Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
File:                     eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json)
Hash identifier:          w64b/kSonYBTVLOJ4sxg3oiHIXJIdZZD8j8QaNZHMic=
Subject key identifier:   D3:F5:2E:6F:A9:09:B0:E8:06:83:CF:A8:79:81:82:28:67:42:85:C2
Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Certificate issuer:       /CN=798e0da4f91007b224768acb4d131f12517d2b7a
Certificate serial:       01A06E027D2C2F7072A62EF4B396C629E7B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
Manifest number:          0C59
Signing time:             Fri 04 Sep 2026 20:00:51 +0000
Manifest this update:     Fri 04 Sep 2026 20:00:51 +0000
Manifest next update:     Sat 05 Sep 2026 20:00:51 +0000
Files and hashes:         1: FfmG2YSQtCzDZf7LGo-eF1wiE1s.roa (hash: qrm8Hvv6ZY4XD/rO0TyVVz8/PmIjDcXusRWAzudBFPw=)
                          2: Q-_VAhr_3KM6k7h05hr8GonF39M.roa (hash: sBlSBxemwWOVZDZUFiQlhe/vEkuAulILbiLVu6l2Y+s=)
                          3: _gMstHGZPe_7SzCes23Xk4_prxs.roa (hash: UfaVFa/Va8RG4LCVknZ/sC6sc8zENIigGZfQiIzmNA4=)
                          4: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: GK0dA3mc7QVwNJTUY2W4SDr+mJd2dAIWY8gYFY38jnY=)
                          5: swQMeQBE5wb78ss3tCTd5K3tnlI.roa (hash: uIGxjGabnvBWdl9aXtwznXWVFMHKBrwT9BZDyH0VO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:02:7d:2c:2f:70:72:a6:2e:f4:b3:96:c6:29:e7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a
        Validity
            Not Before: Sep  4 20:00:51 2026 GMT
            Not After : Sep  5 20:00:51 2026 GMT
        Subject: CN=d3f52e6fa909b0e80683cfa879818228674285c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a8:12:4e:eb:29:a2:f6:38:79:f8:bd:0e:32:
                    fe:95:5d:7e:64:63:ce:3d:5e:ac:da:8a:b3:85:20:
                    7e:ea:46:4c:31:47:9f:bc:a9:cb:35:cd:92:2e:b0:
                    b5:5f:d3:53:b9:08:e5:96:2d:ef:da:2e:c1:25:70:
                    44:de:f4:ff:d0:5f:65:b5:f0:ac:07:37:5a:09:e5:
                    f0:bd:f4:da:69:ee:5e:07:88:ed:99:95:b3:ed:ab:
                    a3:26:6f:40:0d:bf:ac:ea:c1:77:3f:33:2f:e4:87:
                    54:90:1f:f9:55:5f:a5:b2:bd:22:03:e4:55:5b:ce:
                    ef:48:30:c8:9d:f3:96:00:78:a5:71:ad:ac:f9:6f:
                    4c:da:d7:ab:a5:84:0c:83:6e:6f:15:f9:86:5f:b9:
                    a0:23:38:74:c4:82:1a:21:d1:ee:22:b7:28:a1:25:
                    05:1f:11:29:12:23:b8:cb:3e:ee:b3:c0:98:9c:c5:
                    29:89:88:0c:ca:bc:b2:dd:6a:e6:4e:ce:a7:3a:bf:
                    48:27:96:02:cc:4c:7d:24:42:b8:96:04:36:7f:89:
                    97:cf:df:d8:f5:13:9f:e2:03:c4:74:67:e2:20:fa:
                    41:e0:bd:88:96:6a:51:e3:df:b8:6e:ec:48:53:fe:
                    b2:25:18:ca:22:a3:a0:ba:f5:ed:37:a9:59:74:d0:
                    6b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F5:2E:6F:A9:09:B0:E8:06:83:CF:A8:79:81:82:28:67:42:85:C2
            X509v3 Authority Key Identifier:
                keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b0:8c:28:39:43:dd:f3:79:a1:50:0b:a4:3d:e4:ca:47:8c:
         70:52:2c:12:ad:03:42:4b:2c:11:e1:20:86:45:34:bd:03:6b:
         5f:be:68:ef:7e:fb:7b:f4:bb:ca:72:d3:f3:de:06:31:16:73:
         a8:10:0e:49:bc:c8:0a:3b:fc:ba:b2:8a:fd:31:33:84:1f:61:
         46:22:93:24:21:a0:a1:32:21:c5:6b:f2:fd:28:f0:6b:d4:4f:
         31:ff:08:69:58:33:db:99:f6:7b:c8:b8:21:c3:4c:58:ab:79:
         ea:f2:96:95:73:91:16:2b:98:79:5c:5c:01:2e:dc:36:fb:3c:
         d8:83:a8:a3:57:b8:81:2d:f5:30:86:15:26:07:20:57:b7:e7:
         37:8b:cf:4a:5f:67:6c:39:ef:0f:b3:50:f6:2e:44:df:00:c6:
         4d:2a:3c:fd:c0:5d:ee:6f:b9:68:79:32:5e:01:b1:6e:ae:74:
         5c:d5:2c:95:69:06:45:97:76:45:e9:f8:95:74:bc:f5:b0:62:
         e7:e8:30:1b:98:14:e3:30:50:da:e4:12:a1:62:90:4f:a9:be:
         40:f5:d3:17:aa:e5:18:65:27:d7:fc:e2:ed:2e:5c:cc:f0:0d:
         8e:83:b0:94:6c:f4:e6:1f:d1:8e:49:4e:53:27:2e:b4:73:1c:
         80:b5:db:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:50:16 2026 by rpki-client