Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
File:                     7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft (raw, json)
Hash identifier:          ne9HPpNYxayCbvEb3OAnisEK6na+UoG6/aWhLoKngIg=
Subject key identifier:   B7:BE:FD:54:B4:64:3D:64:44:BC:17:2E:4F:58:60:0E:E5:7E:ED:86
Authority key identifier: EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90
Certificate issuer:       /CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
Certificate serial:       01A0016FD497742956185D9A33D79A1AF694
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 18:01:41 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:41 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:41 +0000
Files and hashes:         1: 16IES9haatKMkP-HejVSazJdMkY.roa (hash: mQPtnV+K2FeabOm74g9Ubv3nHZo4wLPT4wK0cMDSkes=)
                          2: 7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl (hash: UsMrWwzVz7sbmbo1+U5DmiGH66vOoMGMYyF4IdqMxGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:d4:97:74:29:56:18:5d:9a:33:d7:9a:1a:f6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec7f4a3387db838cda837ab92a6ce8f6ffc3c990
        Validity
            Not Before: Aug 14 18:01:41 2026 GMT
            Not After : Aug 15 18:01:41 2026 GMT
        Subject: CN=b7befd54b4643d6444bc172e4f58600ee57eed86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:28:2b:d0:5f:d0:7f:6e:25:ea:c9:d6:13:20:
                    35:33:5b:97:10:19:f3:31:6e:e5:1d:b0:05:2e:35:
                    7f:20:9c:b3:91:25:ba:f2:cd:82:c7:14:38:51:db:
                    08:4a:5b:38:25:a3:85:46:ba:06:d2:30:61:84:48:
                    21:9b:db:1b:80:71:bf:ed:de:22:dd:e2:22:b4:aa:
                    0b:85:42:9b:2d:ad:d4:ff:08:66:d2:85:18:c6:b2:
                    ed:e5:dd:13:9a:a9:b8:b8:4a:a4:91:ec:7d:ca:b3:
                    db:97:53:4e:9e:3c:a7:60:71:32:bb:48:56:1c:c2:
                    2e:e2:8a:ad:54:bd:75:dd:c2:f7:61:6e:eb:2b:3a:
                    66:d0:1e:12:87:ac:1b:ee:22:7b:14:e5:0a:18:1f:
                    7d:f2:98:ff:d6:c2:cf:05:7b:6a:3b:0f:46:e1:dd:
                    ac:86:d4:f6:1c:e8:b3:70:e5:58:05:b4:ec:a6:6e:
                    36:8b:5d:ff:e0:a6:69:7d:5b:e9:81:26:26:c9:3c:
                    bd:94:7a:2b:b8:d8:00:24:53:41:02:97:ae:6a:61:
                    04:0a:79:cc:37:ed:a9:5f:58:46:52:b4:d6:b5:05:
                    63:80:b1:c3:4c:2d:a9:ec:e2:0a:54:f5:b6:be:1d:
                    94:20:ad:66:44:bc:b1:c6:68:9b:58:9c:db:8b:ae:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:FD:54:B4:64:3D:64:44:BC:17:2E:4F:58:60:0E:E5:7E:ED:86
            X509v3 Authority Key Identifier:
                keyid:EC:7F:4A:33:87:DB:83:8C:DA:83:7A:B9:2A:6C:E8:F6:FF:C3:C9:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7H9KM4fbg4zag3q5Kmzo9v_DyZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/22f729-97a8-408b-b3e5-8a865fd621c8/1/7H9KM4fbg4zag3q5Kmzo9v_DyZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a7:57:25:ce:bc:69:5e:dd:e0:17:c8:e7:47:74:ef:c1:28:
         f3:f9:52:0d:33:54:86:a1:dc:14:e0:71:2e:5e:d3:86:70:50:
         3d:75:5a:ce:dd:13:95:28:d9:44:58:a5:82:33:f1:8c:5c:ec:
         24:8f:56:61:9f:87:fc:9b:89:21:8a:65:33:7b:92:cd:73:9f:
         a4:22:d0:12:2c:a5:fa:6f:33:4d:9a:48:ef:40:ee:3b:ff:8e:
         75:55:72:07:22:78:82:f7:61:de:0a:1b:0b:9c:a6:2f:98:3a:
         8f:e6:66:f4:71:73:a0:5e:58:3d:5b:d2:4a:05:6a:2c:cc:22:
         79:59:81:f1:37:3e:e0:37:95:38:4d:7a:7b:28:0c:0a:23:14:
         49:c6:45:7c:a7:dc:62:9e:1e:b4:36:3e:bb:d7:2c:f0:f3:62:
         ce:5f:77:ea:a7:33:d1:82:b9:8b:06:8b:0f:fa:75:28:08:4d:
         77:81:d2:2f:9f:07:a7:10:14:68:4b:25:59:a7:ed:cb:57:5b:
         8c:e6:0d:ca:36:90:98:18:b0:2a:95:e7:8e:4b:cf:9c:61:ad:
         d3:88:15:6a:4c:2e:10:f0:45:cc:f7:96:67:b5:cc:3c:bc:09:
         bb:2e:4b:a3:f9:4e:25:75:a7:05:d3:35:b7:e1:24:f4:25:33:
         4c:13:d5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:30 2026 by rpki-client