Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
File:                     7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft (raw, json)
Hash identifier:          yyh8yN1ioLtCN56Tc88zlUvYqpHKcEV0RdP7j8e4gis=
Subject key identifier:   39:70:4D:13:7B:F7:1F:41:49:C3:2A:7B:85:14:1D:89:8E:1D:01:AF
Authority key identifier: EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56
Certificate issuer:       /CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
Certificate serial:       01A0035D6F56CE8CDE9A0D9EC695248E9CFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:00:50 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:50 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:50 +0000
Files and hashes:         1: 7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl (hash: WnJOIPcDlRmTSQCkERBxEinlBbkIdX9VUXLYizrnrJo=)
                          2: MFHvUPrYAeDk8SpBoizdIOrRDfA.roa (hash: ppOuHRLYDTC+js6b7NOJZskTOOb+m18mpkOOGMItddw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:6f:56:ce:8c:de:9a:0d:9e:c6:95:24:8e:9c:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8c5af1c16e1518cc4392284a1a0e54f4cbf756
        Validity
            Not Before: Aug 15 03:00:50 2026 GMT
            Not After : Aug 16 03:00:50 2026 GMT
        Subject: CN=39704d137bf71f4149c32a7b85141d898e1d01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:86:4f:de:39:6d:2f:27:06:4f:8e:dd:81:11:
                    2b:31:17:6d:43:84:74:cb:30:c4:f5:9a:7b:6f:23:
                    0b:eb:1b:d7:22:93:5f:01:39:b6:0b:bc:78:5f:14:
                    98:be:31:bf:75:84:fe:ae:d4:84:96:cd:5b:08:e0:
                    ab:d7:7d:a5:fa:22:25:3f:8e:02:90:dd:42:a3:04:
                    25:b8:7a:70:c9:21:3a:9d:1e:7c:5a:8d:53:5a:aa:
                    8c:d7:6a:eb:cb:eb:13:29:19:61:7b:64:9e:f6:66:
                    eb:ef:72:13:70:e3:86:7a:cd:87:64:9e:3c:6a:2d:
                    3d:ad:ec:93:b8:9f:a3:15:d2:55:c7:41:8c:e2:39:
                    62:9e:39:b0:cd:63:5a:9d:8d:88:00:1f:e3:6e:ab:
                    93:5c:e7:91:1e:14:ca:27:ce:57:fa:3e:24:49:c5:
                    58:a8:e6:4c:fc:12:f7:79:2e:ba:67:ea:f4:05:fc:
                    29:18:5c:91:56:41:31:9b:f4:66:b7:00:16:87:37:
                    94:8b:c1:c0:8d:ac:be:36:3a:52:b8:a4:04:09:c6:
                    d7:3d:34:80:d7:f4:15:b9:b7:50:52:77:99:54:c1:
                    95:a9:a5:7f:3f:c9:6b:ae:bc:ed:36:dd:89:2f:32:
                    64:d0:58:80:3e:00:6a:d8:81:b4:51:c1:85:bb:ee:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:70:4D:13:7B:F7:1F:41:49:C3:2A:7B:85:14:1D:89:8E:1D:01:AF
            X509v3 Authority Key Identifier:
                keyid:EE:8C:5A:F1:C1:6E:15:18:CC:43:92:28:4A:1A:0E:54:F4:CB:F7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oxa8cFuFRjMQ5IoShoOVPTL91Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/7oxa8cFuFRjMQ5IoShoOVPTL91Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:34:cf:b0:ca:33:4c:94:86:c7:59:7f:d7:17:91:2c:76:ad:
         5f:f0:47:f4:d1:2e:03:50:a5:93:56:3a:e0:80:29:a2:7d:ef:
         5e:81:68:e5:db:80:72:89:ce:f9:ce:a1:ed:d6:c0:a6:8a:dd:
         aa:38:bf:80:ae:2b:1a:f8:27:2e:d6:1d:61:26:5d:18:f5:ff:
         13:37:52:1d:34:af:75:69:5d:6b:bb:e4:48:4f:52:ef:53:51:
         bd:bb:35:4e:dc:63:e4:ae:de:9d:2f:de:e8:f0:ef:87:6f:48:
         94:55:3d:05:76:79:04:1b:2c:95:32:20:bf:dd:5b:ed:29:ed:
         1f:b8:60:fe:15:b3:71:91:36:ec:b4:ad:af:6c:c9:46:34:c9:
         f5:82:f9:c8:c0:fd:9e:ce:d3:24:c2:54:00:ce:82:c6:53:f7:
         83:62:12:ed:c2:b2:cc:f2:f3:71:e5:f9:c8:65:b8:60:d6:d9:
         fe:1f:1e:99:f9:5a:65:f1:b6:df:a4:15:b0:28:b5:f4:f9:00:
         3b:eb:8e:b2:ba:0f:46:13:e6:c1:62:21:71:6b:00:09:d0:ee:
         96:d1:0f:e5:a4:3a:d6:a0:d1:88:3b:80:8d:95:a0:0b:3e:9e:
         7f:30:8a:45:5f:53:ee:70:fa:31:63:cc:6b:40:16:f9:0c:c4:
         58:b8:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:51:23 2026 by rpki-client