Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          4wqAZaJ5s3unNWmik3kKJ1S74g9PadM5ISHMKJYlouI=
Subject key identifier:   41:EA:14:9C:D0:E8:52:E1:2B:F8:58:6D:28:5B:75:40:13:0A:EA:58
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       01A0344A2EDF182906D18417E04366D19DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1239
Signing time:             Mon 24 Aug 2026 15:01:11 +0000
Manifest this update:     Mon 24 Aug 2026 15:01:11 +0000
Manifest next update:     Tue 25 Aug 2026 15:01:11 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: J9Jxv8C+qMHRxVcSn9DQgHHl5ON0R2my8Y7cMrLcWtY=)
                          3: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          4: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          5: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 25 Aug 2026 14:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:34:4a:2e:df:18:29:06:d1:84:17:e0:43:66:d1:9d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Aug 24 15:01:11 2026 GMT
            Not After : Aug 25 15:01:11 2026 GMT
        Subject: CN=41ea149cd0e852e12bf8586d285b7540130aea58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:25:c4:98:97:6f:a1:d4:24:ba:1b:5e:7d:
                    db:d1:6a:7a:d6:2c:fa:8d:b4:20:a3:cf:2c:4d:a0:
                    1e:a8:57:ac:70:35:22:56:79:9c:54:dd:ac:ee:78:
                    03:26:71:fb:3f:4f:ee:7d:e4:17:6a:71:64:c2:af:
                    7f:ab:b6:72:95:74:00:68:84:dd:8b:f9:44:e8:65:
                    0c:be:71:3f:de:cc:ed:3b:d8:72:b9:1d:cb:d1:07:
                    81:4d:f4:87:91:29:fe:a8:3f:80:49:cc:2f:cb:ea:
                    e6:46:ae:9c:75:a7:c2:48:4a:f0:84:c3:a5:a5:aa:
                    91:96:e3:0a:1a:0e:be:cc:b2:05:fc:8e:1f:ec:2f:
                    c7:0d:2b:3d:ca:40:49:eb:28:4e:1d:94:77:42:25:
                    63:9d:50:8c:10:fc:d8:0d:36:d3:9d:0d:4f:50:b8:
                    06:f9:cc:1f:45:6e:76:e0:2f:f8:dc:31:fa:5c:fa:
                    4b:e2:bf:85:3b:ab:6b:a2:9a:99:f8:8c:d0:12:dc:
                    65:7d:71:34:56:da:dc:61:e3:91:52:fc:95:97:f8:
                    9b:fb:94:ea:ad:0c:e8:2c:4e:42:3d:74:da:70:54:
                    98:f9:a1:5e:cf:fb:24:61:fd:7d:95:62:2b:90:8b:
                    05:59:8a:54:a9:b4:40:d4:3e:4e:04:1e:6e:1a:32:
                    ab:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:EA:14:9C:D0:E8:52:E1:2B:F8:58:6D:28:5B:75:40:13:0A:EA:58
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:72:1f:90:ad:1c:99:8f:5d:59:e6:26:ad:be:15:c8:ca:3d:
         e1:fd:0d:39:87:7d:60:5d:81:30:07:47:72:09:a8:45:f2:87:
         71:db:f2:d4:cf:81:48:d9:c7:6c:18:36:77:eb:49:2e:b2:9a:
         c0:26:31:b1:14:94:ec:d1:4a:d4:1f:db:3c:b3:b0:7f:8c:ae:
         06:48:f0:16:e0:8f:8d:5e:6b:24:e1:4f:17:99:fb:9e:26:0a:
         66:e8:4e:f9:f2:d3:cd:53:ef:08:11:5d:13:94:6e:01:c3:7e:
         60:a8:e3:bd:43:20:fc:e1:e8:9d:a9:9c:b3:a9:13:1d:58:09:
         cd:b5:81:3a:b8:16:80:72:50:e2:20:d7:e5:ec:06:b7:0f:d6:
         aa:38:3c:8d:ed:77:61:f2:55:ee:e8:cf:d1:15:da:82:1e:64:
         20:18:8d:9e:df:52:a2:46:40:51:38:18:21:fa:a3:d7:c2:9f:
         9c:56:62:c6:ea:42:84:15:68:91:9b:2f:f0:1b:a9:92:40:f9:
         89:23:7b:45:d5:6e:ab:8e:55:5e:71:67:39:89:ed:ff:03:16:
         d6:df:1f:6e:37:65:74:0d:26:73:7e:15:fa:1d:41:d9:95:db:
         1f:10:4d:17:25:03:8d:97:02:8b:c2:19:0e:13:f3:ef:9c:39:
         86:d5:74:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA0Si7fGCkG0YQX4ENm0Z3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTg0M2QzYTY3YmYyMDJkMGFlMjNkZjk1ZTE0ZWE4NzFk
OGYxNWQwHhcNMjYwODI0MTUwMTExWhcNMjYwODI1MTUwMTExWjAzMTEwLwYDVQQD
Eyg0MWVhMTQ5Y2QwZTg1MmUxMmJmODU4NmQyODViNzU0MDEzMGFlYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVYlxJiXb6HUJLobXn3b0Wp61iz6
jbQgo88sTaAeqFescDUiVnmcVN2s7ngDJnH7P0/ufeQXanFkwq9/q7ZylXQAaITd
i/lE6GUMvnE/3sztO9hyuR3L0QeBTfSHkSn+qD+AScwvy+rmRq6cdafCSErwhMOl
paqRluMKGg6+zLIF/I4f7C/HDSs9ykBJ6yhOHZR3QiVjnVCMEPzYDTbTnQ1PULgG
+cwfRW524C/43DH6XPpL4r+FO6tropqZ+IzQEtxlfXE0VtrcYeORUvyVl/ib+5Tq
rQzoLE5CPXTacFSY+aFez/skYf19lWIrkIsFWYpUqbRA1D5OBB5uGjKrtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHqFJzQ6FLhK/hYbShbdUATCupYMB8GA1UdIwQY
MBaAFHmoQ9Ome/IC0K4j35XhTqhx2PFdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEt
YjRkZDIyNzU4OTUxLzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9mNzBjNmEtODE0Yi00NjFhLTg1NDEtYjRkZDIyNzU4OTUx
LzEvZWFoRDA2Wjc4Z0xRcmlQZmxlRk9xSEhZOFYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHIfkK0c
mY9dWeYmrb4VyMo94f0NOYd9YF2BMAdHcgmoRfKHcdvy1M+BSNnHbBg2d+tJLrKa
wCYxsRSU7NFK1B/bPLOwf4yuBkjwFuCPjV5rJOFPF5n7niYKZuhO+fLTzVPvCBFd
E5RuAcN+YKjjvUMg/OHonamcs6kTHVgJzbWBOrgWgHJQ4iDX5ewGtw/Wqjg8je13
YfJV7ujP0RXagh5kIBiNnt9SokZAUTgYIfqj18KfnFZixupChBVokZsv8BupkkD5
iSN7RdVuq45VXnFnOYnt/wMW1t8fbjdldA0mc34V+h1B2ZXbHxBNFyUDjZcCi8IZ
DhPz75w5htV0MQ==
-----END CERTIFICATE-----
Generated at Mon Aug 24 22:24:21 2026 by rpki-client