug 2026 03:01:20 +0000
Manifest this update:     Sat 15 Aug 2026 03:01:20 +0000
Manifest next update:     Sun 16 Aug 2026 03:01:20 +0000
Files and hashes:         1: YxQQWDg_coyEB6pTn4AJqkDaXAs.roa (hash: FxWNGXvs3glxGeqRKNIBrVgkNIhHyCpETztEe1qzaRU=)
                          2: sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl (hash: jMrzp4nQCl/N1MjizctIWDo7/jlaEhzYTjhB98MaH+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:e8:3b:69:73:f8:09:82:62:13:4e:8a:f0:49:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31f0671f399e4da20a48bd327c47afa4a41ffc3
        Validity
            Not Before: Aug 15 03:01:20 2026 GMT
            Not After : Aug 16 03:01:20 2026 GMT
        Subject: CN=6f7c03f04bdfbe066a0b8b8611f167ed19f2adf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:ae:c1:bb:f8:c1:90:20:66:c9:cb:aa:1b:
                    d2:6c:dc:05:c4:af:c8:6b:6e:68:8e:c5:54:e3:d6:
                    fe:9d:37:ed:1a:78:70:c3:d8:cf:4c:49:d0:2f:a6:
                    55:e3:72:50:3a:26:bf:b8:14:f5:e2:15:40:41:f8:
                    30:9e:14:00:80:a0:c7:02:77:fe:d6:dc:f4:66:75:
                    2a:18:7c:2d:93:74:17:1d:7a:c9:9e:a1:80:67:4b:
                    4e:d5:cf:eb:d5:f5:ca:ad:2d:f3:2c:dc:9c:70:92:
                    d7:3f:3a:68:76:d9:d2:81:4a:41:18:82:23:7f:1c:
                    7a:a6:58:86:dd:4a:77:4e:71:e4:c3:2c:f3:19:3b:
                    3e:4e:e2:f0:6e:fa:91:15:52:d8:9d:ce:c8:32:54:
                    20:02:e4:64:d2:38:9a:2a:a0:b9:b6:aa:82:ab:3c:
                    2e:fd:43:8a:1f:15:48:f4:28:75:51:9a:d5:2c:67:
                    97:21:79:72:bd:58:93:72:f8:51:95:1b:da:db:55:
                    cf:41:2f:01:21:09:e6:5d:69:38:35:dc:d7:a4:56:
                    ac:e1:e4:9d:c0:ee:49:c2:37:70:4a:18:1c:c0:be:
                    c0:7c:76:cc:c7:18:f4:8c:dc:4b:ca:1b:27:12:ab:
                    fe:69:16:32:d6:61:9f:09:fe:6c:8e:b6:a8:d9:f7:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7C:03:F0:4B:DF:BE:06:6A:0B:8B:86:11:F1:67:ED:19:F2:AD:F1
            X509v3 Authority Key Identifier:
                keyid:B3:1F:06:71:F3:99:E4:DA:20:A4:8B:D3:27:C4:7A:FA:4A:41:FF:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/878a1c-a7a0-4fd1-98a0-33e44621db07/1/sx8GcfOZ5NogpIvTJ8R6-kpB_8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:80:b8:08:39:87:88:03:43:51:83:19:81:e8:66:82:7c:0a:
         58:35:22:65:e4:ff:a4:90:44:f3:91:f0:49:39:c4:04:e7:9b:
         2d:bf:44:6c:ce:ae:eb:96:0f:22:c3:f5:96:4a:07:4e:82:fb:
         fc:7c:f0:30:06:51:49:27:39:20:07:c7:3d:32:11:d9:bb:a3:
         ce:c4:18:16:75:b4:ec:fa:e1:aa:73:9f:87:e6:2e:ac:7d:a3:
         23:5c:f7:f7:c6:8a:52:ce:b8:da:5e:3e:a5:f8:93:09:bd:2e:
         c0:83:84:d9:7b:44:b9:f6:31:d6:9b:a7:24:2f:f8:ed:ad:fb:
         ed:18:87:26:3d:11:cd:ac:f8:13:92:10:f8:de:0d:00:66:24:
         69:e5:79:8d:cb:5c:8a:49:af:3e:e6:38:79:55:29:98:09:e2:
         d2:12:bf:89:51:2a:85:c2:39:72:50:cd:45:79:16:41:ce:55:
         f5:68:57:6b:90:80:37:a2:29:09:17:9b:0d:48:c5:b3:81:7f:
         d9:69:17:a7:90:26:d5:b9:63:f7:0c:87:30:7e:25:9d:f7:a5:
         41:ab:03:5a:0c:22:99:5f:45:4f:35:e3:18:ad:41:c6:cb:13:
         42:e2:09:94:f4:d6:13:d1:f3:0a:aa:81:90:55:60:c5:2e:ef:
         42:3d:1f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:29:38 2026 by rpki-client