Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          o/IIy8yr3qwFTpNlFofeckq5iJycnhPfvjrFQe1FfYk=
Subject key identifier:   79:8B:8C:B8:95:2C:F2:73:94:4E:79:43:56:C8:87:6B:71:B5:1D:3B
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       01A08AC306170C3D81E6DD060DD1F44920B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          1A52
Signing time:             Thu 10 Sep 2026 10:00:31 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:31 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:31 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          3: RVARB5gmjTf2RYyiXEPOpOXxCDs.roa (hash: K6dew7DJ4uzjFiJigW12hfzcSGSynvBz3c731CNk5sM=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          6: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: 5KHEKT9/qoqSYHEDx7di35uUf3PC8jbgu4xJ6hUmLGo=)
                          8: gne3kq1o-I5H5isdKeVnYHfgRM8.roa (hash: OHMcztr6MiSOs8pzNesHKIFuwuf6t31tDx5kJSWgBCw=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:06:17:0c:3d:81:e6:dd:06:0d:d1:f4:49:20:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Sep 10 10:00:31 2026 GMT
            Not After : Sep 11 10:00:31 2026 GMT
        Subject: CN=798b8cb8952cf273944e794356c8876b71b51d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:ba:e7:6a:db:d3:c2:42:6a:5f:ac:30:5a:
                    c9:b4:19:a0:df:1d:ac:f2:fe:0b:61:44:d2:0d:96:
                    e2:4c:5b:9d:2b:4b:b3:af:d5:bf:b8:e5:c1:b1:77:
                    f4:44:6d:27:1f:c7:a5:43:2f:14:02:c3:7d:6c:8e:
                    80:67:4e:ba:fd:b8:6c:2a:0f:4f:d6:a1:5d:e6:10:
                    a7:c3:74:91:bf:f2:19:aa:51:82:8d:b6:93:cc:f3:
                    6d:90:78:3c:a4:b4:a0:45:15:48:62:3e:57:43:90:
                    62:46:85:78:29:78:3a:33:f4:cf:f4:55:43:5e:92:
                    f7:56:c4:70:72:a6:2e:fa:c7:21:0b:33:52:db:9c:
                    25:2a:ef:79:23:f0:c8:a8:b8:02:ca:fd:ca:1d:05:
                    df:61:37:bd:44:b0:9a:3a:15:7c:c4:71:2d:05:9f:
                    86:e7:ca:92:f1:e0:03:b0:10:45:03:58:5c:5e:54:
                    8a:ee:a8:ca:5e:20:44:56:89:f5:b7:f6:30:6b:01:
                    78:d9:ba:f9:c6:14:13:a5:ee:9e:6a:11:79:a3:52:
                    b0:f9:af:d8:1c:ff:6f:32:57:ad:3e:e8:54:d6:37:
                    93:fb:48:b8:65:a9:e5:f2:ff:fb:c9:b0:52:21:a6:
                    fe:19:00:c7:2b:94:76:17:19:f4:de:b5:97:d5:1a:
                    44:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8B:8C:B8:95:2C:F2:73:94:4E:79:43:56:C8:87:6B:71:B5:1D:3B
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:fa:75:1b:c4:d9:07:4b:d1:ad:51:c0:13:32:35:3e:62:e3:
         ef:bb:a6:f0:cd:f6:14:eb:13:3b:dd:93:b5:f8:9f:85:96:26:
         2f:b8:30:43:d0:a2:ce:6c:bd:35:19:6e:13:5a:52:7c:f4:02:
         53:9f:c5:35:6a:38:87:59:55:fa:93:22:0b:b1:e6:94:c1:c9:
         ce:7f:50:06:7f:9a:7c:3e:aa:9a:ce:2b:35:61:d5:0c:46:0c:
         a9:61:05:fe:0f:55:54:b7:88:b2:14:d0:3b:61:20:90:25:0f:
         b3:c7:e1:83:30:83:a2:03:2d:95:cf:0d:70:a2:d5:8f:ce:a6:
         a2:d0:18:1b:92:f5:e3:38:3a:9e:f3:79:8a:2b:1f:57:57:1d:
         90:c5:4a:fb:ee:72:29:d5:aa:71:f2:03:d9:7c:13:38:fd:ae:
         f7:c2:37:ef:14:7f:63:50:31:02:56:f4:4a:08:eb:af:ba:66:
         95:7e:63:d8:e7:75:18:bd:df:f6:3c:17:df:65:16:06:aa:30:
         c2:47:0b:b6:47:4e:e9:7d:11:7d:32:97:b4:3b:32:61:5b:23:
         6f:15:26:01:c2:75:a0:de:10:82:50:dc:e6:a0:b9:73:df:c1:
         d8:a5:68:9c:b2:d1:f8:7f:4b:79:ac:b7:ef:70:43:f2:76:35:
         8d:49:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:23:39 2026 by rpki-client