Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          LutoPSHUppTIdWHOR2b1K7muwb6vw7zMk+F/Gyld5Z4=
Subject key identifier:   3F:23:8E:F7:55:CC:79:DE:BA:AA:CD:BF:D4:92:8A:6C:70:D2:55:55
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019F11F81FF19115F5ED12F5073407978FE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1916
Signing time:             Mon 29 Jun 2026 06:01:41 +0000
Manifest this update:     Mon 29 Jun 2026 06:01:41 +0000
Manifest next update:     Tue 30 Jun 2026 06:01:41 +0000
Files and hashes:         1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: EXP8anyJjqKUqtA7tdJ6YoVdWwdirFvXn2oXPoVZvPg=)
                          2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 06:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:f8:1f:f1:91:15:f5:ed:12:f5:07:34:07:97:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Jun 29 06:01:41 2026 GMT
            Not After : Jun 30 06:01:41 2026 GMT
        Subject: CN=3f238ef755cc79debaaacdbfd4928a6c70d25555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:e4:eb:2b:37:84:93:e9:49:80:98:18:9e:
                    b7:ac:2f:a3:15:e2:0e:a0:cb:e1:0d:4e:da:f3:63:
                    4f:9c:3d:22:41:1d:7b:df:a5:26:59:fc:70:77:a9:
                    e6:1b:db:62:12:34:1b:9c:02:7e:e9:f1:72:62:d9:
                    c2:ac:bc:f7:b5:50:21:9a:6b:e0:c7:5d:67:0f:97:
                    24:20:72:2e:5f:62:0e:57:88:78:ea:6d:d8:c9:30:
                    d8:65:73:ca:51:03:61:ef:df:a2:43:ab:88:86:1b:
                    50:51:54:2c:3d:ec:c0:c1:ea:78:5b:bb:df:40:ce:
                    de:32:03:70:e9:17:73:87:dc:5a:5c:06:aa:39:0a:
                    56:94:6f:db:ea:6a:72:e5:c0:7c:93:f6:06:5a:1e:
                    fc:ee:0d:e2:a0:2f:5b:d9:29:5b:86:57:92:3f:f0:
                    dc:f9:97:2e:fe:02:f9:38:4d:b2:a6:35:cd:08:21:
                    4b:99:de:7b:5d:1f:98:0a:aa:fd:b4:97:1b:9c:d1:
                    e2:ea:29:d9:af:7c:5e:b2:ad:f7:45:b0:3c:21:60:
                    9b:31:62:fb:f2:1f:86:10:a9:ce:a6:42:57:dc:15:
                    dd:b9:5a:08:21:8f:1f:7c:40:80:c3:bc:f5:49:46:
                    d5:89:fd:13:f2:d7:78:b6:35:64:59:16:cc:e3:1a:
                    60:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:8E:F7:55:CC:79:DE:BA:AA:CD:BF:D4:92:8A:6C:70:D2:55:55
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b1:1f:17:95:f4:fb:7a:98:13:0c:61:be:0f:82:33:68:aa:
         c4:13:99:55:f6:56:15:0a:d4:87:06:9f:31:ae:ba:fb:14:d6:
         9f:51:55:c1:ba:d0:ae:1e:e9:cc:4c:b2:df:dc:fe:5b:c5:59:
         90:93:32:1c:e2:4c:af:7e:80:f6:c8:18:80:9b:a5:a6:00:25:
         ed:35:22:60:bb:76:9e:b7:05:08:30:41:1b:c7:9b:2e:2e:73:
         09:8a:e4:da:bb:ef:4e:f1:24:0c:a0:f0:2f:6c:d6:66:be:99:
         d0:b8:2f:c4:68:8b:fc:f2:e5:a0:86:26:ba:e0:3a:eb:8b:05:
         82:c7:09:df:dc:0d:68:fd:e3:f1:4f:c5:bc:cf:82:b7:bf:8f:
         1d:5c:c1:8f:8d:ed:7e:9e:1e:de:65:fc:ca:5a:4f:1c:72:0f:
         21:dc:5b:27:3b:3e:6d:39:8e:de:96:8b:8e:2f:50:57:c6:c2:
         23:3b:c8:38:09:7d:62:d6:f8:f3:b2:53:60:14:99:6a:74:7e:
         2d:f3:05:12:73:e8:7d:b0:6c:b6:45:38:d1:54:3f:37:36:ef:
         ba:50:f3:4a:b2:50:dd:aa:82:a4:08:38:ea:e4:44:ef:de:81:
         46:d4:2a:35:02:b8:09:ab:dd:d0:59:1b:68:65:1b:ee:52:ac:
         39:fc:09:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8R+B/xkRX17RL1BzQHl4/nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWYwZWQxZTMwOTFlN2I1Yzk5Y2U0M2NhYzEwMzEwNTVi
MGYzODUwHhcNMjYwNjI5MDYwMTQxWhcNMjYwNjMwMDYwMTQxWjAzMTEwLwYDVQQD
EygzZjIzOGVmNzU1Y2M3OWRlYmFhYWNkYmZkNDkyOGE2YzcwZDI1NTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PLk6ys3hJPpSYCYGJ63rC+jFeIO
oMvhDU7a82NPnD0iQR1736UmWfxwd6nmG9tiEjQbnAJ+6fFyYtnCrLz3tVAhmmvg
x11nD5ckIHIuX2IOV4h46m3YyTDYZXPKUQNh79+iQ6uIhhtQUVQsPezAwep4W7vf
QM7eMgNw6Rdzh9xaXAaqOQpWlG/b6mpy5cB8k/YGWh787g3ioC9b2SlbhleSP/Dc
+Zcu/gL5OE2ypjXNCCFLmd57XR+YCqr9tJcbnNHi6inZr3xesq33RbA8IWCbMWL7
8h+GEKnOpkJX3BXduVoIIY8ffECAw7z1SUbVif0T8td4tjVkWRbM4xpgQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8jjvdVzHneuqrNv9SSimxw0lVVMB8GA1UdIwQY
MBaAFO2vDtHjCR57XJnOQ8rBAxBVsPOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2Yt
MTdhMWY4NmM2ODA0LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZTQzZmEtZTkxZi00ODE4LWI4M2YtMTdhMWY4NmM2ODA0
LzEvN2E4TzBlTUpIbnRjbWM1RHlzRURFRld3ODRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbEfF5X0
+3qYEwxhvg+CM2iqxBOZVfZWFQrUhwafMa66+xTWn1FVwbrQrh7pzEyy39z+W8VZ
kJMyHOJMr36A9sgYgJulpgAl7TUiYLt2nrcFCDBBG8ebLi5zCYrk2rvvTvEkDKDw
L2zWZr6Z0LgvxGiL/PLloIYmuuA664sFgscJ39wNaP3j8U/FvM+Ct7+PHVzBj43t
fp4e3mX8ylpPHHIPIdxbJzs+bTmO3paLji9QV8bCIzvIOAl9Ytb487JTYBSZanR+
LfMFEnPofbBstkU40VQ/NzbvulDzSrJQ3aqCpAg46uRE796BRtQqNQK4Cavd0Fkb
aGUb7lKsOfwJnw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 15:40:42 2026 by rpki-client