Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.mft
File:                     tmYSHbeEve22HdDfxuD6cPeUc6E.mft (raw, json)
Hash identifier:          2nbNqA1fc6/BaiT1xZMig80exEmp2hONsoBi5emBYLY=
Subject key identifier:   41:F3:27:E6:6B:83:F7:7A:0B:09:1A:8B:57:52:C5:2D:EC:74:F3:75
Authority key identifier: B6:66:12:1D:B7:84:BD:ED:B6:1D:D0:DF:C6:E0:FA:70:F7:94:73:A1
Certificate issuer:       /CN=b666121db784bdedb61dd0dfc6e0fa70f79473a1
Certificate serial:       01A0016FD3F741F99BC1377CFDCF086BE8A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:40 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:40 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:40 +0000
Files and hashes:         1: N_jcx-vMMZQ-ggznBt4qC1gKoBU.roa (hash: OloQSKGZhoZGC+V0qLNb1liAFb+q8aqVMFhoZc42dnw=)
                          2: tmYSHbeEve22HdDfxuD6cPeUc6E.crl (hash: hT+1aopk+7SU0JukszGK8speI5lKV/6Y0b2dm1TQSbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d3:f7:41:f9:9b:c1:37:7c:fd:cf:08:6b:e8:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b666121db784bdedb61dd0dfc6e0fa70f79473a1
        Validity
            Not Before: Aug 14 18:01:40 2026 GMT
            Not After : Aug 15 18:01:40 2026 GMT
        Subject: CN=41f327e66b83f77a0b091a8b5752c52dec74f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8e:21:97:3e:a4:db:00:4e:5a:3b:48:af:ce:
                    ec:30:e1:04:d3:23:a8:33:77:cc:b6:10:e9:a8:16:
                    2f:41:1b:60:79:c0:17:a5:51:51:ff:29:d5:1f:0c:
                    ce:68:9c:4a:8e:9a:7b:f3:eb:46:8f:c9:89:f6:9c:
                    75:69:ea:86:ee:44:f5:d8:04:3a:a2:23:4f:26:23:
                    1e:1a:fe:fc:c9:0b:d2:8c:e1:af:14:ba:14:79:9b:
                    36:2a:e4:95:e1:52:d3:c1:a3:9c:29:eb:dd:a4:9e:
                    80:4f:87:bd:9d:6f:6b:5f:4e:f2:7c:e1:6c:92:4f:
                    32:eb:10:84:82:bc:a3:5e:df:bf:1e:9c:d3:e7:55:
                    92:1d:9c:d8:51:26:be:58:84:f0:c6:60:96:45:55:
                    74:3d:8a:ff:89:d8:bc:7a:50:2f:a0:15:89:f8:28:
                    80:b8:0f:f6:7b:bf:33:a8:51:2c:4b:01:31:16:db:
                    0f:0a:fb:76:a2:3f:4f:09:74:3c:d0:cc:fd:d4:65:
                    52:a1:c9:f3:51:e7:16:1e:66:24:74:d0:5f:3f:cb:
                    2f:e7:82:87:89:76:c4:f2:58:b3:6d:be:71:2b:6f:
                    b6:25:98:40:63:10:8d:e1:94:9c:87:52:b4:b8:08:
                    83:33:74:5d:a5:ee:4c:8a:b8:de:78:d8:53:93:81:
                    fb:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:27:E6:6B:83:F7:7A:0B:09:1A:8B:57:52:C5:2D:EC:74:F3:75
            X509v3 Authority Key Identifier:
                keyid:B6:66:12:1D:B7:84:BD:ED:B6:1D:D0:DF:C6:E0:FA:70:F7:94:73:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmYSHbeEve22HdDfxuD6cPeUc6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/tmYSHbeEve22HdDfxuD6cPeUc6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:d8:80:48:18:17:07:61:f1:93:b1:94:3b:40:8b:05:3f:
         5c:b3:01:d6:c4:97:b5:fc:26:42:3e:1e:65:0a:bd:55:11:39:
         1a:6d:2d:d7:e9:56:73:26:8f:f4:36:44:84:d5:25:c5:02:27:
         32:97:c3:b5:1c:9f:1c:eb:2e:b5:49:62:4e:fc:8b:5d:f5:f6:
         20:14:57:cc:0b:90:8e:d1:c4:88:c6:a2:96:dd:3a:a0:cf:cb:
         1e:34:f7:03:21:1a:43:b4:ce:2b:28:8f:cd:8d:01:52:0c:b2:
         86:7d:f0:28:c7:0e:60:28:9c:55:52:ff:83:81:d0:fb:89:f7:
         60:9a:bd:96:dd:0f:bc:bb:ac:33:30:37:0a:96:14:41:7d:da:
         58:7a:c8:6d:01:0e:2b:28:11:16:d4:af:c7:6a:9a:b9:f3:71:
         2e:1e:7a:1c:83:fa:f3:ff:81:3b:f2:32:42:c3:b0:b4:f3:d0:
         95:88:be:41:c3:d4:68:01:8b:af:da:cf:a8:9b:69:67:bf:3e:
         34:cd:e2:1b:e6:8f:65:e9:53:66:15:93:99:fb:bd:76:22:5e:
         81:89:20:26:e2:2e:b0:9f:f2:b0:67:1e:c5:cf:4f:b5:28:a5:
         2d:f9:16:a4:9a:04:b9:0c:3e:e3:4f:28:62:86:ce:81:10:72:
         f1:00:9d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb9P3QfmbwTd8/c8Ia+ilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2NjYxMjFkYjc4NGJkZWRiNjFkZDBkZmM2ZTBmYTcwZjc5
NDczYTEwHhcNMjYwODE0MTgwMTQwWhcNMjYwODE1MTgwMTQwWjAzMTEwLwYDVQQD
Eyg0MWYzMjdlNjZiODNmNzdhMGIwOTFhOGI1NzUyYzUyZGVjNzRmMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7I4hlz6k2wBOWjtIr87sMOEE0yOo
M3fMthDpqBYvQRtgecAXpVFR/ynVHwzOaJxKjpp78+tGj8mJ9px1aeqG7kT12AQ6
oiNPJiMeGv78yQvSjOGvFLoUeZs2KuSV4VLTwaOcKevdpJ6AT4e9nW9rX07yfOFs
kk8y6xCEgryjXt+/HpzT51WSHZzYUSa+WITwxmCWRVV0PYr/idi8elAvoBWJ+CiA
uA/2e78zqFEsSwExFtsPCvt2oj9PCXQ80Mz91GVSocnzUecWHmYkdNBfP8sv54KH
iXbE8lizbb5xK2+2JZhAYxCN4ZSch1K0uAiDM3Rdpe5MirjeeNhTk4H7oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHzJ+Zrg/d6Cwkai1dSxS3sdPN1MB8GA1UdIwQY
MBaAFLZmEh23hL3tth3Q38bg+nD3lHOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG1ZU0hiZUV2ZTIySGREZnh1RDZjUGVVYzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt
NjE5NDkzNTZhOWEwLzEvdG1ZU0hiZUV2ZTIySGREZnh1RDZjUGVVYzZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw
LzEvdG1ZU0hiZUV2ZTIySGREZnh1RDZjUGVVYzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANWvYgEgY
Fwdh8ZOxlDtAiwU/XLMB1sSXtfwmQj4eZQq9VRE5Gm0t1+lWcyaP9DZEhNUlxQIn
MpfDtRyfHOsutUliTvyLXfX2IBRXzAuQjtHEiMailt06oM/LHjT3AyEaQ7TOKyiP
zY0BUgyyhn3wKMcOYCicVVL/g4HQ+4n3YJq9lt0PvLusMzA3CpYUQX3aWHrIbQEO
KygRFtSvx2qaufNxLh56HIP68/+BO/IyQsOwtPPQlYi+QcPUaAGLr9rPqJtpZ78+
NM3iG+aPZelTZhWTmfu9diJegYkgJuIusJ/ysGcexc9PtSilLfkWpJoEuQw+408o
YobOgRBy8QCd+w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:53 2026 by rpki-client