Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          L1gA+5wwFSLX6wDWC5jV1WGM1CYXFB8LQTu1LSdYXb0=
Subject key identifier:   C7:A6:3C:B6:69:C4:EB:CB:90:AC:2B:54:17:E6:4C:14:9F:2A:B1:75
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       019FE5F8376D342A1F1C8D948C4D063D00AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          1210
Signing time:             Sun 09 Aug 2026 10:01:17 +0000
Manifest this update:     Sun 09 Aug 2026 10:01:17 +0000
Manifest next update:     Mon 10 Aug 2026 10:01:17 +0000
Files and hashes:         1: ZmMT2z6YESzsqLiHHksh3zTPbG4.roa (hash: iwSuPLvK55sjZ7hNF2l1Dx0x0q3p0/ZnhsGr2wjMgc8=)
                          2: aACp-SkFP7ASwX_a2tuNg_nv_j4.roa (hash: 826QRydcpcHGVP83CrJwkOk7bh/+OgMxavlPdNEpobs=)
                          3: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: xRA4qomcKFQayAWd2UoYsmsciRIn4nWjpaslYr4JhcA=)
                          4: ijwDFvI6Hlh6qiz9W9UJGnIAyt8.roa (hash: moP/GDH/2J0pl8h5OiLf7BA6bBbW85uoOSfkVYm6rrs=)
                          5: jhZDQgS37cDeN0fg9TKpAHJ2J-0.roa (hash: 0zjaA0uaqIEPRMOa6F/AxIRFhD/Vgqi5oAKX2XbvGM8=)
                          6: yT1RKaA_jW_Fs_q2Xta-wqJ2rA4.roa (hash: Yhagr78CIxoIwhFIExPGHD+JkDFI98BZt35S7gqnNxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 10 Aug 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:e5:f8:37:6d:34:2a:1f:1c:8d:94:8c:4d:06:3d:00:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Aug  9 10:01:17 2026 GMT
            Not After : Aug 10 10:01:17 2026 GMT
        Subject: CN=c7a63cb669c4ebcb90ac2b5417e64c149f2ab175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d9:7f:3d:09:99:13:0f:39:a5:1b:c1:f8:fa:
                    7f:7c:85:cf:a9:39:ed:fd:3e:bd:c9:7a:55:47:c6:
                    4e:8b:1c:b1:6e:1e:4a:29:c9:23:5e:7b:b0:97:97:
                    9e:5e:05:5a:17:1d:13:6d:4a:ff:4e:fd:e6:7e:f9:
                    19:41:e7:e5:f9:e1:55:5f:95:a9:f0:3d:9d:f4:dc:
                    e1:e0:50:53:c5:1a:c8:15:a0:0a:93:e8:61:a7:dd:
                    71:16:04:17:55:36:06:31:d9:aa:aa:28:42:16:34:
                    2c:ba:e0:be:ce:66:7c:06:e1:d9:2b:4b:73:a8:a6:
                    c1:26:a1:ed:ea:c8:78:92:c4:2c:6c:3c:ba:49:fa:
                    f6:77:cf:e4:f7:75:a5:4b:c8:47:0f:9d:17:b0:90:
                    86:de:95:20:e5:65:0c:75:6c:ca:f1:7b:05:36:19:
                    31:7f:82:b0:81:2a:cc:6b:77:76:89:1d:70:1e:5b:
                    c1:6e:12:76:c3:60:89:51:f5:27:a6:87:3e:4c:4e:
                    3e:43:85:33:82:14:fa:fa:5c:4b:d5:e1:9a:3e:6a:
                    01:51:0f:02:1b:5d:5f:2d:23:6b:11:cb:c1:45:22:
                    2a:e3:bd:79:67:cd:16:46:f4:c0:4f:22:10:f2:b6:
                    69:74:0c:43:d6:4e:b4:c3:b4:1a:5b:3c:87:0e:21:
                    8d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:3C:B6:69:C4:EB:CB:90:AC:2B:54:17:E6:4C:14:9F:2A:B1:75
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f1:b5:c1:13:fc:85:ef:9b:04:9d:7e:74:47:18:b4:6b:83:
         1e:a1:88:7f:7e:43:15:4f:19:c6:11:fd:a5:a8:11:08:49:40:
         57:14:25:3e:49:9c:d5:35:41:2d:4f:4c:4b:cd:1d:9c:ea:bf:
         35:0e:c1:f3:3d:21:5c:c0:98:63:17:38:d0:dd:94:d7:cf:11:
         0c:f9:e5:8d:13:cb:31:cc:12:1f:7d:9d:41:05:a5:14:d6:ff:
         a0:cc:a5:43:0c:8a:50:02:1b:9a:a6:27:13:71:eb:7b:69:9e:
         2b:2d:70:d3:35:33:ec:2e:69:7d:f4:8e:1c:a3:50:d9:6e:3a:
         02:cc:77:f4:46:8a:ae:9e:7c:e8:bb:c4:43:fe:13:9b:7d:10:
         40:0f:6d:0b:d1:7c:90:25:b5:29:ae:a0:72:c9:d3:c2:ac:39:
         f3:ce:a6:1d:cc:aa:4c:d0:4a:c8:62:bc:ad:cc:e9:09:40:07:
         4b:78:fa:07:be:38:54:cf:a2:a2:89:aa:4b:71:1a:45:fd:6f:
         04:bb:20:a7:43:50:f4:94:9d:fa:79:64:88:81:92:16:5f:b2:
         ad:5c:3c:a1:66:87:22:54:f4:1a:46:35:a7:fb:a8:b5:5c:09:
         bf:67:9a:ca:0a:48:ec:1c:69:b1:ff:ef:7e:34:09:85:ec:89:
         d6:db:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 13:42:41 2026 by rpki-client