Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
File:                     987QIfmRTRLUGNmqI4yTgl6l9gU.mft (raw, json)
Hash identifier:          hridD50ycbluk/d1yzUbdY7RIV+iVT8goKfqNKTXDi8=
Subject key identifier:   9D:12:C3:74:CC:81:8E:99:DD:EE:DD:19:0E:BB:19:11:97:C0:BF:65
Authority key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Certificate issuer:       /CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Certificate serial:       019FFD5B2B1EC7413C002EC5C01533CAFB18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
Manifest number:          11BF
Signing time:             Thu 13 Aug 2026 23:00:38 +0000
Manifest this update:     Thu 13 Aug 2026 23:00:38 +0000
Manifest next update:     Fri 14 Aug 2026 23:00:38 +0000
Files and hashes:         1: 987QIfmRTRLUGNmqI4yTgl6l9gU.crl (hash: zOb7bixenp/s4I5Y1Nu0H6wayM2R69xQyzBNXFmpBZo=)
                          2: q7302L2OQ1J4JgKpMluxPnKa3L4.roa (hash: CogkGEqQAlbPJasD50LgFH8JZg8Ucl8+7Lw8QmjihaM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fd:5b:2b:1e:c7:41:3c:00:2e:c5:c0:15:33:ca:fb:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
        Validity
            Not Before: Aug 13 23:00:38 2026 GMT
            Not After : Aug 14 23:00:38 2026 GMT
        Subject: CN=9d12c374cc818e99ddeedd190ebb191197c0bf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e0:c3:58:df:29:74:2e:c3:51:10:a0:28:de:
                    72:27:6d:a6:f8:a8:57:07:6d:62:f2:9e:e9:95:dd:
                    a5:a2:cc:ac:83:19:e4:41:e6:9e:9a:5c:9e:19:9c:
                    e0:07:b8:3b:86:37:c5:ca:cf:ac:d2:e8:35:08:76:
                    68:60:63:81:c9:4f:29:95:7d:9e:a3:fa:06:df:17:
                    0d:00:9f:9e:c5:b9:49:31:19:83:ff:77:af:c7:1e:
                    27:91:b4:aa:fb:8a:0f:80:ef:06:44:c2:75:5c:10:
                    bf:c5:63:f9:a5:6a:de:85:64:e7:96:e8:fc:c2:51:
                    bb:a4:84:11:e8:30:b9:99:73:11:e3:dd:bb:68:dd:
                    38:9f:33:6b:f5:36:16:69:24:09:13:f5:9a:26:22:
                    c4:f9:87:69:34:c4:b6:41:53:13:8b:62:09:ae:70:
                    f3:f6:c3:15:71:70:74:ff:c0:9f:3b:4e:ec:eb:98:
                    34:e2:b9:47:ca:f2:97:fe:27:e7:78:24:7b:63:6b:
                    1a:ed:24:4c:96:fa:5b:66:f0:60:0d:9c:ce:12:7f:
                    c1:b9:4a:91:6d:fa:71:fb:45:b1:07:ef:f3:fa:eb:
                    27:a3:9c:44:e6:d7:95:25:64:52:3f:cd:25:7a:7a:
                    30:33:88:da:49:87:f4:9a:c4:7b:42:c7:07:64:b8:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:C3:74:CC:81:8E:99:DD:EE:DD:19:0E:BB:19:11:97:C0:BF:65
            X509v3 Authority Key Identifier:
                keyid:F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:79:81:1f:96:c8:8b:b5:22:00:de:97:60:5e:cd:0b:ed:ce:
         b2:17:d8:ab:25:09:44:5a:be:01:39:e1:21:ec:b5:20:b1:9f:
         3c:bf:57:a9:8d:92:3b:bf:e2:ec:cc:bc:c2:05:68:5a:55:65:
         9c:60:39:73:2e:f6:89:e8:a7:37:71:69:b3:dd:e4:23:58:21:
         cf:56:8e:9b:44:a0:ac:ae:a9:9e:2d:29:a0:de:42:da:4d:5b:
         f1:ec:3c:4f:8b:f9:d0:36:85:04:24:bb:e5:e6:c8:da:3d:c6:
         82:06:cf:14:19:85:eb:d0:f7:18:d1:19:71:e0:13:c8:b8:b8:
         07:52:da:7d:76:82:23:18:28:51:99:0e:25:75:00:b7:09:71:
         8a:97:2f:75:b3:98:4b:28:31:a1:1c:dc:c6:c6:a5:b3:3f:75:
         37:d1:92:c0:94:78:1a:9a:4b:22:4c:31:4d:54:7b:7a:87:5f:
         7d:84:f0:ec:88:a7:38:21:6d:58:c5:01:3d:65:a4:2b:d2:fd:
         15:fc:94:3d:57:60:09:d0:1c:3f:ee:68:b9:21:38:40:e3:d1:
         21:d0:f1:52:b2:51:a8:69:7d:e7:75:48:14:15:97:10:25:21:
         05:81:d4:d5:1d:f1:3e:26:ff:4d:d9:06:74:47:d6:21:e6:35:
         47:39:b5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:33:07 2026 by rpki-client