Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
File:                     eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json)
Hash identifier:          b1Ub0vvyOsStOriMADvOQ6puuUcs7yRc9GKgGEmqYuU=
Subject key identifier:   02:8A:FE:F9:C4:E8:36:37:32:69:9D:40:13:B5:82:52:74:CF:A8:82
Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F
Certificate issuer:       /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
Certificate serial:       019FF9ECF7EFE5C41DF576DE68D8F0CD9C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
Manifest number:          19FF
Signing time:             Thu 13 Aug 2026 07:01:24 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:24 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:24 +0000
Files and hashes:         1: 5zwZDxIuULUKjp1rgcwRTBY-pVU.roa (hash: mUMWXUGRFNqTfVs8CnS61wDQkaxlvFmZ/n69Cmi6CP8=)
                          2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: r2VbZw+4rvtTvSDRDyzZ5NuT557h/eWhIiynzcWYlm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ec:f7:ef:e5:c4:1d:f5:76:de:68:d8:f0:cd:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f
        Validity
            Not Before: Aug 13 07:01:24 2026 GMT
            Not After : Aug 14 07:01:24 2026 GMT
        Subject: CN=028afef9c4e8363732699d4013b5825274cfa882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:c4:88:67:67:7c:d2:1a:18:88:d3:db:c3:
                    d0:43:c7:fe:1f:13:17:25:18:00:7a:25:72:90:1a:
                    13:b6:0b:8e:f0:96:e4:57:2c:a3:4c:d6:ca:f0:62:
                    0d:33:95:b7:11:bf:97:a7:c9:3e:e5:e5:cd:9f:9b:
                    8b:97:43:9d:c0:a5:48:99:3e:09:3f:a0:0a:d6:80:
                    9a:10:e9:7c:0d:7f:e2:3e:3e:7f:9d:03:f1:3a:b0:
                    76:4d:02:96:60:c0:a5:d0:20:8a:41:4e:d6:fb:84:
                    11:ea:c6:e9:35:66:c5:8d:02:96:60:c8:fd:9c:06:
                    e1:a1:88:b3:9d:85:28:66:cd:cb:9e:ac:a8:dc:be:
                    cb:0e:95:2a:26:d2:1d:ce:23:d0:48:19:ef:a8:85:
                    2a:10:73:71:87:7f:82:d8:ee:b1:9c:60:f4:aa:04:
                    46:82:35:5d:99:39:0e:39:11:45:86:ea:d8:d2:d6:
                    fd:1e:8b:ce:7e:bf:72:b6:09:24:b7:e4:46:b0:7f:
                    a6:ba:02:aa:2c:17:67:a3:6c:e3:c5:1e:ec:54:08:
                    50:ab:88:c9:1b:b5:9a:7a:b8:25:bb:68:ab:05:02:
                    0e:be:1b:cb:8c:ea:f5:f0:d6:28:57:b3:67:2b:54:
                    ba:8c:96:d7:e5:30:2a:cc:02:c9:08:3d:de:44:cc:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:8A:FE:F9:C4:E8:36:37:32:69:9D:40:13:B5:82:52:74:CF:A8:82
            X509v3 Authority Key Identifier:
                keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:93:b7:10:ee:4f:1b:33:d2:f2:bb:dc:34:dd:4a:55:1d:d0:
         5a:0c:76:2b:4b:cd:f3:fc:85:5b:9e:81:a9:df:63:4f:30:b4:
         f7:95:8f:bb:4d:37:16:69:8c:9f:31:68:55:7c:c9:7d:05:b2:
         89:4b:25:d1:70:45:ef:85:62:b1:b1:5a:cb:db:ce:12:61:14:
         90:1a:8c:b6:db:1d:fb:5e:a9:04:35:3c:8e:bb:39:ce:b0:4f:
         17:e2:ce:3b:9e:a3:c6:ec:be:e5:7c:2e:86:5b:50:95:bc:9b:
         14:f4:96:a9:30:95:a4:15:5a:9c:a6:bc:f7:ea:5b:6c:e3:e1:
         8e:4f:c9:b7:ae:be:e5:3a:9f:a8:67:93:1e:c3:40:56:f0:3d:
         22:87:7d:43:f4:08:50:fe:5e:52:20:99:6e:98:ec:b1:b4:1c:
         5f:d5:13:27:6f:63:ed:4c:e3:ea:72:7d:dc:53:30:0f:56:87:
         8e:f0:f1:03:5b:93:a7:4e:34:c2:60:9d:cb:53:9b:14:ce:30:
         7b:91:97:b3:07:90:08:62:79:72:f7:19:c3:2a:49:fa:4e:8e:
         d9:e2:32:48:1b:ef:6f:81:ab:b6:c1:c0:fe:08:d0:3b:1d:61:
         64:9d:6a:fc:dd:00:e7:4b:1a:ce:1b:5b:9d:5c:72:dc:ac:b2:
         5c:44:56:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:04 2026 by rpki-client