Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
File:                     ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft (raw, json)
Hash identifier:          sFvlEuOz3Mt+p/u3oWG/V3dLH9qHX6VfnYQUJXvkvEc=
Subject key identifier:   2C:EF:AC:33:4A:97:D0:90:CF:D8:D8:00:17:FE:A3:C2:45:AC:40:FF
Authority key identifier: 89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75
Certificate issuer:       /CN=89aed2cff8ce31b334f83a0b305feef01d71da75
Certificate serial:       01A001A67AAACD9FF6B8A89DD313E821CA91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
Manifest number:          19BB
Signing time:             Fri 14 Aug 2026 19:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 19:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 19:01:22 +0000
Files and hashes:         1: FwqF1yEFG7mKuQRa7RkSyKPz0W0.roa (hash: arAr0Lk0kEre21H8drvKyvd7aUFHvFqu0QRUk2zIk0Y=)
                          2: ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl (hash: hMOHqXD5SY05IrSNd28yyLHA5DumrtJxUv+AQZOjd0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:7a:aa:cd:9f:f6:b8:a8:9d:d3:13:e8:21:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89aed2cff8ce31b334f83a0b305feef01d71da75
        Validity
            Not Before: Aug 14 19:01:22 2026 GMT
            Not After : Aug 15 19:01:22 2026 GMT
        Subject: CN=2cefac334a97d090cfd8d80017fea3c245ac40ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:f4:06:64:07:27:c9:7e:60:68:88:a9:32:
                    e4:00:6a:f8:27:f8:ed:8e:f2:12:86:b7:f3:ab:5b:
                    ab:ac:bf:8d:5b:f7:e9:b2:94:1a:cc:4b:b2:8b:a8:
                    6a:f1:a3:44:e3:eb:6a:52:b7:f9:da:c7:44:45:82:
                    d2:d6:a1:1b:f6:6e:21:a3:9c:63:fe:a0:fd:50:8b:
                    e7:5a:ca:3d:31:13:63:5c:9e:00:2e:62:b5:d1:d0:
                    08:08:50:e8:54:4d:07:4b:70:d9:8a:a1:65:15:96:
                    d9:63:09:5a:62:7d:8f:53:92:39:02:cd:25:6e:53:
                    31:54:b6:10:bf:4a:61:b6:91:1f:ee:f8:dd:37:d0:
                    54:94:d7:6c:7e:0c:dc:ba:fa:fc:34:74:cc:bc:2f:
                    4e:ba:9f:ba:08:24:a1:8f:a9:5b:d0:4e:d8:09:7e:
                    60:82:71:3b:93:e6:f0:67:21:6d:d2:02:6d:d8:20:
                    0f:5e:39:ab:36:1f:f8:cb:7c:53:c6:58:cc:3a:c9:
                    e5:8f:cb:09:43:b2:be:62:62:0a:7e:9b:71:da:c8:
                    9a:16:17:a0:3c:a9:dc:fa:bd:6e:20:c8:ff:93:c7:
                    29:8c:18:e0:3f:b0:2a:57:6e:21:60:0e:a3:a0:7a:
                    ce:8e:9a:0d:a9:d0:54:96:f8:72:d0:70:2f:9f:cb:
                    64:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EF:AC:33:4A:97:D0:90:CF:D8:D8:00:17:FE:A3:C2:45:AC:40:FF
            X509v3 Authority Key Identifier:
                keyid:89:AE:D2:CF:F8:CE:31:B3:34:F8:3A:0B:30:5F:EE:F0:1D:71:DA:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e90f51-89aa-49eb-9ea6-fbe8bc5a29fa/1/ia7Sz_jOMbM0-DoLMF_u8B1x2nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:d4:02:ad:9b:56:1a:a5:ea:d9:0f:17:28:40:ff:bd:1f:18:
         c8:dc:f0:86:b8:0c:7e:eb:a1:fb:57:c1:37:6f:ef:da:0c:95:
         53:67:e8:13:fb:41:38:5a:8e:62:74:dc:45:f3:0b:88:59:9a:
         e3:9e:b7:54:1f:b2:74:ba:ba:21:58:69:0d:db:54:47:71:81:
         f5:f2:f8:c2:39:1e:1e:76:53:7e:55:0e:3b:82:d8:10:0c:a0:
         d8:e5:1d:e7:f8:79:8d:68:48:4f:31:b2:ff:a1:30:b5:49:e7:
         86:6c:ad:b8:93:a6:08:be:f1:4d:b0:05:82:08:b4:8b:9d:c2:
         f4:98:5c:43:8a:41:95:2d:a7:b9:99:3e:a4:ea:a7:11:50:1a:
         c9:36:64:f1:3f:69:ab:05:1b:2d:68:b9:50:f4:0b:90:fc:41:
         12:48:e7:4a:b4:2b:52:96:71:10:9f:84:a7:5b:4a:b8:c4:d9:
         d8:4c:be:3c:b8:8b:d3:00:42:9f:c4:64:37:06:89:87:a3:e6:
         de:02:df:e2:3f:0b:88:8d:71:c9:cd:ae:49:39:7d:83:91:85:
         5e:f0:17:4c:55:d1:d8:19:25:cc:9a:cb:69:a9:ca:46:50:2c:
         87:f3:c5:00:67:e3:54:51:ba:26:20:a3:51:f4:a2:2c:7e:b1:
         40:18:68:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:23 2026 by rpki-client