Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
File:                     iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft (raw, json)
Hash identifier:          tOxR7dk77TiBysyk0BYyX4lTrt4/+zlrpqxp2/EQwOA=
Subject key identifier:   8F:E9:38:BB:37:DB:9C:45:3A:69:48:08:A9:F9:45:A5:60:92:6A:35
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Certificate issuer:       /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial:       01A002EF725A11F0A61D5923B80C8990E12F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
Manifest number:          1ABB
Signing time:             Sat 15 Aug 2026 01:00:41 +0000
Manifest this update:     Sat 15 Aug 2026 01:00:41 +0000
Manifest next update:     Sun 16 Aug 2026 01:00:41 +0000
Files and hashes:         1: TrnV9v5epMm5AtiCr9scZHaj9pQ.roa (hash: tbVjcWp6fsr92B4Bs2SasZgRQn2hxurIa1AXpb+71H0=)
                          2: XMPEmo3VyZNZxdfu5EddVS62vv8.roa (hash: 2ZYUsjgp2DTdjQCWXZ434UAo5JDqjz2ePaAoipm0c8M=)
                          3: YklH_vepZzEkc4R0x2RBX8IDDUk.roa (hash: pv6n+2hKIVBO6+P4Pldjs2VXfAy2gbQUsUHIIXPpa8Q=)
                          4: _5saXKPRPVoWXv7DKwXGXPJ24HA.roa (hash: RXuSno2wOQ3NDjJ1eRXmfdL1UvwH5KCzdhLVEULfM7E=)
                          5: iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl (hash: qds1rGSrdV9G+Izb9f5pP4eMjKSJt+RLpM7bbg1s4sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:72:5a:11:f0:a6:1d:59:23:b8:0c:89:90:e1:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
        Validity
            Not Before: Aug 15 01:00:41 2026 GMT
            Not After : Aug 16 01:00:41 2026 GMT
        Subject: CN=8fe938bb37db9c453a694808a9f945a560926a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:05:fa:29:c6:95:34:e6:ed:d9:d2:4d:4d:
                    21:85:5b:2c:87:58:a6:47:e9:15:27:29:84:ee:ca:
                    b4:ed:38:93:a7:c4:19:77:f2:2d:eb:0c:ab:60:13:
                    58:9d:a6:0b:53:ba:41:d3:f4:64:47:84:4e:be:99:
                    bb:76:7c:a9:16:e0:32:f2:a1:0b:68:18:8a:b2:e8:
                    d9:b2:83:1f:01:fb:05:26:ec:d2:0b:6d:ea:ac:21:
                    6d:b0:e5:e7:a2:b5:49:6c:99:d6:5a:9d:00:80:47:
                    0b:e5:6d:51:b2:4a:66:9e:35:83:81:33:88:82:e6:
                    47:59:74:20:0c:1c:cb:7f:74:5f:b5:ae:8c:88:4e:
                    41:ff:ba:83:bf:5c:c6:99:1d:ee:fa:3c:a9:27:44:
                    5c:6e:42:b0:58:3c:78:af:e2:fd:bf:b8:ee:b4:57:
                    83:7c:43:d1:48:90:31:ce:20:4f:cb:54:00:30:23:
                    68:22:c8:63:c7:97:cf:c1:57:cd:55:d6:37:6c:2a:
                    1f:4b:aa:e5:c7:56:e2:1a:54:f7:13:c4:4b:f6:f3:
                    3b:1d:fc:00:2b:30:03:21:ba:8c:73:e5:62:c8:10:
                    0b:aa:8d:a2:4e:a7:64:2e:18:42:67:7a:9f:83:5d:
                    cc:26:1d:ba:26:bf:76:39:62:90:8f:42:9e:76:12:
                    94:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E9:38:BB:37:DB:9C:45:3A:69:48:08:A9:F9:45:A5:60:92:6A:35
            X509v3 Authority Key Identifier:
                keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:46:b8:41:46:73:3b:96:1d:6f:a7:88:3e:35:9d:97:18:
         05:c3:ed:cd:7f:a6:84:58:79:f5:93:7b:4c:a9:db:66:98:3c:
         62:ce:d7:f2:18:ec:9d:ae:41:74:29:4b:73:d7:dd:7d:4a:3b:
         24:da:7e:2a:59:37:06:cc:58:85:40:5a:69:6e:96:31:ca:d2:
         e9:83:02:f8:35:9f:18:73:62:72:69:92:da:98:5e:07:0a:a4:
         fc:f9:50:96:96:85:5c:1b:65:a5:c2:13:89:55:18:0d:dc:c2:
         96:9e:a3:a5:3a:3a:24:3a:fb:8c:5c:c2:50:f0:bc:74:f7:59:
         d1:a4:df:99:e7:90:78:81:e3:c1:de:76:f3:1e:90:b5:a3:e1:
         38:33:c8:30:22:76:e5:29:9b:7f:b7:a8:3b:8f:c9:67:92:e3:
         ee:54:2f:03:a1:ec:7a:cb:ac:c5:c9:1e:f7:41:43:f2:77:2d:
         3d:63:d0:49:87:f3:c9:25:44:cb:90:a4:ed:3b:ce:80:45:b1:
         13:f1:79:a1:2a:db:c5:eb:5a:3a:d2:2e:56:fa:d1:f0:ee:07:
         b0:fc:93:ac:34:1c:dc:84:cc:02:8c:ce:28:c0:52:69:3c:58:
         3c:ed:82:a1:a8:79:8f:b7:85:de:ef:18:05:d4:3a:7c:3e:7d:
         7d:ae:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:39:23 2026 by rpki-client