Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
File:                     7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft (raw, json)
Hash identifier:          COb2s3odt29AIxalr+p4/A5bFAX0Zx5VTVxILeJrxak=
Subject key identifier:   85:DA:6C:C0:A3:0C:4F:28:E6:0A:D9:D5:80:18:9C:A5:8B:6A:1D:67
Authority key identifier: ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88
Certificate issuer:       /CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
Certificate serial:       01A06D955082324E4B153D40FF10C400E580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
Manifest number:          B2
Signing time:             Fri 04 Sep 2026 18:01:36 +0000
Manifest this update:     Fri 04 Sep 2026 18:01:36 +0000
Manifest next update:     Sat 05 Sep 2026 18:01:36 +0000
Files and hashes:         1: 7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl (hash: Gc1RF67ZW+8D+hKBRYH1Iypc4c3PfVlh6pgfQnl7e0U=)
                          2: Df_oTOu_EP4d50D-2XA0QPqfKjk.roa (hash: +VGVc2qalWbQy0rJrmFcx94atdweW3ZFDDwOq9nPIVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:95:50:82:32:4e:4b:15:3d:40:ff:10:c4:00:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8611915e1651af17e7bf1f7cab90d55dc1dd88
        Validity
            Not Before: Sep  4 18:01:36 2026 GMT
            Not After : Sep  5 18:01:36 2026 GMT
        Subject: CN=85da6cc0a30c4f28e60ad9d580189ca58b6a1d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:be:fb:f7:e4:30:e9:15:05:04:d2:68:7f:1a:
                    03:15:bf:97:92:7b:e1:0e:3e:29:2d:3f:1b:3b:52:
                    74:97:61:ef:4f:dd:4b:81:a2:61:13:1c:43:d9:8b:
                    9d:7b:b2:38:6c:70:18:c0:f9:10:69:7f:58:e9:56:
                    bb:f0:23:b4:f0:12:81:e3:1f:7b:38:fe:ef:a3:12:
                    3d:d2:78:c8:24:a7:e1:cc:10:8a:f1:da:55:8c:d9:
                    7f:2e:31:26:15:b7:04:e5:c4:cf:7a:6a:7a:1f:5d:
                    1d:62:d0:a2:97:32:a9:7b:2b:41:e8:ca:ac:52:2b:
                    4a:ae:26:e2:31:98:0b:1d:e9:a5:cd:6f:3e:50:a8:
                    49:cb:82:02:b2:0d:d3:88:bb:b1:e6:65:58:f3:fd:
                    4d:c3:4c:f6:25:8a:65:ed:b2:c3:60:b1:0f:cd:08:
                    ae:6f:95:9d:2b:1a:84:5d:d5:0c:42:4e:7a:81:9e:
                    ed:d3:d5:fd:a6:09:56:84:88:69:a8:8c:85:90:4f:
                    42:ae:2c:70:87:77:66:af:ad:d1:95:6a:1e:21:38:
                    25:38:a7:39:0a:8c:ae:3d:dc:38:b9:2e:46:b8:6d:
                    1b:fb:8f:0a:08:43:ff:86:e6:9a:b7:07:1e:b4:a1:
                    b4:e0:34:ce:7d:98:3b:fb:02:3e:2d:a2:56:ef:3d:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DA:6C:C0:A3:0C:4F:28:E6:0A:D9:D5:80:18:9C:A5:8B:6A:1D:67
            X509v3 Authority Key Identifier:
                keyid:ED:86:11:91:5E:16:51:AF:17:E7:BF:1F:7C:AB:90:D5:5D:C1:DD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YYRkV4WUa8X578ffKuQ1V3B3Yg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/066da9-995e-48f2-b9f1-801cab720edb/1/7YYRkV4WUa8X578ffKuQ1V3B3Yg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:22:80:03:a7:37:86:98:38:b5:d0:5e:e9:40:55:ee:13:96:
         a4:3b:68:4a:c0:12:94:1c:d3:82:38:b7:c9:de:db:ed:07:ad:
         00:e6:eb:a5:3a:96:be:d7:f3:94:b6:21:73:33:e2:53:ac:46:
         50:b5:99:4c:26:7e:f4:20:f6:26:23:06:03:71:47:6a:f7:a1:
         a6:65:be:d8:da:3d:e2:ab:42:9c:80:a6:7c:d0:95:61:09:72:
         c0:f1:7b:5f:63:47:3b:b2:3a:50:c4:5c:a0:9f:23:27:17:98:
         4b:9a:93:b9:00:83:aa:81:55:eb:51:ec:ce:71:2f:79:1f:d1:
         9f:dd:75:3f:f2:a2:5d:e8:12:5f:62:3e:5e:75:1e:4c:a9:10:
         91:e6:f4:08:7e:02:54:ea:be:53:c3:df:a5:03:f7:f7:97:ad:
         de:a4:37:39:85:f8:08:3d:88:8e:15:c7:ea:d8:96:6f:7a:24:
         9c:3e:83:17:da:0d:21:a2:1a:c6:b7:1f:76:6f:7a:3b:f9:62:
         fb:92:1f:48:52:84:8f:1e:1d:78:a6:db:27:59:f0:18:b2:4f:
         cf:8c:e5:44:77:55:6f:9f:22:bc:9f:ed:04:d1:7c:58:4d:af:
         5c:11:69:f5:81:7d:98:b9:a0:24:95:50:c0:28:8d:d0:c4:b7:
         06:a8:14:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBtlVCCMk5LFT1A/xDEAOWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODYxMTkxNWUxNjUxYWYxN2U3YmYxZjdjYWI5MGQ1NWRj
MWRkODgwHhcNMjYwOTA0MTgwMTM2WhcNMjYwOTA1MTgwMTM2WjAzMTEwLwYDVQQD
Eyg4NWRhNmNjMGEzMGM0ZjI4ZTYwYWQ5ZDU4MDE4OWNhNThiNmExZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77779+Qw6RUFBNJofxoDFb+Xknvh
Dj4pLT8bO1J0l2HvT91LgaJhExxD2Yude7I4bHAYwPkQaX9Y6Va78CO08BKB4x97
OP7voxI90njIJKfhzBCK8dpVjNl/LjEmFbcE5cTPemp6H10dYtCilzKpeytB6Mqs
UitKribiMZgLHemlzW8+UKhJy4ICsg3TiLux5mVY8/1Nw0z2JYpl7bLDYLEPzQiu
b5WdKxqEXdUMQk56gZ7t09X9pglWhIhpqIyFkE9Crixwh3dmr63RlWoeITglOKc5
CoyuPdw4uS5GuG0b+48KCEP/huaatwcetKG04DTOfZg7+wI+LaJW7z24owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIXabMCjDE8o5grZ1YAYnKWLah1nMB8GA1UdIwQY
MBaAFO2GEZFeFlGvF+e/H3yrkNVdwd2IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lZUmtWNFdVYThYNTc4ZmZLdVExVjNCM1lnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEt
ODAxY2FiNzIwZWRiLzEvN1lZUmtWNFdVYThYNTc4ZmZLdVExVjNCM1lnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wNjZkYTktOTk1ZS00OGYyLWI5ZjEtODAxY2FiNzIwZWRi
LzEvN1lZUmtWNFdVYThYNTc4ZmZLdVExVjNCM1lnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiKAA6c3
hpg4tdBe6UBV7hOWpDtoSsASlBzTgji3yd7b7QetAObrpTqWvtfzlLYhczPiU6xG
ULWZTCZ+9CD2JiMGA3FHavehpmW+2No94qtCnICmfNCVYQlywPF7X2NHO7I6UMRc
oJ8jJxeYS5qTuQCDqoFV61HsznEveR/Rn911P/KiXegSX2I+XnUeTKkQkeb0CH4C
VOq+U8PfpQP395et3qQ3OYX4CD2IjhXH6tiWb3oknD6DF9oNIaIaxrcfdm96O/li
+5IfSFKEjx4deKbbJ1nwGLJPz4zlRHdVb58ivJ/tBNF8WE2vXBFp9YF9mLmgJJVQ
wCiN0MS3BqgUkQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:24 2026 by rpki-client