Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          EaUxu2SQm6PAMm0LgeULOzP3aPjcJ0TkqUviAwjUfGw=
Subject key identifier:   80:E3:D5:A2:72:98:D0:1A:B6:62:F2:AE:6A:5E:EA:C9:0D:1E:D6:A9
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       019F3AF3DB6B011CA928756C9A81A7AE76DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          06F8
Signing time:             Tue 07 Jul 2026 05:01:27 +0000
Manifest this update:     Tue 07 Jul 2026 05:01:27 +0000
Manifest next update:     Wed 08 Jul 2026 05:01:27 +0000
Files and hashes:         1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: Q1pfCdHPsHYlPegfIUwNOSNKTMrl60ddEvnwmXDn7+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3a:f3:db:6b:01:1c:a9:28:75:6c:9a:81:a7:ae:76:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Jul  7 05:01:27 2026 GMT
            Not After : Jul  8 05:01:27 2026 GMT
        Subject: CN=80e3d5a27298d01ab662f2ae6a5eeac90d1ed6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:2c:6b:a4:05:f1:dd:c7:c4:c0:cb:16:37:
                    b3:4b:e0:35:5b:09:99:ac:d8:f6:6f:35:97:27:e6:
                    15:81:16:93:16:81:8c:17:fd:c3:f4:17:fd:41:6b:
                    1b:51:02:37:32:c0:16:b6:04:da:b3:e5:69:da:16:
                    18:19:d5:6e:94:70:c4:19:b9:4a:62:1b:aa:be:05:
                    5f:4f:10:78:27:3e:a3:4b:40:49:42:2f:1f:b7:b5:
                    b2:0a:01:5d:50:bb:b0:31:79:17:d2:26:e3:34:84:
                    ba:6a:d5:e3:58:a1:27:51:47:4d:e9:09:53:91:c6:
                    33:3e:ca:26:0e:5f:38:57:55:45:18:dc:4b:35:9b:
                    b9:f3:d6:0e:ad:91:df:18:82:61:50:6d:40:19:b2:
                    e5:a0:7b:a4:aa:21:e3:4c:33:e2:a5:02:40:33:a2:
                    5a:57:39:1f:25:ee:5f:d1:26:47:92:47:6b:26:8d:
                    d2:1d:35:87:52:02:d5:50:97:e8:40:8c:00:f2:78:
                    34:11:d2:5d:14:3f:09:4e:70:ae:66:dc:1c:c5:ae:
                    fa:eb:2d:89:b2:a6:f3:52:29:7d:56:14:a4:8b:6e:
                    11:9d:4f:0a:c7:5c:b1:e2:52:1e:52:71:df:e0:b1:
                    91:2b:d8:13:2a:e4:91:da:2a:4d:4b:3e:2e:26:e3:
                    f9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:D5:A2:72:98:D0:1A:B6:62:F2:AE:6A:5E:EA:C9:0D:1E:D6:A9
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:4e:09:0e:2d:15:a3:30:de:3f:99:43:24:ba:55:22:39:8e:
         c9:3f:9f:27:5e:5e:b7:2c:cf:24:85:39:8d:0c:62:2f:eb:5d:
         cf:6d:b2:38:12:48:75:b5:de:03:a8:bc:42:8d:3f:39:bd:f6:
         bf:80:c0:8d:cf:e3:fa:f4:7a:ff:01:a5:cf:7a:fa:2c:4c:19:
         ae:76:6b:5b:4b:7b:db:26:6a:1f:eb:87:f0:83:e3:6c:7b:e3:
         f3:7f:3e:31:e9:4f:8f:1b:9e:08:18:35:3b:ed:96:64:64:77:
         89:94:14:1c:aa:23:4c:6c:bb:12:cc:d3:5f:12:54:10:ee:61:
         aa:1a:e5:21:95:12:b7:f1:8b:5b:e0:68:ac:d9:f6:c4:bf:bb:
         fd:a7:87:2f:54:43:96:f4:b6:ad:c8:af:64:b0:0b:94:80:66:
         df:f0:06:17:f7:b9:c1:e6:b3:e1:93:59:2a:41:32:4a:54:c1:
         9a:7c:b4:75:ee:64:12:1e:a3:1f:83:f5:ec:de:7c:43:45:9a:
         87:01:ed:90:91:dc:d9:53:32:46:8d:4f:13:6d:fe:b3:8d:3e:
         55:6c:76:1d:df:af:24:6d:ea:e9:17:a6:6f:83:bd:b2:95:5d:
         93:28:56:9b:95:e9:00:92:74:0f:6c:92:9f:50:8a:aa:eb:dc:
         a7:bf:1c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 10:44:10 2026 by rpki-client