Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          X8yGes6wKZMY3bkC/0ssFSruWbD2jTI2VtK0RpRSXNY=
Subject key identifier:   31:9A:05:6F:60:43:61:F4:C2:11:07:A8:0C:F9:A7:67:AA:23:D6:49
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019FFBA51EA507D5F7359C0A3047A15EAE42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          198F
Signing time:             Thu 13 Aug 2026 15:02:10 +0000
Manifest this update:     Thu 13 Aug 2026 15:02:10 +0000
Manifest next update:     Fri 14 Aug 2026 15:02:10 +0000
Files and hashes:         1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: RtCMKAn7DHRQ1ek+4kMlMolwOXsMQoCVwS78JYQutn0=)
                          2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fb:a5:1e:a5:07:d5:f7:35:9c:0a:30:47:a1:5e:ae:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Aug 13 15:02:10 2026 GMT
            Not After : Aug 14 15:02:10 2026 GMT
        Subject: CN=319a056f604361f4c21107a80cf9a767aa23d649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d6:92:0e:d6:53:ad:d7:97:a5:c8:a4:17:67:
                    40:45:f4:ce:c6:b7:df:5a:ae:d2:3b:d1:87:fc:00:
                    7f:44:7e:c9:4d:0d:8d:2c:eb:60:fc:fd:2c:c6:72:
                    87:03:2a:31:46:22:47:bc:c4:ba:de:bb:07:a8:f0:
                    72:5e:49:c5:1a:cd:4d:3d:53:a0:30:90:73:6c:cb:
                    06:a6:b6:36:9d:a6:ef:13:9e:56:a7:9e:5c:df:99:
                    ea:76:63:40:02:70:51:6b:27:60:7e:6f:7a:e0:8e:
                    81:8a:2e:70:76:10:f3:38:53:3d:69:47:e7:58:b0:
                    92:96:51:e5:35:c2:e7:45:7f:a7:2f:05:3f:03:10:
                    f3:3c:4a:95:f7:c1:af:ec:40:14:09:49:82:37:05:
                    70:e5:60:62:34:0a:9a:ee:93:ed:1f:1d:af:ea:61:
                    87:84:e5:1f:c4:0a:88:b2:bc:39:9d:c7:ce:61:ca:
                    fb:6b:98:b0:43:1a:13:33:4a:c4:97:d3:4b:0e:55:
                    8a:72:bc:fd:db:78:8d:1d:f3:76:20:b5:44:39:d7:
                    6d:84:e4:11:f3:48:b9:af:a9:d4:f8:e9:0e:ba:2e:
                    d5:28:00:2f:77:07:50:23:9e:56:ab:21:e1:de:8e:
                    cb:af:fa:0b:08:16:73:78:eb:db:8c:b7:b8:ee:85:
                    b9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9A:05:6F:60:43:61:F4:C2:11:07:A8:0C:F9:A7:67:AA:23:D6:49
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:24:bf:55:c9:65:e5:30:ad:eb:8b:ef:87:67:7a:c6:5e:
         22:82:49:74:a0:b3:28:ae:ba:41:95:12:3c:fe:09:d3:3a:af:
         59:69:33:9a:55:32:5d:41:cf:43:63:9f:26:b2:82:fd:b0:b2:
         b9:55:a0:2e:90:72:fe:03:0f:b2:9e:99:f7:cf:b8:a7:71:f4:
         dd:ee:14:bf:15:d1:95:25:40:69:16:26:fe:00:c0:65:b6:a8:
         50:09:c9:b9:a7:bb:35:b2:cc:6c:52:e1:9e:8f:d9:9d:fe:de:
         f5:b9:da:45:e8:5f:53:97:97:21:31:38:94:0b:56:70:77:0d:
         ab:f7:4c:5e:c7:88:62:b4:87:ae:cb:2b:20:97:49:88:05:32:
         27:f8:8c:51:0d:79:74:6c:6b:00:9f:4b:23:03:d1:44:1c:83:
         02:5b:7e:e5:a6:d0:2e:94:0b:64:2e:6b:8d:d4:75:6a:67:f6:
         e2:1a:c8:43:5e:fa:c6:c7:58:09:b4:b7:85:cb:9a:4f:dc:3e:
         59:cd:1e:6e:d6:18:0d:48:5b:f0:82:05:b0:d8:e4:60:56:bc:
         33:4a:0e:ef:9b:b0:b7:35:39:bb:be:d1:f1:9d:65:3e:cd:bc:
         b1:31:d1:71:a6:83:ee:26:e6:80:95:41:bf:62:8c:4c:7c:7c:
         84:08:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 17:49:10 2026 by rpki-client