Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
File:                     7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft (raw, json)
Hash identifier:          7FqIE7Wx5ffQpxeNzdK3wJp0MdMhi4LPMXXTJo9vtYc=
Subject key identifier:   25:6D:85:65:20:C1:D4:4B:8C:79:B4:E0:9E:80:B8:B5:B4:8C:AC:7C
Authority key identifier: EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69
Certificate issuer:       /CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
Certificate serial:       01A05A45969695BD4ED9D51CC76F234CD855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
Manifest number:          A8
Signing time:             Tue 01 Sep 2026 00:01:44 +0000
Manifest this update:     Tue 01 Sep 2026 00:01:44 +0000
Manifest next update:     Wed 02 Sep 2026 00:01:44 +0000
Files and hashes:         1: 7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl (hash: pbGHOwYJxUgLY3i21GF8NPJNfYvx87J7yf9J6y3BIak=)
                          2: HCihUF_5hDpIqXqYUJrzBJumeUI.roa (hash: f9CXT6KQWpEiwwhV9yK1XmVpJI+yxpUMYfkH0B1xxTc=)
                          3: K5IqS4P79U0rKvWInjWR5wEFe2Q.roa (hash: 9q13mYvOIEN+e4PDt27Up4NO4FxU8lAzXOS+dNjdg84=)
                          4: d7Aas885l3KjzbxzDRzrGQP7qlo.roa (hash: 49B2bk75lbQU3fm+06dc2qLUyXkN1RUhU0NMkmUUNbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Sep 2026 21:38:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:5a:45:96:96:95:bd:4e:d9:d5:1c:c7:6f:23:4c:d8:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee49dd9619dbcfe0e7c497d679c8a0e99b45a69
        Validity
            Not Before: Sep  1 00:01:44 2026 GMT
            Not After : Sep  2 00:01:44 2026 GMT
        Subject: CN=256d856520c1d44b8c79b4e09e80b8b5b48cac7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:5f:2d:3e:b8:3f:97:7b:b3:48:76:b8:fe:20:
                    9a:d7:cb:55:c9:0b:b6:6a:d2:d4:76:d3:03:47:ba:
                    89:3f:5b:fd:7c:26:8c:ec:c4:94:db:68:2f:f5:99:
                    f6:59:e1:22:f8:77:65:c1:8d:96:f8:fc:65:53:d1:
                    5e:77:ad:4e:50:d1:44:7e:59:97:6e:ea:66:cf:43:
                    61:6c:36:c6:03:26:d8:cf:53:a1:02:56:ba:15:8c:
                    13:50:87:e6:b9:b6:27:30:26:73:83:91:6f:46:84:
                    58:a9:f2:5f:dc:84:be:de:82:5e:63:d0:06:91:c4:
                    55:c9:a7:91:77:68:41:4c:31:c9:c9:ed:40:70:75:
                    a6:39:97:e5:05:8e:ed:bd:df:be:df:60:e9:d0:c3:
                    ae:bc:17:37:a2:c5:c0:37:1f:cc:0b:1b:ee:30:93:
                    00:d3:c1:ce:ac:93:b9:b1:da:06:cb:e8:b0:00:7d:
                    eb:f9:1f:72:7a:5d:c4:10:03:c0:a2:d9:3b:49:6c:
                    96:ba:77:de:cb:6a:14:c4:c8:d4:32:ef:b3:95:02:
                    22:c3:31:39:f3:4b:d4:b9:6b:bc:e8:09:e6:f2:66:
                    25:43:9a:db:6c:20:e7:9d:50:71:e1:3a:55:1d:6d:
                    71:5a:e0:91:41:28:4f:5b:29:fb:73:25:a7:fa:58:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6D:85:65:20:C1:D4:4B:8C:79:B4:E0:9E:80:B8:B5:B4:8C:AC:7C
            X509v3 Authority Key Identifier:
                keyid:EE:E4:9D:D9:61:9D:BC:FE:0E:7C:49:7D:67:9C:8A:0E:99:B4:5A:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/7uSd2WGdvP4OfEl9Z5yKDpm0Wmk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:c8:58:e9:27:74:40:ef:43:c6:25:02:9e:f2:fc:56:bf:
         54:ea:17:b5:46:d5:24:35:f5:83:f6:4f:ba:3c:b1:43:e1:12:
         ef:59:a5:d9:83:c9:d3:43:36:ed:e9:92:74:c6:c8:a3:34:a1:
         89:34:3f:c0:d1:99:f9:53:a2:32:99:92:2b:d0:9d:0c:f9:bd:
         53:01:92:ae:ad:71:eb:74:99:01:ec:53:1b:fb:c3:00:a6:9c:
         d5:4c:2a:1b:4b:bf:99:96:e2:86:98:77:2a:1d:d7:c9:87:45:
         a0:ea:d1:56:54:f3:13:08:8e:6d:9f:5d:0b:1e:13:5c:c4:dd:
         6e:02:c5:cb:18:13:52:0d:dc:d4:57:77:a8:f6:fd:f2:ed:10:
         a4:b3:ad:84:c5:1a:0a:92:84:b1:bf:4b:18:78:88:fd:99:26:
         3a:49:ec:c9:57:d3:31:78:7f:2f:f9:62:f5:eb:da:78:00:30:
         a3:54:50:cf:49:5c:45:3d:c5:20:69:0f:76:d1:11:b7:4c:e9:
         8b:d4:61:b5:21:1a:45:1b:ac:50:e9:25:19:ce:44:40:2a:fc:
         7d:de:f9:a2:1c:d7:1d:df:66:02:79:92:bc:58:db:3b:e3:02:
         ac:51:af:74:a3:55:4f:2d:a8:01:e8:79:91:fd:00:dd:7b:17:
         14:0a:9c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:36 2026 by rpki-client