Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
File:                     H6eVFn0tn7QglB8XKHvfPF7tjfk.mft (raw, json)
Hash identifier:          lXbN3707yoC66dMD2bGs6JCxk5y4WzVNvGFacjCzSHc=
Subject key identifier:   20:81:0B:B4:CF:75:E4:33:D6:76:AA:C3:A0:2D:70:00:91:CA:51:65
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Certificate issuer:       /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial:       019F9F28982D7866E55763951AD62436D516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
Manifest number:          0AE7
Signing time:             Sun 26 Jul 2026 16:01:05 +0000
Manifest this update:     Sun 26 Jul 2026 16:01:05 +0000
Manifest next update:     Mon 27 Jul 2026 16:01:05 +0000
Files and hashes:         1: 3lrznUDu_RYJXoCA6T2-RqC6f2U.roa (hash: hPVXT+slJzISzm2tkyQwcR1eVSvzD3ViRToSxorCndY=)
                          2: C_5yyZCFvKCe1q25gF_5oZ_pygY.roa (hash: blUVsXaM11h0aXpR0/ZhyzARymiUeJDD6sZq8PuA4SY=)
                          3: H6eVFn0tn7QglB8XKHvfPF7tjfk.crl (hash: vTL4EUmCHmHn7YvpyVGdA0tsdVY0oHZaZzvGHnt+quw=)
                          4: U7dOPr8aIxZqqFvoN6CicfjLnZI.roa (hash: va8TN3ROTz1PexP26HjmTHBuqhoh3cPlg+O3J7QZ94E=)
                          5: qoYEAqhri4bUdYVpI1skjqF8iFo.roa (hash: XRgJrR2oLoLBzNI7/ZXQmYkUAt4y3ZosqwuZaOVv078=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:98:2d:78:66:e5:57:63:95:1a:d6:24:36:d5:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
        Validity
            Not Before: Jul 26 16:01:05 2026 GMT
            Not After : Jul 27 16:01:05 2026 GMT
        Subject: CN=20810bb4cf75e433d676aac3a02d700091ca5165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a5:0e:f1:fd:f2:34:df:99:93:a3:2b:55:1a:
                    7b:88:f9:e8:69:7b:5b:2f:bf:ff:b9:c2:42:a1:f2:
                    b5:66:7d:fe:27:0d:ec:bb:c3:bd:1b:e3:1d:5a:86:
                    8b:85:39:a8:d0:ca:00:9a:4c:b2:63:1b:ec:f5:b2:
                    57:9f:42:19:6f:ba:ef:5b:7d:46:92:ee:c6:d9:ef:
                    2e:76:c9:f9:f2:b0:80:a9:15:98:cc:5e:3e:9f:9b:
                    9a:1e:b3:67:c1:aa:e4:f0:cb:46:de:69:fd:be:3d:
                    7f:ea:9e:ad:05:de:26:78:59:90:fb:55:05:d5:e1:
                    c9:83:39:cf:3a:e2:03:ad:85:24:6b:cc:a3:dc:c7:
                    40:59:ec:5c:5a:42:4f:0d:88:79:9d:08:da:93:2d:
                    e7:de:89:66:f1:40:a8:8a:ed:36:b8:ee:32:56:4a:
                    8c:5b:1e:52:eb:c6:59:fe:16:0c:18:04:dd:f6:f4:
                    87:4c:62:a8:d1:7e:08:ae:9d:8e:56:77:12:e1:87:
                    de:a2:f3:5a:45:2f:94:ee:94:68:8e:aa:02:3d:4c:
                    05:0e:d0:a6:2d:e3:d7:0c:31:81:b9:fa:6e:db:fd:
                    ff:cb:e9:59:20:6a:4d:89:5c:33:54:84:7c:01:b7:
                    84:5a:1c:1e:b1:31:53:ae:4a:e8:5c:fc:2f:98:2b:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:81:0B:B4:CF:75:E4:33:D6:76:AA:C3:A0:2D:70:00:91:CA:51:65
            X509v3 Authority Key Identifier:
                keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:19:b4:1a:09:08:9c:9e:de:56:24:91:d5:b6:99:77:d7:7b:
         1c:3d:eb:89:d3:d3:52:16:d7:d6:8d:93:76:34:26:57:cc:f9:
         d8:ee:01:fb:0b:73:51:49:19:fc:78:df:9f:07:0a:35:5a:07:
         df:a7:38:1e:79:a9:6b:76:ce:e0:2f:05:7e:0d:0e:8e:2d:22:
         14:71:dc:4a:2d:48:5a:36:1c:43:ee:54:b9:3d:b8:8e:f7:c5:
         ca:45:e6:1f:0c:4a:4a:2e:4a:87:04:db:72:6e:a7:61:de:d7:
         8a:29:cf:da:49:f3:74:2f:bf:8a:c2:70:6c:c9:da:f7:0f:b0:
         a7:71:9b:ff:16:e7:c2:ec:ac:8b:49:0e:c3:aa:68:a2:9b:61:
         b2:fc:b8:03:98:12:fb:ce:09:1e:aa:ba:b5:e4:51:5f:53:86:
         ce:86:61:e7:32:ec:aa:66:6e:fe:30:7f:61:3a:00:63:d4:aa:
         92:9d:3a:b4:aa:00:e3:86:ca:dd:74:4a:b5:f7:fd:6a:e5:5b:
         28:92:14:f4:99:c3:5a:ab:b1:66:38:0d:0e:39:30:e5:c4:6d:
         dd:32:03:84:f1:92:09:91:83:73:66:19:f7:a3:a6:e2:7c:c4:
         04:86:bb:33:cc:40:25:1d:c3:a8:51:cc:a5:fe:16:0e:35:ed:
         cf:ae:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:01:42 2026 by rpki-client