Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
File:                     rEurYHxtG3yr2rprD6lzh7jGaEI.mft (raw, json)
Hash identifier:          +jQhJpJkvsVYW2qRUsfR5opYA5u+mj4mQx9KS+n3jjo=
Subject key identifier:   A4:B6:24:19:DE:6C:02:D8:69:C8:29:55:67:38:D4:F6:F2:44:8D:FD
Authority key identifier: AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42
Certificate issuer:       /CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
Certificate serial:       019FF7FE4648FB66671035EB2FF8B3737033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
Manifest number:          E0
Signing time:             Wed 12 Aug 2026 22:01:04 +0000
Manifest this update:     Wed 12 Aug 2026 22:01:04 +0000
Manifest next update:     Thu 13 Aug 2026 22:01:04 +0000
Files and hashes:         1: pgBBKcazaoiXCzEzUp_gTetVvEk.asa (hash: Dh/MX1NMsxQMvM6tInaE9dYK7D88X4+TEFqSEG4SvSk=)
                          2: rEurYHxtG3yr2rprD6lzh7jGaEI.crl (hash: nEByJPwGTXLHdOK/gnhAW2rkAWCIWNmJfVI8lJ4Lkoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 22:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:fe:46:48:fb:66:67:10:35:eb:2f:f8:b3:73:70:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4bab607c6d1b7cabdaba6b0fa97387b8c66842
        Validity
            Not Before: Aug 12 22:01:04 2026 GMT
            Not After : Aug 13 22:01:04 2026 GMT
        Subject: CN=a4b62419de6c02d869c829556738d4f6f2448dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c5:1f:31:89:16:82:0d:ac:34:03:7f:6d:bc:
                    e1:f9:11:31:09:bc:4b:48:e1:ef:97:98:79:9c:88:
                    62:15:ba:20:b6:37:ec:09:8d:aa:d1:1a:44:a5:c0:
                    68:b9:a5:a0:e8:f8:3e:38:37:8e:6d:d4:a0:72:68:
                    55:39:ba:e0:1c:38:1e:33:85:83:dc:c0:ff:b6:7f:
                    05:05:d9:0b:40:e9:51:3c:3a:19:00:43:20:c1:95:
                    89:09:45:70:16:da:99:66:eb:46:fe:51:96:ef:88:
                    e2:01:9a:0a:ec:3d:73:16:eb:92:9d:8f:ca:db:53:
                    b1:eb:95:24:17:e2:3d:25:e9:63:1f:3d:83:f8:ef:
                    04:8c:1b:f6:1e:be:03:57:c6:eb:f4:96:0e:ed:17:
                    1d:e4:db:49:6e:73:d6:93:c6:9a:13:71:be:d9:57:
                    41:f8:ca:2c:29:67:a1:89:d5:50:69:cf:d2:4d:c3:
                    33:0e:d4:17:06:a3:2d:4a:6d:b0:22:d5:5f:03:87:
                    3a:e3:66:6c:9f:76:09:f6:07:dc:f9:54:cf:f9:ba:
                    c8:29:54:9c:e6:53:0a:0c:7a:81:57:75:0c:65:d7:
                    43:e7:4f:d9:89:7d:35:17:b3:ce:ea:50:ab:23:e9:
                    e7:9a:37:2e:91:11:e4:6f:5c:37:39:5e:7b:87:ba:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:24:19:DE:6C:02:D8:69:C8:29:55:67:38:D4:F6:F2:44:8D:FD
            X509v3 Authority Key Identifier:
                keyid:AC:4B:AB:60:7C:6D:1B:7C:AB:DA:BA:6B:0F:A9:73:87:B8:C6:68:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEurYHxtG3yr2rprD6lzh7jGaEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/33bb7b-6961-4666-8c7c-b49328a83c7a/1/rEurYHxtG3yr2rprD6lzh7jGaEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:fb:48:b0:0b:40:e9:85:02:ad:94:33:75:38:b6:01:34:0c:
         c0:03:e0:1e:4a:18:ec:4e:7a:45:ef:5b:20:05:28:c1:87:bd:
         39:62:49:fd:fb:51:fd:98:cc:78:de:d0:0f:d4:25:72:28:95:
         6d:53:60:4e:6c:22:5e:9f:b5:b5:da:54:bc:91:f0:e5:2d:44:
         7f:80:2b:5e:78:c8:4e:10:93:96:57:bd:a5:27:16:68:1a:49:
         78:73:9d:5e:bd:b0:e1:14:80:c8:a4:ff:2e:f7:a6:68:f2:d6:
         ef:2b:33:d7:8f:61:00:22:9c:c3:ed:54:19:45:b4:46:01:d7:
         7f:fc:a3:41:ae:a6:30:58:ed:3a:07:91:62:55:e9:1f:20:97:
         54:8a:ec:cb:94:fc:8d:79:d2:f4:ca:eb:2b:86:d9:f5:31:5f:
         78:64:c5:3b:3c:eb:45:43:7b:7e:2e:52:47:48:a1:f6:be:d0:
         ef:30:3d:04:86:36:5e:95:33:bf:9a:23:74:e9:de:93:b5:86:
         08:60:b9:81:9b:29:eb:18:c4:26:5e:5f:eb:38:63:57:84:42:
         85:c5:e8:ed:d2:c1:9e:67:d9:18:88:ad:64:16:8d:ff:62:5d:
         d0:57:75:09:cb:d0:b4:78:e3:63:c3:a6:b4:52:6e:23:4f:b4:
         dc:6d:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:44 2026 by rpki-client