Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
File:                     7FExTgTslnbytgJI4bm9Au8A4Wg.mft (raw, json)
Hash identifier:          f/H0LZnmeXaBr/ffHqzdU/RuipadER9D1yDwvfGxwOc=
Subject key identifier:   E9:C0:F7:92:12:27:63:4C:65:C8:CE:5E:C8:49:CD:FC:41:DE:DE:B6
Authority key identifier: EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68
Certificate issuer:       /CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
Certificate serial:       01A000CA4BE5CB1D40A319746A5FB426EAFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 15:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:52 +0000
Files and hashes:         1: 7FExTgTslnbytgJI4bm9Au8A4Wg.crl (hash: BNU3kviC8Rbx8FITSL0GseKc+0+IMTEEXw+xtBqdAVU=)
                          2: 955C7AtZAhtfMCkNkF_V4r29zNs.roa (hash: BzjiJ1i4x8f0IF+YLTcXKg5V1DmhNLRMYe5guMs7CHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:4b:e5:cb:1d:40:a3:19:74:6a:5f:b4:26:ea:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec51314e04ec9676f2b60248e1b9bd02ef00e168
        Validity
            Not Before: Aug 14 15:00:52 2026 GMT
            Not After : Aug 15 15:00:52 2026 GMT
        Subject: CN=e9c0f7921227634c65c8ce5ec849cdfc41dedeb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:f4:8a:55:dd:f9:95:5b:97:44:64:98:8c:
                    c4:a1:b4:06:66:88:1e:3f:f1:a6:90:eb:45:dd:8c:
                    26:fc:53:85:3e:73:cf:80:7c:1f:40:20:ca:bd:11:
                    77:02:94:3e:44:4d:e5:d4:1a:a8:75:bc:5a:bb:43:
                    c8:f7:6f:2f:1d:3f:18:e6:45:50:25:8f:94:b8:33:
                    c9:73:04:cb:ef:e3:ed:01:78:23:f3:4e:61:15:94:
                    23:e3:8a:b4:6f:63:5f:55:ae:f5:35:7e:95:77:ea:
                    89:59:ad:72:fa:52:64:d0:fe:bf:74:f5:97:bb:5e:
                    56:3c:d8:26:38:3b:36:7d:4b:e3:c4:85:83:75:84:
                    4d:88:c0:cb:3d:cf:fd:2e:fb:18:49:0b:db:8a:30:
                    d8:b2:05:37:8c:4b:ed:12:1c:3b:30:7c:e8:12:52:
                    71:b7:9f:8b:80:e2:5a:2a:47:ff:2d:c7:3f:b8:e9:
                    a1:87:91:ec:e7:09:16:b2:c0:a3:25:bc:56:1d:86:
                    8a:00:7e:0d:c4:e2:1e:da:9c:e7:e1:bd:c8:8b:8b:
                    1c:e6:29:e8:4b:93:27:89:12:07:4b:0a:2e:03:44:
                    0c:b7:d9:7b:c5:ad:d3:26:6a:91:b0:52:84:81:88:
                    4f:53:08:49:34:dc:c0:03:24:0e:e5:51:b4:58:f4:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C0:F7:92:12:27:63:4C:65:C8:CE:5E:C8:49:CD:FC:41:DE:DE:B6
            X509v3 Authority Key Identifier:
                keyid:EC:51:31:4E:04:EC:96:76:F2:B6:02:48:E1:B9:BD:02:EF:00:E1:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FExTgTslnbytgJI4bm9Au8A4Wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/db5399-6fbb-4ce2-897b-3bbbca310d71/1/7FExTgTslnbytgJI4bm9Au8A4Wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:bf:45:40:f7:af:d9:f7:ab:b5:a6:92:08:7c:57:91:bb:
         5a:9b:e1:9e:da:77:f9:aa:ce:19:73:9a:55:b3:b5:0d:3a:3e:
         25:5e:99:3d:0b:f0:8d:b7:77:70:6b:47:2b:b7:ea:51:0e:3f:
         5b:b3:7c:f3:2d:96:85:17:88:db:04:3e:4e:ff:ba:59:e7:a3:
         50:de:1d:d8:4a:cd:f3:73:2c:72:d9:55:b8:55:f3:95:dc:bf:
         91:e2:d8:92:52:a2:9a:8b:22:81:ee:73:fb:6a:de:63:2f:0c:
         41:11:f2:2f:8e:f4:b1:17:44:f9:c8:63:a9:05:3a:50:62:dc:
         20:51:2b:dd:90:47:6e:2f:98:82:54:9a:a5:0f:a9:61:fa:69:
         0c:1e:99:e8:d1:fd:ac:61:4b:eb:09:a3:bf:03:90:d8:f9:44:
         3f:28:f3:6e:91:c8:33:dd:60:54:3d:99:f2:2f:6c:8c:b5:1c:
         7d:a6:3e:c3:37:94:7e:01:39:cd:05:9b:71:ef:6d:22:56:04:
         6b:30:cd:21:07:5d:29:74:1b:bf:27:b1:d8:d8:1f:62:b8:55:
         14:ac:f1:ca:1c:41:ef:dc:14:f6:b3:6b:54:2e:56:60:71:4d:
         81:17:37:76:1c:e2:9d:c1:a1:58:b6:5b:ea:58:27:60:92:eb:
         3f:03:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:16 2026 by rpki-client