Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
File:                     88l76mwoNiWsmbJkJD6K1iNUZco.mft (raw, json)
Hash identifier:          ZhtmNCXQcN5cT8SnXRbRrsQe8HYsDWgKqXctGjiJMtA=
Subject key identifier:   EF:12:93:E7:8B:2E:D7:C7:F2:08:53:22:F0:F9:8F:3D:6E:1B:A8:03
Authority key identifier: F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA
Certificate issuer:       /CN=f3c97bea6c283625ac99b264243e8ad6235465ca
Certificate serial:       01A0016F53DAEDAB10059A115C5967A04B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:08 +0000
Files and hashes:         1: 4Ov0JI_v7tP6AVK_zNZvfvoYzKc.roa (hash: gmmvZ4kv5G8/nDWnHozolqVwbEIVkGaSQ9wqwlKxhk8=)
                          2: 88l76mwoNiWsmbJkJD6K1iNUZco.crl (hash: R46hSpQYFYnEnIqeiUQ4voKj41c1Ev/PdAdaX6KD4+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:53:da:ed:ab:10:05:9a:11:5c:59:67:a0:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c97bea6c283625ac99b264243e8ad6235465ca
        Validity
            Not Before: Aug 14 18:01:08 2026 GMT
            Not After : Aug 15 18:01:08 2026 GMT
        Subject: CN=ef1293e78b2ed7c7f2085322f0f98f3d6e1ba803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:e9:6e:2a:1c:6c:df:a4:4d:49:91:05:61:
                    dd:a8:eb:1e:82:30:df:b8:cc:1f:7a:3e:6e:0f:2b:
                    e5:8f:09:21:4e:02:c7:0a:71:fe:39:59:0f:51:5a:
                    86:f0:73:e9:ce:14:68:e7:1e:22:b6:ba:7f:a6:5a:
                    a4:c7:6e:02:49:9d:28:1d:bb:3c:82:ce:a9:ba:42:
                    da:dd:d5:47:30:bd:cf:c7:7b:0f:fa:62:78:91:e5:
                    5a:4c:9a:31:66:ba:b2:5a:ee:e9:5f:16:94:85:83:
                    d5:ed:2f:56:af:7d:a7:47:b7:a4:04:f8:6c:93:e2:
                    13:7d:0b:ba:85:a2:4a:3f:80:a7:24:0f:53:fe:c7:
                    41:6b:ae:a1:09:8e:43:30:88:73:ac:0a:5c:72:66:
                    c5:eb:a8:84:28:25:d6:5c:a0:6e:2a:fc:28:aa:c0:
                    e3:49:4f:ad:9a:f8:67:79:cc:24:d7:b6:93:fe:e1:
                    ec:9c:87:de:a2:f4:10:ff:eb:59:78:3e:2c:a3:b8:
                    5e:77:e5:0d:e1:d3:a4:f2:0b:a8:63:68:76:9a:6a:
                    99:cc:cd:c0:d6:2e:26:75:9e:95:ea:44:be:3f:1f:
                    82:b3:f2:0a:21:b8:58:5f:67:87:43:32:57:5a:0a:
                    01:50:0d:18:0a:c7:b8:5f:a1:e2:f9:97:e5:91:24:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:12:93:E7:8B:2E:D7:C7:F2:08:53:22:F0:F9:8F:3D:6E:1B:A8:03
            X509v3 Authority Key Identifier:
                keyid:F3:C9:7B:EA:6C:28:36:25:AC:99:B2:64:24:3E:8A:D6:23:54:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88l76mwoNiWsmbJkJD6K1iNUZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/88l76mwoNiWsmbJkJD6K1iNUZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:30:fb:bb:f1:25:e5:a1:e3:ab:fc:3a:6a:1d:17:c6:87:f2:
         58:92:58:04:a1:03:3d:17:77:e4:a7:20:86:83:b9:8f:93:04:
         1b:f9:d8:a5:69:5c:89:2a:17:9c:38:76:cb:8c:7f:3e:7f:31:
         d3:d7:0d:00:f0:33:71:d3:c6:60:78:4f:66:96:fb:b0:a9:84:
         ed:dd:e5:51:b4:e6:f0:0e:b4:39:9b:eb:1a:76:6b:07:99:29:
         1a:25:51:e9:b4:03:1a:64:ab:27:6d:e0:e4:3d:64:14:20:27:
         e3:d8:94:77:14:8f:a6:4d:54:d6:e0:7c:9b:f5:61:b2:40:14:
         dd:a0:4d:06:8d:ec:11:11:6b:99:cb:e9:f5:c4:b8:cd:67:ec:
         96:37:a6:3a:6f:ea:ad:06:93:b1:37:7d:41:9b:dc:a4:8d:fb:
         9f:fe:b5:2b:bd:14:e4:a1:32:a5:8f:4f:a4:d2:4a:08:89:52:
         2f:85:d2:7a:79:99:17:51:c4:40:86:91:63:26:7c:e6:58:a0:
         15:40:08:25:db:c6:e5:bf:a9:b9:bc:e1:51:f0:48:76:dd:54:
         e0:0a:ad:e8:79:b9:cf:43:e3:2e:d9:81:64:82:aa:3e:ac:a2:
         e7:29:53:60:c1:90:92:57:fb:97:5c:14:9d:ec:72:0c:34:63:
         f6:a2:ff:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb1Pa7asQBZoRXFlnoEsVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzk3YmVhNmMyODM2MjVhYzk5YjI2NDI0M2U4YWQ2MjM1
NDY1Y2EwHhcNMjYwODE0MTgwMTA4WhcNMjYwODE1MTgwMTA4WjAzMTEwLwYDVQQD
EyhlZjEyOTNlNzhiMmVkN2M3ZjIwODUzMjJmMGY5OGYzZDZlMWJhODAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSbpbiocbN+kTUmRBWHdqOsegjDf
uMwfej5uDyvljwkhTgLHCnH+OVkPUVqG8HPpzhRo5x4itrp/plqkx24CSZ0oHbs8
gs6pukLa3dVHML3Px3sP+mJ4keVaTJoxZrqyWu7pXxaUhYPV7S9Wr32nR7ekBPhs
k+ITfQu6haJKP4CnJA9T/sdBa66hCY5DMIhzrApccmbF66iEKCXWXKBuKvwoqsDj
SU+tmvhnecwk17aT/uHsnIfeovQQ/+tZeD4so7hed+UN4dOk8guoY2h2mmqZzM3A
1i4mdZ6V6kS+Px+Cs/IKIbhYX2eHQzJXWgoBUA0YCse4X6Hi+ZflkSQoxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8Sk+eLLtfH8ghTIvD5jz1uG6gDMB8GA1UdIwQY
MBaAFPPJe+psKDYlrJmyZCQ+itYjVGXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhsNzZtd29OaVdzbWJKa0pENksxaU5VWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDkt
ZTZlYjkxOWQ3YTAyLzEvODhsNzZtd29OaVdzbWJKa0pENksxaU5VWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83OTUwOTgtYTJmMC00NzMzLTk3MDktZTZlYjkxOWQ3YTAy
LzEvODhsNzZtd29OaVdzbWJKa0pENksxaU5VWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjjD7u/El
5aHjq/w6ah0XxofyWJJYBKEDPRd35KcghoO5j5MEG/nYpWlciSoXnDh2y4x/Pn8x
09cNAPAzcdPGYHhPZpb7sKmE7d3lUbTm8A60OZvrGnZrB5kpGiVR6bQDGmSrJ23g
5D1kFCAn49iUdxSPpk1U1uB8m/VhskAU3aBNBo3sERFrmcvp9cS4zWfsljemOm/q
rQaTsTd9QZvcpI37n/61K70U5KEypY9PpNJKCIlSL4XSenmZF1HEQIaRYyZ85lig
FUAIJdvG5b+pubzhUfBIdt1U4Aqt6Hm5z0PjLtmBZIKqPqyi5ylTYMGQklf7l1wU
nexyDDRj9qL/Mw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:26:06 2026 by rpki-client