Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
File:                     t7n8UEpNIXiuT3PId8X5B7tHa_g.mft (raw, json)
Hash identifier:          yWFFeRevNQM9xli853VyWc2rzzulwJIcpWEx59fTk3g=
Subject key identifier:   EE:5E:50:8C:09:58:64:B1:84:35:C5:87:43:31:84:07:F6:08:4F:AE
Authority key identifier: B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8
Certificate issuer:       /CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
Certificate serial:       01A0268EEB87D3AFA578CC44B2569D325F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
Manifest number:          0772
Signing time:             Fri 21 Aug 2026 23:01:35 +0000
Manifest this update:     Fri 21 Aug 2026 23:01:35 +0000
Manifest next update:     Sat 22 Aug 2026 23:01:35 +0000
Files and hashes:         1: RhYPlB5kqIX-dmV0ZFbkO4F9FQA.roa (hash: B4giMGx1nCtQi2hJ6Q8i5DGTsStHwrUH2rtSDwaQt6Q=)
                          2: t7n8UEpNIXiuT3PId8X5B7tHa_g.crl (hash: x1sLl9JqWOiaawyzg8yeeq+KRTcN115iuy5pkj9aneo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:8e:eb:87:d3:af:a5:78:cc:44:b2:56:9d:32:5f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7b9fc504a4d2178ae4f73c877c5f907bb476bf8
        Validity
            Not Before: Aug 21 23:01:35 2026 GMT
            Not After : Aug 22 23:01:35 2026 GMT
        Subject: CN=ee5e508c095864b18435c58743318407f6084fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:be:6b:37:c7:ad:f3:b1:8e:8e:a8:8e:de:
                    59:7d:28:0f:fc:0d:6d:3a:d9:96:b6:00:10:96:38:
                    68:aa:1f:de:73:67:d6:ac:c6:fb:e4:40:bb:25:ee:
                    d7:c6:b1:fa:8e:0b:1e:c6:e4:aa:05:ee:56:3f:97:
                    e4:4c:80:7d:94:ac:74:0e:78:f7:c0:93:04:ec:a3:
                    f7:81:cd:26:84:3d:b0:0f:6d:a4:9a:8a:77:5a:58:
                    9d:ed:cb:4d:2d:5b:e9:b2:97:cd:e8:e9:f3:b9:b2:
                    c3:dc:d8:6e:1a:61:af:2a:3d:ea:3a:66:e2:bf:10:
                    96:40:37:ee:03:b0:cc:47:6a:1a:a4:cd:27:b5:c0:
                    c5:ac:36:d8:40:4c:70:ed:4d:e4:fa:bb:75:cd:69:
                    d0:9d:d8:89:0e:1b:ed:23:30:00:52:48:ed:60:09:
                    56:ac:14:0a:a7:eb:39:5a:40:a2:71:3d:e1:da:8b:
                    e9:f2:8d:bd:34:3c:b6:d8:1d:83:4b:6d:8c:d2:6c:
                    c9:b2:6b:91:de:c0:64:db:63:8a:3e:ee:ea:06:dd:
                    5f:a9:57:52:fa:8e:c7:5a:a0:66:00:44:9b:bf:36:
                    da:ff:40:f2:22:46:f6:9a:93:bb:b9:ea:8e:16:38:
                    6a:5a:7e:fc:9d:62:30:8a:fa:d8:1e:b8:f4:c7:35:
                    f2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:5E:50:8C:09:58:64:B1:84:35:C5:87:43:31:84:07:F6:08:4F:AE
            X509v3 Authority Key Identifier:
                keyid:B7:B9:FC:50:4A:4D:21:78:AE:4F:73:C8:77:C5:F9:07:BB:47:6B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7n8UEpNIXiuT3PId8X5B7tHa_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/321889-abc6-43a8-b28a-bb29063f4881/1/t7n8UEpNIXiuT3PId8X5B7tHa_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:b3:c3:2f:a2:82:84:e0:c3:ba:16:d8:1b:e2:b5:5f:2f:
         26:f4:bc:6b:4f:dd:5a:4c:a1:ad:d2:a9:a3:a5:88:33:90:54:
         02:66:ad:4a:76:ef:39:4c:53:7e:08:ec:92:6d:6b:b7:b4:b7:
         40:0d:03:10:28:ec:15:ad:63:c1:81:99:00:54:50:1b:72:1f:
         b9:91:7a:6c:d0:6b:9f:6a:d0:fe:43:58:3e:68:8e:9b:d6:27:
         8f:45:45:c8:a1:19:37:df:9a:f7:af:b0:e8:b6:af:dd:33:0c:
         83:08:fa:f0:38:cf:72:c0:2d:f1:59:f3:0e:04:e8:45:94:72:
         63:af:c7:84:30:bd:d7:9c:3a:63:d5:cc:7d:9d:a2:06:2b:9a:
         84:35:13:8f:4b:0b:0a:ca:61:76:b2:95:91:39:d3:5f:d6:dd:
         b2:61:d5:73:7f:f2:4a:9e:6f:0d:6b:59:9c:3c:43:89:7c:90:
         31:65:b1:70:dc:96:18:50:b6:d1:cd:a2:d4:43:00:27:41:bf:
         90:9d:09:e7:f2:29:98:92:1e:1c:cd:51:f7:37:8e:d9:32:b2:
         5a:a4:a8:ef:26:33:fc:a7:1b:ca:66:23:d1:3c:a7:d2:c1:3b:
         58:45:ab:47:d0:c8:07:d2:bf:96:01:b3:ef:1b:8a:c4:2c:f8:
         65:77:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:52:24 2026 by rpki-client