Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File:                     7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier:          JhtBPPltFWB6xVn6KVojTdda/cTbiz//4XhTWwTCgy4=
Subject key identifier:   36:A2:01:78:74:E3:B9:7B:EB:CC:96:3D:CC:B7:40:28:AF:EC:4B:90
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       01A001DD80BDBFE64C0939A2EA1F815E8D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 20:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:28 +0000
Files and hashes:         1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: Q3LS048qDllPBP8EdNEEb8Ay+XqrLzLbnzvAHeRNXyo=)
                          2: jI0W3FXepCGwUQYooUrSqFApgnI.roa (hash: ywNZ9Hr6Ek5jRSdgINiD2gJAFEBiWAjLS61c7FwJ6mA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:80:bd:bf:e6:4c:09:39:a2:ea:1f:81:5e:8d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Aug 14 20:01:28 2026 GMT
            Not After : Aug 15 20:01:28 2026 GMT
        Subject: CN=36a2017874e3b97bebcc963dccb74028afec4b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:60:b6:e0:18:5d:bd:3a:60:25:7a:7b:3a:
                    da:57:e3:82:a2:32:8e:30:d9:a4:c4:e0:c8:20:eb:
                    49:8f:28:24:64:a6:df:91:8d:9e:a2:2d:2d:7e:20:
                    85:5e:d7:a9:b5:3d:a3:77:89:bb:28:5f:56:3e:93:
                    98:61:e6:1c:8d:c5:43:b8:ca:b0:dd:c7:57:bf:18:
                    ff:aa:ae:bf:9f:bc:45:5e:21:15:84:2d:71:97:72:
                    de:71:f5:32:10:9a:e9:73:26:fd:0b:2f:bd:63:b9:
                    d2:27:3c:73:20:17:dd:c8:88:ad:26:cb:ef:1e:09:
                    24:6e:3a:9c:32:cb:98:24:88:b5:bd:77:37:43:3e:
                    93:1c:be:e0:fa:44:c2:90:44:e3:15:4d:78:fc:bc:
                    11:fd:c0:31:88:50:a4:5d:80:f6:4a:13:8d:87:12:
                    6b:78:17:8c:80:77:6c:5a:22:aa:6d:99:a2:1c:a7:
                    39:4a:bb:31:04:f2:1d:e6:1c:91:b6:f2:99:c4:5d:
                    7a:a9:1d:93:79:56:9d:81:5d:e3:be:6a:a2:f2:57:
                    51:50:b6:d5:88:3e:a3:31:bd:8d:84:eb:a7:0e:68:
                    84:02:7c:c9:3f:e5:9f:ce:0d:96:02:66:9f:33:0d:
                    ee:0a:84:72:6a:77:3b:9c:87:32:65:9a:2b:7f:f8:
                    f4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A2:01:78:74:E3:B9:7B:EB:CC:96:3D:CC:B7:40:28:AF:EC:4B:90
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:06:91:92:62:f8:f9:b9:2f:a9:8c:7a:0f:12:16:0d:2f:3f:
         a2:6b:8c:9f:d9:92:67:f8:41:75:2d:1b:52:e7:ab:55:c2:33:
         33:80:b1:bd:29:47:60:91:dd:c3:6d:f9:95:86:40:af:04:7d:
         a1:ca:96:8d:e9:f2:2e:dd:e9:d7:32:d8:fe:02:0a:c0:ae:22:
         31:ce:7a:9e:dd:d2:0a:9e:09:f2:a9:70:96:d8:54:32:26:b5:
         4b:66:da:20:9e:36:93:3f:32:80:87:9e:e3:46:e1:75:15:a1:
         5e:27:19:82:36:91:5a:ca:ce:9e:8c:58:c5:53:8e:56:c2:be:
         cb:eb:00:4b:32:2e:f1:47:47:87:6f:53:51:c1:08:c6:62:e2:
         8e:48:7d:a5:29:7d:b0:9c:9f:88:69:dd:89:89:4f:6e:83:ca:
         2e:dd:43:7a:74:56:51:26:27:8c:c6:ff:8b:6b:ba:c7:36:9e:
         f6:58:3b:d5:33:7a:8f:cc:90:b9:fc:95:fa:23:42:e7:e7:72:
         ea:a0:66:97:93:e1:03:2c:04:0f:6e:5e:2a:d1:61:63:85:d3:
         48:60:36:90:ef:cc:20:97:76:03:ae:35:29:23:8e:4b:8b:c8:
         09:3a:51:01:af:72:69:4b:2d:d6:3f:a9:f4:0c:fc:b5:b9:29:
         25:77:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:41 2026 by rpki-client