Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
File:                     7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft (raw, json)
Hash identifier:          3SHr5KVQpmMLChDyamyg9/WrvOSSltamrCtNZyOs9eY=
Subject key identifier:   7E:DD:6A:33:E2:60:00:D8:BF:1A:F8:30:FE:94:9A:15:DB:E3:9B:98
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       01A011F4B85B1FB57E328281F512D86EED91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
Manifest number:          0A26
Signing time:             Mon 17 Aug 2026 23:00:45 +0000
Manifest this update:     Mon 17 Aug 2026 23:00:45 +0000
Manifest next update:     Tue 18 Aug 2026 23:00:45 +0000
Files and hashes:         1: 5KLfHwA9gtPS399yPjor3mqDiAo.roa (hash: w+O1FsGEFOCgkoRAwRqV0tExWzm4TVFGRPZDSnhV7ro=)
                          2: 7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl (hash: J6CdOwcNdAmnddCD/ZzhRKI+G9MJo6RcAs03JruQ5zw=)
                          3: Qhj-dAw4UmH14cGcWPixT30vFoE.roa (hash: JjCn/CEVqHRrx5g3GCN0ImneG9z/AYQZMRc57RLWwA8=)
                          4: UfUKm5VRI_4IDkO1oFXvYLTnZWQ.roa (hash: FWPMWaa8EhT3K9Uzqt/ZpfSh1CKxfYK1Ozqf41dv8H8=)
                          5: Up3P0BLXnOn0NJzNO22oJuB2P-0.roa (hash: WAsExi4a515grUSlWqpJ211VY3MEpndWg6Zn1Kyg9+8=)
                          6: eDlvHgRtKsU4i-jNtF947Zs0OH8.roa (hash: O24cI9pKOeR6BhzhlKYvgEN2vTJ+LKMhalZO6Gb3Tb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 18 Aug 2026 20:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:11:f4:b8:5b:1f:b5:7e:32:82:81:f5:12:d8:6e:ed:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Aug 17 23:00:45 2026 GMT
            Not After : Aug 18 23:00:45 2026 GMT
        Subject: CN=7edd6a33e26000d8bf1af830fe949a15dbe39b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:df:a2:34:6a:f7:f9:d9:c6:bd:04:58:89:
                    de:a4:c3:db:73:cc:d6:0b:5a:65:e5:08:8b:e7:a8:
                    36:14:05:3b:e1:4f:b2:eb:6f:48:76:91:74:ed:a4:
                    8f:b4:28:1a:d3:34:e4:fe:65:06:fc:38:8d:06:7d:
                    88:d0:e5:be:d0:57:91:a7:d4:86:8e:a8:a8:5c:27:
                    89:de:07:a2:3c:8f:bf:23:6d:4e:a2:d6:1d:79:1a:
                    6f:95:59:9c:7b:86:18:d9:6a:be:55:45:47:93:4d:
                    bd:b4:5b:7d:a7:ab:ca:c0:3a:28:ed:d6:f4:59:38:
                    18:26:9e:4c:ef:f7:fc:bf:6c:cb:51:90:47:54:f2:
                    03:46:70:77:c8:0a:06:a1:1a:f1:7c:c7:d8:ee:b0:
                    d5:f5:12:e6:50:a0:60:dc:e3:00:b2:2d:9b:1f:e1:
                    b6:75:d9:e5:32:bd:79:32:5f:74:18:37:b1:a8:1b:
                    0f:c5:93:4d:74:3e:41:ed:bd:84:90:41:41:92:b7:
                    fd:22:4f:6d:f0:6b:2d:21:f9:8d:9b:37:5a:36:a4:
                    54:fd:3c:c0:a8:75:23:21:92:bb:e2:9a:5a:65:83:
                    51:96:a3:51:1b:9b:40:9b:57:83:ce:b2:a1:57:18:
                    ea:3f:29:a7:a5:37:ad:38:dc:26:f2:a8:ae:78:52:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DD:6A:33:E2:60:00:D8:BF:1A:F8:30:FE:94:9A:15:DB:E3:9B:98
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:01:ca:2a:77:f2:49:63:4e:8b:52:5a:88:55:1d:fc:2c:8c:
         36:f7:13:36:e3:bf:d1:4e:82:d1:21:95:93:ec:63:7b:42:df:
         0b:f9:92:63:eb:55:a8:4b:02:ec:66:6b:26:54:d5:93:6b:b9:
         36:6b:6a:e1:ee:3a:84:9a:48:62:d5:a8:df:d8:5f:62:05:f3:
         e7:63:af:37:6f:25:85:f6:81:96:5e:4b:6e:fe:a3:ec:44:32:
         95:e4:45:70:3b:1d:1d:a1:73:8a:4f:93:e5:4b:eb:d6:6d:57:
         6f:1f:2f:54:61:48:95:66:ee:2d:0a:d4:28:b8:91:b1:6e:a4:
         9b:42:34:37:f5:6c:6c:d2:c4:74:57:ac:fe:53:a3:1c:6b:9d:
         f3:f5:06:1e:35:72:64:6a:97:81:89:d0:d3:95:1c:c7:21:e1:
         3c:d8:3d:44:8e:84:dd:48:53:9e:3d:ba:cb:b1:0f:d0:3b:91:
         7e:52:e9:c9:de:d0:4d:6b:59:52:a6:c4:45:5e:66:27:0f:3e:
         06:8b:38:4d:97:3a:32:62:8c:ae:c6:ea:c0:41:0e:54:42:68:
         be:29:6d:22:99:10:57:a9:3e:5c:e0:6e:b3:76:76:15:20:d4:
         da:4a:ef:59:33:46:18:f7:15:b3:d2:a9:95:19:78:29:ee:8e:
         22:45:df:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 01:08:56 2026 by rpki-client