Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          hMUY8/2/ll80qdMdanqod1C1aeO1OK4ThmCkh0AeI54=
Subject key identifier:   2E:D7:CA:DC:36:BA:39:EC:5A:11:68:32:25:FD:8A:B1:12:81:9D:08
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       01A000CA660E91A30753AE6EC361FA1EF60F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          1160
Signing time:             Fri 14 Aug 2026 15:00:59 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:59 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:59 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: chi7Z8n5i3U/H36fMOxXYLOAUNe012WxKH8deCrYPRU=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:66:0e:91:a3:07:53:ae:6e:c3:61:fa:1e:f6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Aug 14 15:00:59 2026 GMT
            Not After : Aug 15 15:00:59 2026 GMT
        Subject: CN=2ed7cadc36ba39ec5a11683225fd8ab112819d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:7c:56:2c:a2:97:fc:02:a3:85:4a:f2:90:
                    73:82:0d:b2:d7:50:54:0c:1c:eb:5b:3e:8c:b5:b4:
                    5c:d1:fb:e2:7a:15:89:63:b1:c9:1f:ea:88:5f:ee:
                    35:41:55:5a:2a:29:80:60:54:d3:0b:6e:a3:5a:ad:
                    9e:a7:98:47:e5:7d:ae:68:2f:9b:b7:32:e1:3e:e8:
                    f8:af:77:b9:b3:b4:6e:5b:7e:13:a2:52:ba:d8:4e:
                    80:8e:88:f5:fa:68:e9:fe:3c:45:62:be:f7:29:63:
                    a9:a6:e1:95:50:8e:2b:13:9f:1d:fd:2e:2a:d3:d2:
                    23:06:be:39:f6:0f:79:b2:ca:8a:98:12:31:61:c5:
                    86:ce:91:0b:f6:17:97:c7:46:c5:49:ec:08:81:4a:
                    ff:c0:35:85:8d:18:2f:59:fa:0b:e6:0a:83:e6:fa:
                    7b:05:6a:66:a8:6c:6d:27:a1:46:a9:0b:77:8c:f4:
                    fe:20:7c:44:3a:98:a9:e9:c9:3f:e2:8b:9a:8b:32:
                    51:09:dd:82:71:c1:3b:73:8a:e4:86:bd:89:96:e4:
                    13:7f:31:da:62:2c:b5:8b:b7:e4:72:46:fb:08:41:
                    0c:7d:db:2e:f3:4b:01:07:bf:2a:cc:c0:11:49:11:
                    88:b1:78:9e:48:1c:e9:af:ea:12:68:1a:1e:57:58:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:CA:DC:36:BA:39:EC:5A:11:68:32:25:FD:8A:B1:12:81:9D:08
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:79:f0:7e:e6:fd:c0:bd:e2:b0:11:39:8e:28:c9:5f:62:b5:
         c8:e2:41:bb:ab:8b:c1:78:7b:6e:80:5f:27:5d:6c:fd:ef:c0:
         52:5f:b5:56:60:8e:a5:71:4f:70:ea:2a:94:76:d5:c2:2f:ca:
         e7:58:15:2d:4f:ae:04:df:c1:05:a5:ad:79:ef:b3:60:19:60:
         78:14:f1:0c:c8:30:e1:94:1f:a4:8b:0f:a9:f7:7f:52:7e:c6:
         4f:f3:f4:7a:a0:18:02:fa:78:7c:f4:18:8d:ae:95:26:66:01:
         01:d3:d3:71:92:ca:01:89:ad:cf:87:d9:fe:22:10:c7:e1:8e:
         71:b6:5a:a8:a2:b4:85:50:4f:a2:f6:9d:f8:b0:a8:b1:d6:94:
         cc:d0:05:01:18:33:b0:0f:9b:c0:52:8f:4d:fb:f2:ed:5c:ca:
         49:59:6e:21:af:5b:50:c7:c9:ac:2b:33:bc:ab:ea:40:6f:4f:
         f5:7d:c3:1d:33:b1:f2:77:29:48:5b:22:23:56:99:55:5f:66:
         1c:b2:b5:b2:d8:b9:ce:9b:46:c9:61:f3:7d:e6:55:7f:79:df:
         7d:7a:12:5b:12:d7:7c:5f:cc:b6:c6:26:95:34:da:f2:0f:93:
         8f:53:c1:2f:2f:98:b3:82:3f:f6:ac:ba:0f:16:48:30:77:fc:
         04:ea:b3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:28:27 2026 by rpki-client