Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
File:                     ed8llh8UGyFYbrmkC11BZtc7uMY.mft (raw, json)
Hash identifier:          TnJnF5DDkdDQ8R85wpylqjj/6kkcezwXWmdmW+YO1dE=
Subject key identifier:   BF:0C:F4:4A:54:0B:1A:B7:A5:67:A2:3A:66:5D:4D:A7:08:71:95:97
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Certificate issuer:       /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial:       01A029FDDB3D84C422795C398A395C1334D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
Manifest number:          8F
Signing time:             Sat 22 Aug 2026 15:01:37 +0000
Manifest this update:     Sat 22 Aug 2026 15:01:37 +0000
Manifest next update:     Sun 23 Aug 2026 15:01:37 +0000
Files and hashes:         1: 14vJMYWPfWJwLTm41EvJP3dxv0s.roa (hash: 6ta2h79FQjtJwBWFhRNFFHbCANlnZ9ggluTNDumd/P8=)
                          2: 2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa (hash: azGZRtp2vi+dLaLafqy17TsgwENfpndyykRPxlFzCt8=)
                          3: ColFWMx2SicSK2vPCJtdp35IxLw.roa (hash: rN/XHcCGJxpspXE9IogMlXoXWrc2sWRTkNIB4nxC/V8=)
                          4: JfePGHZn8PdBCpyVxuC72hLezmU.roa (hash: qUZTXfZZMQWlR7HAmT2PJRdk8x5fYttpFcNmzhQ5xI0=)
                          5: XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa (hash: hE1KJAdLZvP7FX5UT1YKHBqj5sFEzuymXQsrErEPbpw=)
                          6: ed8llh8UGyFYbrmkC11BZtc7uMY.crl (hash: 1w7/sGWgneVr3B1ZyrO7PEH9htPDFAu0AcSjMl3SWz0=)
                          7: z3o1Wljd8fwYujmKWAy7mtR3VdE.roa (hash: E81csimlsIdRleSilJPwt5zMyJxZ+MqkzRlol8b0D5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:29:fd:db:3d:84:c4:22:79:5c:39:8a:39:5c:13:34:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
        Validity
            Not Before: Aug 22 15:01:37 2026 GMT
            Not After : Aug 23 15:01:37 2026 GMT
        Subject: CN=bf0cf44a540b1ab7a567a23a665d4da708719597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:95:a9:37:0c:46:9a:91:5b:53:cd:01:9b:
                    b3:d7:be:22:02:ec:78:74:c6:74:24:a6:3d:84:81:
                    2e:a0:f3:b4:94:58:45:9b:ad:d0:f8:24:9f:e2:c8:
                    9e:01:3c:41:21:51:35:6c:eb:f8:d3:17:7c:dc:53:
                    4a:36:b6:8d:93:91:84:bc:cb:d0:5d:a6:ae:43:79:
                    43:72:f8:a5:ec:8e:c7:4f:6e:e6:99:96:f2:43:3f:
                    21:2c:48:21:2d:82:2d:c3:b8:cf:80:8e:db:d7:ff:
                    bc:4e:50:4a:9c:8b:a0:28:c2:e1:de:ae:65:65:6c:
                    f5:db:b8:81:3a:0b:7a:b1:76:a2:2e:03:4a:fe:d6:
                    d8:32:1e:a4:cd:7a:b4:8a:15:7b:a0:c7:9a:83:d5:
                    53:b2:5b:95:0d:64:8f:9f:8a:87:25:5a:5e:b0:3e:
                    40:2d:55:81:09:2e:de:5b:62:0a:63:f2:02:f6:c1:
                    c3:4e:d7:38:fb:29:c8:55:3b:2b:a1:88:69:17:0c:
                    90:84:57:4c:a3:3f:99:4e:af:8c:60:fc:cb:e0:11:
                    21:02:ef:b9:2e:f1:7c:69:a8:7c:31:11:85:99:15:
                    92:d2:40:77:41:2d:f9:4e:b8:ab:cb:f0:fe:20:eb:
                    8d:2f:95:d4:5d:c0:6f:c8:3d:a8:01:bb:0c:3b:37:
                    30:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:F4:4A:54:0B:1A:B7:A5:67:A2:3A:66:5D:4D:A7:08:71:95:97
            X509v3 Authority Key Identifier:
                keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:18:f4:3b:4a:7b:39:41:1f:fe:e1:35:69:90:db:77:86:99:
         76:1d:56:5c:5b:0b:6a:9f:18:68:8e:46:e9:63:98:9d:12:39:
         7c:27:f7:a9:a0:a9:68:40:d8:13:42:73:65:7c:4a:cb:b2:e0:
         77:76:7b:80:91:69:8a:f1:b5:3f:1a:37:a2:97:ad:f5:4a:eb:
         09:c3:f7:77:87:b1:3e:9d:aa:f5:fe:e9:78:f0:31:e1:67:6d:
         9f:55:ae:d1:c7:ad:1c:53:e6:5c:b9:98:37:e1:64:b0:70:a1:
         56:75:88:93:1e:b1:d8:8a:f3:c1:03:57:e8:e2:f8:c9:fb:17:
         fc:2d:47:be:74:df:88:2b:08:1d:18:54:a5:0f:b7:d9:d8:41:
         9d:d4:17:cc:68:9e:bc:73:34:9e:4f:d8:46:13:3e:2f:4f:ff:
         9b:76:d8:37:60:f3:01:a3:38:03:0d:f4:0a:ba:fe:e9:73:89:
         3b:7e:66:6d:75:f2:93:f1:9d:e3:35:1f:a8:18:38:87:60:08:
         3c:88:63:70:4e:c9:d2:22:b5:0b:62:60:d0:ba:fd:b9:fd:e9:
         f9:fc:3f:81:b5:f3:f8:54:f2:97:94:c7:fe:7c:a2:8f:c4:4c:
         9b:09:1e:33:45:db:99:1e:0f:d3:24:6c:8c:83:35:58:38:cc:
         9b:77:bf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:08:35 2026 by rpki-client