Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
File:                     fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft (raw, json)
Hash identifier:          1j1f2OCBYugkZRgcEewWWnIGm09QZUPYlvTwhXF60e4=
Subject key identifier:   CB:17:6F:BA:FA:D6:A7:3B:6D:9A:89:E5:94:1B:3F:BF:21:36:11:BB
Authority key identifier: 7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34
Certificate issuer:       /CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
Certificate serial:       01A021314FFBC59A7B9B3895D2E2795F7E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
Manifest number:          08D9
Signing time:             Thu 20 Aug 2026 22:01:14 +0000
Manifest this update:     Thu 20 Aug 2026 22:01:14 +0000
Manifest next update:     Fri 21 Aug 2026 22:01:14 +0000
Files and hashes:         1: 1WqxY3Ru6wUA1bBSLRXUbGPnrGs.roa (hash: 1Isp4qEhUMW8RbXIHRvEykaShiBFWYANN4lo8FswOgU=)
                          2: OF8_FWobXxZIravQspxAerLsQCQ.roa (hash: Y7S5oVSgN9LGWqLS5miIXFy0ldxtoJVgFrZlsFrthM8=)
                          3: fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl (hash: aA0DyjtdEBvuuhHL6p3JAMU427bp6gyDQMcM5o2P2qw=)
                          4: iYC8lbhytTD32pOwIBpaKnVh070.roa (hash: YM6e3l9qg3NAPYfHxGGt9x27m8gykxKp/xuSfybtvWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:21:31:4f:fb:c5:9a:7b:9b:38:95:d2:e2:79:5f:7e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7c7d48887e2f0865d701cdc6e0bb7deed5db34
        Validity
            Not Before: Aug 20 22:01:14 2026 GMT
            Not After : Aug 21 22:01:14 2026 GMT
        Subject: CN=cb176fbafad6a73b6d9a89e5941b3fbf213611bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c6:73:82:da:4f:f6:ab:c0:86:e6:c1:31:c6:
                    99:8f:93:c0:03:69:63:f6:bf:2f:24:85:7f:d9:b4:
                    c0:8e:b8:ce:47:1d:a4:95:27:51:0c:50:06:84:33:
                    45:90:51:68:a0:cf:8f:e8:f5:04:d7:fd:2d:6e:b9:
                    e2:aa:a1:63:02:ac:a9:22:38:de:22:2b:73:4c:27:
                    fe:55:3a:6e:c3:95:1d:eb:4e:f1:45:f8:db:e5:55:
                    09:cd:30:72:20:c5:f8:2d:db:ff:0e:0c:7c:b1:8d:
                    d5:f3:10:57:d7:78:a0:ad:5f:bb:b3:cc:77:49:29:
                    cd:88:fc:ab:8d:87:75:0f:73:f9:9d:76:ed:16:4b:
                    b3:84:a4:62:53:d5:69:2f:1d:f0:80:8b:14:a7:62:
                    da:3a:ca:dd:0d:63:51:bd:54:d1:0d:b9:ff:55:d2:
                    8a:5d:f1:c3:1d:d6:fd:d1:e7:6d:81:51:4f:0c:05:
                    0f:e4:0c:f6:a9:0c:d1:31:38:4a:73:7b:0f:1d:cc:
                    fa:f1:f5:c2:14:f4:6b:99:69:d8:b1:32:ce:d0:c0:
                    b6:fd:14:5b:2d:20:52:bb:a8:cc:a6:82:32:39:21:
                    45:a7:24:9f:f8:33:c6:8f:1c:1a:c9:f7:16:d5:29:
                    94:ea:57:27:a1:7a:9f:14:49:ee:33:08:00:8a:c1:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:17:6F:BA:FA:D6:A7:3B:6D:9A:89:E5:94:1B:3F:BF:21:36:11:BB
            X509v3 Authority Key Identifier:
                keyid:7C:7C:7D:48:88:7E:2F:08:65:D7:01:CD:C6:E0:BB:7D:EE:D5:DB:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ac11ca-7817-4e75-8eff-f7abef3c8a2b/1/fHx9SIh-Lwhl1wHNxuC7fe7V2zQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2e:b0:b6:cb:bd:d3:9a:7e:ef:2b:16:3e:35:4b:2d:88:a0:
         37:64:68:21:32:c8:2d:02:f1:b8:1b:59:c2:9d:3b:bc:76:ff:
         ff:fb:16:e6:90:8f:a8:c0:e1:7b:02:06:17:52:93:ec:d0:28:
         93:d1:63:83:77:d9:d1:c7:0c:55:7b:56:68:ec:71:3d:a6:ee:
         a8:5a:65:91:34:7c:8f:e6:10:a2:70:cc:43:a1:e9:5c:13:87:
         9b:35:64:d5:46:c9:bc:0f:87:80:2a:94:d7:47:05:09:12:38:
         1b:34:2d:ef:3d:bf:e5:7f:6d:19:a8:45:3f:fe:81:e6:e8:9e:
         a4:78:4f:99:27:8e:a3:d3:13:c5:74:87:c0:83:91:83:50:ec:
         42:f5:e1:3b:21:3d:34:a5:76:78:b4:41:c6:ee:e1:97:6c:6b:
         2d:ae:35:b3:d3:fb:9c:d6:2b:9f:29:72:5a:0d:a2:c1:4d:34:
         d0:e0:49:76:84:e9:3b:ff:8c:b9:58:b9:5a:6e:f1:86:5a:be:
         6d:1b:5f:1e:5c:2b:c3:ba:10:77:fe:ad:78:a6:58:1a:99:d2:
         e0:23:97:8b:bb:cc:40:b5:27:5b:6e:86:e0:27:ff:c1:97:f5:
         70:ba:8c:76:d8:fd:c1:e4:5a:dd:fc:b3:33:de:52:4b:86:6a:
         d2:ea:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:09:41 2026 by rpki-client