Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          zeV/wHpsaqOcmkYvrnoVkd3vH3XL5mXMUWQ4uRcYmPQ=
Subject key identifier:   BA:6A:57:99:1D:FA:13:54:AD:08:80:9B:C8:60:FC:12:9C:8B:71:97
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       019FFB6D0BDF2A433EBB33ECB9184C355088
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          1A07
Signing time:             Thu 13 Aug 2026 14:00:55 +0000
Manifest this update:     Thu 13 Aug 2026 14:00:55 +0000
Manifest next update:     Fri 14 Aug 2026 14:00:55 +0000
Files and hashes:         1: 0_t2wQIokLKY2kmf_7_jfNZXtiY.roa (hash: TGSr63wO3aGHJ7YGz4t10QGo266PAEIyzVMQYeVtap4=)
                          2: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: rUbHuS94gqDFO0BMhGYgRLA4iJqy1583b8secIDf0HE=)
                          3: GXO8Va2YLC7V7aizd3BeOTuhN-4.roa (hash: 0nWtOx7eW6IHu//MDqpxa/7ugR36Yc+2OMdqguEZeBc=)
                          4: Ku_3wi-krLn5NVfaK-lQlkfIQqM.roa (hash: tzGy6knJKrJ/+Tpse/PLPBsuQdf0mdcEtbCEG7Cfzkg=)
                          5: MJUSGXNaON5-u4HtTmGH6ZtrgHA.roa (hash: NNdIzpFlr2gfckuz7+ZEQiokzWnQGJIcuKaYbw6MC/U=)
                          6: jBWcdrxGs1WBnTMg4supmnaZvqw.roa (hash: 4hFJ4SHcnjUVe4H7OnBrjinQ22ICOUAmQmEaGhTqIAY=)
                          7: qhGEEQ0HGWcbgHqPIorSOb9nl0Q.roa (hash: DggCFNvWeU+DQZNC4vJn2wU5MlmsNXtXoMhViia2938=)
                          8: zgTpwMBLyKqEkj41ijMrXIxWx5I.roa (hash: bDKZ2scCeLL0RRlntw0B5EPYnDzEWkQl8FShFksXm3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:6d:0b:df:2a:43:3e:bb:33:ec:b9:18:4c:35:50:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Aug 13 14:00:55 2026 GMT
            Not After : Aug 14 14:00:55 2026 GMT
        Subject: CN=ba6a57991dfa1354ad08809bc860fc129c8b7197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3c:c8:1f:c2:d3:14:57:3d:6e:9f:90:4e:cc:
                    29:09:a6:1d:09:b9:16:96:df:fb:99:91:17:fb:13:
                    b0:1a:61:64:f5:85:b8:53:9c:ec:3f:0c:13:97:31:
                    46:b5:bb:a8:ee:0a:10:fb:90:13:1d:62:84:a8:26:
                    36:f9:df:eb:16:b5:b6:c7:0c:89:6a:99:a3:24:f7:
                    5d:e6:5b:a8:6c:0d:99:a5:8f:c7:b1:54:bb:7d:50:
                    f3:41:d7:1f:39:d4:83:97:63:c5:16:ca:d9:f8:59:
                    a7:61:71:f4:b5:74:aa:2c:48:4a:c7:46:e8:f9:71:
                    12:6b:0b:02:b9:b4:18:40:4e:65:16:b4:c6:68:6e:
                    5c:6f:59:71:1f:a9:d4:9b:8a:10:63:1f:98:83:b3:
                    e5:59:e7:22:e6:b8:e8:35:12:56:78:e3:15:89:69:
                    e8:4b:35:a0:b0:c9:c5:5c:c1:5d:a4:c2:a3:bb:62:
                    49:f3:13:d6:83:64:fa:75:57:b8:43:d3:8b:81:0e:
                    b5:25:f8:66:ec:90:61:3f:62:af:61:97:19:d2:98:
                    88:82:2f:1c:c1:a5:73:47:ae:f5:8c:e2:c2:b3:b5:
                    d9:88:ac:d8:91:7f:3d:e1:60:55:0b:e2:f6:9b:15:
                    9f:f9:03:79:8b:f5:3e:e6:c3:ca:ed:8f:22:5b:f6:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6A:57:99:1D:FA:13:54:AD:08:80:9B:C8:60:FC:12:9C:8B:71:97
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:da:db:11:c0:f8:0d:f4:fd:ef:70:ac:64:93:98:ad:73:85:
         9f:1f:29:06:18:21:cf:fe:d3:db:10:0a:44:13:41:97:12:7e:
         fa:0d:ab:06:f3:85:07:b1:34:32:b4:e3:90:65:3b:00:d1:2e:
         b0:18:58:62:7d:a8:2f:38:60:c8:f5:10:1f:6f:f1:56:91:84:
         ca:0b:91:b8:ef:75:ab:63:9e:0b:a6:94:f2:90:11:2a:b6:6e:
         81:22:70:c2:a2:33:82:22:4b:ae:a1:c4:c6:5e:9f:02:f9:94:
         15:24:27:a6:17:f1:4b:48:39:d4:b8:c3:fd:81:11:56:ba:21:
         91:9c:df:be:96:e1:b5:cf:75:47:4f:b2:4c:c5:69:ab:6c:8c:
         fb:98:10:6b:4a:e9:50:6a:fd:f2:7d:8c:2f:80:1b:be:f3:41:
         15:cd:29:cc:6c:0c:5b:45:f6:1b:12:2e:f7:f2:3c:19:77:15:
         d6:30:1f:d5:ea:f8:df:ae:c3:2a:ad:b4:30:18:ff:4e:e4:65:
         95:40:af:77:4a:46:47:a3:4d:aa:b2:ab:30:7e:5f:cc:b8:57:
         e7:65:0f:51:10:aa:25:ea:a2:dd:d0:1a:3c:5f:2e:bc:f6:6c:
         c9:65:00:3a:62:11:3e:ca:ab:f3:47:43:e8:7c:dc:e5:73:bb:
         b7:3e:e0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:13:09 2026 by rpki-client