Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          E1bglD+JZCLunjkQalc1ksOMLjRHszlq8Hm2SgAXYNQ=
Subject key identifier:   63:CA:A5:10:A9:65:41:81:D8:F5:A6:D7:C2:CA:D9:87:0A:C7:FC:58
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       019FCD4C3335E32024B16BB666D12AFE275A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          099E
Signing time:             Tue 04 Aug 2026 15:02:30 +0000
Manifest this update:     Tue 04 Aug 2026 15:02:30 +0000
Manifest next update:     Wed 05 Aug 2026 15:02:30 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: AnlrEPq1UprV6TlVbCNzP8LxfWFr0MxnLE9ccQAFgkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 15:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:4c:33:35:e3:20:24:b1:6b:b6:66:d1:2a:fe:27:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Aug  4 15:02:30 2026 GMT
            Not After : Aug  5 15:02:30 2026 GMT
        Subject: CN=63caa510a9654181d8f5a6d7c2cad9870ac7fc58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:7c:a4:9c:a9:11:c5:71:a0:ea:32:d3:29:
                    93:71:4f:40:36:21:94:69:60:de:3b:41:cf:9f:f4:
                    77:ab:6c:ec:ef:27:42:bc:16:81:0b:2a:33:05:57:
                    99:d7:f8:10:15:6a:4f:f8:c1:98:d0:d5:32:83:54:
                    0c:65:24:69:51:cf:1a:28:4f:a6:ca:4b:84:0d:55:
                    91:48:d8:81:d2:98:6d:e0:c3:df:ea:5d:df:b5:ac:
                    71:18:d6:32:eb:a5:87:71:67:b2:3a:b9:1c:13:35:
                    18:d3:31:69:41:e5:5c:35:8f:57:07:65:c7:21:34:
                    92:77:93:02:3f:f7:1d:39:f9:f8:8a:61:37:3d:71:
                    60:68:69:c5:5d:a1:c2:cc:ff:25:97:03:6f:ec:c5:
                    ae:11:b6:e5:07:60:e5:95:ed:b9:f5:bc:c7:35:6b:
                    dd:06:07:20:49:52:87:2e:2b:12:08:a3:80:b4:1d:
                    e4:7d:3c:12:03:63:98:2e:5e:dc:08:8b:f3:39:fe:
                    47:82:98:e6:53:53:60:89:a8:c4:63:94:52:c3:60:
                    54:ae:52:fd:0f:04:97:f1:2a:98:3a:d7:7d:f7:bf:
                    88:16:ce:d4:2c:f2:49:ae:02:61:47:de:60:90:9b:
                    25:57:bc:2c:e1:9d:93:f0:72:36:5a:b3:b4:20:64:
                    a5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CA:A5:10:A9:65:41:81:D8:F5:A6:D7:C2:CA:D9:87:0A:C7:FC:58
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f6:0a:af:0d:4e:42:a2:3c:d9:57:0f:c7:8a:df:4e:0d:ff:
         a9:26:c8:90:b2:e1:3a:3a:a4:c4:8e:03:b8:5c:74:4b:3c:45:
         ba:a8:ea:16:34:e8:70:e9:cf:66:c2:a1:d9:97:b7:08:f8:b6:
         68:52:45:05:b7:15:b9:92:19:15:f9:0e:08:15:b4:f6:e1:9d:
         23:10:24:34:9d:92:44:8b:b3:32:b2:63:12:1e:df:ec:ec:d2:
         47:3e:7a:5f:48:6e:f3:25:c6:7e:03:4b:db:86:df:86:af:16:
         a6:b0:aa:72:cd:d5:09:ea:e1:8b:cd:5c:b0:37:ac:1d:51:5d:
         83:a5:f4:88:e4:a5:8d:75:0c:d4:d6:09:9d:00:25:06:c0:15:
         c7:d2:01:3f:ef:eb:c1:70:a6:0d:2e:ba:7f:7d:89:0b:e7:1f:
         d7:7e:0e:9e:16:ea:7f:62:e8:e6:eb:69:62:37:6d:29:4b:5e:
         f0:a8:21:26:5e:fb:8f:c2:f6:e3:1b:8c:64:42:fd:0b:7c:16:
         53:a3:69:47:b6:56:72:6c:c9:be:c8:1f:a9:b7:3a:a5:34:a7:
         4d:9e:c2:33:71:e0:4c:3b:01:53:db:d4:4a:2b:b8:2a:4c:4e:
         91:67:5a:e0:3e:c8:ff:04:01:1f:be:c6:e5:80:5b:22:f8:f7:
         f4:7a:d8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 20:07:44 2026 by rpki-client