Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
File:                     87KAXYd27t63qky-WvVozbJin8I.mft (raw, json)
Hash identifier:          xqPNZ0Qz1AzrqfcXLYEgNiKtCR6MhOJWZjWDRluseXw=
Subject key identifier:   7F:9F:AE:0E:06:21:5E:EC:AE:73:EB:5E:C7:12:0B:7A:AC:8F:BF:B8
Authority key identifier: F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2
Certificate issuer:       /CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
Certificate serial:       01A06838135C4DC9C527F3690471F0EE12D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
Manifest number:          136B
Signing time:             Thu 03 Sep 2026 17:01:40 +0000
Manifest this update:     Thu 03 Sep 2026 17:01:40 +0000
Manifest next update:     Fri 04 Sep 2026 17:01:40 +0000
Files and hashes:         1: 87KAXYd27t63qky-WvVozbJin8I.crl (hash: x8h/jKfaKgkzErGhDwd77P/vcKZ2n45PgPe6C7BsAqU=)
                          2: AspI11raW1W04hjS-S4dOvg7DJ0.roa (hash: vyR9bLbU9Kq6oSRsp+g4vq54T/skGcryAaf7JnoUv/A=)
                          3: Kt_KSYrDgcjqIw-tzOf1SsEuolE.roa (hash: iGYT2jk0/nojybC7EhwbZ+9UI5BCjZA3DlRVN4V+qoM=)
                          4: cLMf5Wd9_XCFE1K-8kc5wZs2Fi4.roa (hash: c7+KWt1SdxMn3TTxEN2hC0zORqA9HzBlfBHlbXmPphA=)
                          5: ehqv0V2Mxbz4tpd2nZ-H0adSaEo.roa (hash: 02XO0vXOdnlzhqYHTi75uxwmBCYXsERvvoqfOYq0+7M=)
                          6: uYwmLI9IgXoeBYgIJ67lD4M9yaw.roa (hash: KF+AYbOaxFn3R/9fgqU1GbRgcGguP9S+XNTb3CR98gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Sep 2026 13:57:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:68:38:13:5c:4d:c9:c5:27:f3:69:04:71:f0:ee:12:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b2805d8776eedeb7aa4cbe5af568cdb2629fc2
        Validity
            Not Before: Sep  3 17:01:40 2026 GMT
            Not After : Sep  4 17:01:40 2026 GMT
        Subject: CN=7f9fae0e06215eecae73eb5ec7120b7aac8fbfb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1a:46:42:46:00:3c:23:3a:f5:7f:bb:e6:88:
                    3a:5a:f2:95:d7:6e:1e:ea:1d:86:5e:fe:71:6f:8e:
                    9c:fb:a0:b8:00:83:8f:33:91:9b:db:3d:16:21:6b:
                    d2:fc:af:f7:0d:da:ea:fb:37:0d:68:5c:ab:ec:4b:
                    91:c4:56:14:f8:58:e6:16:55:3c:fc:4e:d3:8f:c9:
                    1b:56:c2:69:22:99:4f:55:7c:5c:e7:68:54:23:b0:
                    d8:82:14:9a:a9:a5:7f:eb:c0:74:83:0a:6c:89:3e:
                    e8:c8:55:24:13:50:11:e2:79:7d:37:6d:0f:be:92:
                    d4:18:e7:b4:13:61:53:61:5b:55:33:3f:4d:df:f8:
                    71:e5:c0:d5:d8:6f:da:a9:3a:05:45:52:6c:0c:8a:
                    c0:67:51:44:da:e8:85:d2:7b:70:bd:0e:f7:4f:2a:
                    ae:af:61:6b:16:a7:6c:aa:04:6c:d9:16:d2:4b:c0:
                    11:5c:7a:0b:fa:5e:c3:b6:a5:ca:97:c3:b5:b7:7c:
                    54:77:38:5e:08:42:27:7f:91:aa:06:93:d1:8b:bc:
                    ec:5b:8d:8b:fe:e9:f7:cc:66:d8:7d:8e:77:5f:90:
                    fd:92:30:87:09:e0:bd:47:33:da:e2:5b:e5:ca:20:
                    0d:e3:aa:ef:fe:2e:88:c5:3f:19:3e:28:31:37:87:
                    a9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:AE:0E:06:21:5E:EC:AE:73:EB:5E:C7:12:0B:7A:AC:8F:BF:B8
            X509v3 Authority Key Identifier:
                keyid:F3:B2:80:5D:87:76:EE:DE:B7:AA:4C:BE:5A:F5:68:CD:B2:62:9F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87KAXYd27t63qky-WvVozbJin8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b862d3-6844-46f7-bd98-83bc797278e2/1/87KAXYd27t63qky-WvVozbJin8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:13:3c:c0:63:22:f3:f5:2b:37:d7:d3:1a:14:a0:17:d9:
         77:8a:6c:96:ec:30:76:dc:aa:d7:b3:75:f0:8b:9c:9a:c1:43:
         0d:8b:e8:8c:16:f8:5c:74:d8:71:64:52:dd:12:9d:1a:83:9c:
         41:fe:0c:38:c8:04:46:b0:a8:47:1a:85:79:53:01:35:54:f2:
         b2:a5:09:9b:6a:0b:5f:61:6d:64:bf:c4:5d:aa:2d:ae:63:d3:
         9f:46:9e:a8:55:53:5f:fe:b7:52:b8:d9:5e:fc:b4:25:f1:a5:
         81:e6:5d:9b:16:02:89:f6:70:9e:be:f5:80:e6:99:30:0f:9a:
         a9:58:6e:85:9f:6a:c1:77:ee:b5:2a:5b:6c:1d:dc:3d:20:7d:
         6c:5d:1d:54:9b:2a:21:55:d5:50:29:4e:bf:b8:d6:36:d9:28:
         7b:28:f5:d0:5f:48:95:1d:d1:4e:3c:ff:29:9b:c1:e3:34:26:
         b0:84:f0:d1:97:49:79:51:ef:07:3f:12:9c:51:49:3a:ea:87:
         ff:c7:d5:86:cf:98:2c:8a:48:42:58:18:05:b7:a4:36:3e:b6:
         92:9a:21:94:aa:67:79:3a:da:52:c1:a9:d5:9a:0c:5b:a0:46:
         86:ee:10:68:1b:40:31:8f:f3:80:e1:48:2d:6c:4f:f3:cc:33:
         9f:02:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:35:03 2026 by rpki-client