Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
File:                     eHl3C__BTZzftXTshmyq8TVy9Fw.mft (raw, json)
Hash identifier:          I1r2+EPj+jGU34dC0QPyE0DkNgBpJ7Wn0q2MQZbRSls=
Subject key identifier:   0C:F9:86:11:16:E4:97:C3:33:64:CB:02:55:31:0B:92:28:AD:36:39
Authority key identifier: 78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C
Certificate issuer:       /CN=7879770bffc14d9cdfb574ec866caaf13572f45c
Certificate serial:       019FFC48D3F46B5A1EFDB4756EBFDD0FF766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
Manifest number:          16BE
Signing time:             Thu 13 Aug 2026 18:00:58 +0000
Manifest this update:     Thu 13 Aug 2026 18:00:58 +0000
Manifest next update:     Fri 14 Aug 2026 18:00:58 +0000
Files and hashes:         1: eHl3C__BTZzftXTshmyq8TVy9Fw.crl (hash: V/6UpRljVSpS7nP42D7MJk/8UIr6iJYC8+LDYrwlWvI=)
                          2: haFw3q9tFoad6JUgiF-KPVOV4eM.roa (hash: e1I2SrRGxtbgkFSgcz9jLZjRjE847NKvzw0g1roFc00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fc:48:d3:f4:6b:5a:1e:fd:b4:75:6e:bf:dd:0f:f7:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7879770bffc14d9cdfb574ec866caaf13572f45c
        Validity
            Not Before: Aug 13 18:00:58 2026 GMT
            Not After : Aug 14 18:00:58 2026 GMT
        Subject: CN=0cf9861116e497c33364cb0255310b9228ad3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:5c:7a:04:60:c1:52:b5:2a:5c:1b:55:41:
                    b0:22:52:e0:70:a9:58:00:22:e6:f4:e5:9f:c6:db:
                    b0:a5:31:4e:08:aa:75:21:17:07:7c:97:9d:8b:a1:
                    bf:25:84:b8:c0:88:8d:3d:7d:fb:64:71:75:aa:6d:
                    50:77:67:6d:f2:5f:37:d3:16:b5:90:65:5b:48:9d:
                    d2:33:a1:18:14:fc:0e:79:1f:69:79:2c:a1:b3:3b:
                    f6:07:d5:8a:20:0f:e7:01:5d:03:be:ae:08:89:5d:
                    3a:30:c8:04:15:99:23:ce:fa:5d:14:a9:25:8f:d4:
                    62:b6:47:23:39:b6:89:6b:34:73:b2:1c:8c:e8:b5:
                    58:0f:b0:82:4e:5f:eb:a2:b5:fc:26:a0:ab:79:04:
                    12:a3:08:68:16:81:7d:55:6b:c8:e6:ca:73:f8:ff:
                    f6:93:dc:4f:db:da:77:17:18:08:7f:1d:ee:25:8e:
                    65:cc:63:cf:8b:4f:9a:2e:be:f2:d4:8a:c3:bf:f7:
                    fd:1a:d8:77:4e:c6:68:cb:9c:14:93:27:2e:73:a2:
                    cb:00:93:df:a3:b6:d2:d7:0c:4b:b6:33:5f:2f:86:
                    25:73:c6:cf:5b:dd:c9:c6:ad:8d:30:c8:a0:30:a0:
                    31:98:dc:40:c4:87:01:2c:91:12:a9:52:9b:a2:70:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F9:86:11:16:E4:97:C3:33:64:CB:02:55:31:0B:92:28:AD:36:39
            X509v3 Authority Key Identifier:
                keyid:78:79:77:0B:FF:C1:4D:9C:DF:B5:74:EC:86:6C:AA:F1:35:72:F4:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHl3C__BTZzftXTshmyq8TVy9Fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/37e26f-57b8-4080-b832-ee7313716498/1/eHl3C__BTZzftXTshmyq8TVy9Fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a7:49:54:88:16:b1:0c:9b:23:12:64:be:4b:45:08:93:1b:
         34:45:86:92:57:70:7a:a8:1b:1d:1c:04:49:d1:46:71:77:0b:
         84:79:79:82:34:cf:58:df:9f:70:85:f9:36:2e:43:8a:ea:c2:
         e9:a3:90:79:63:ca:44:4f:7d:fc:a7:8f:58:16:ee:38:51:c8:
         0b:33:28:9a:a7:1b:25:5e:76:8d:b7:cc:7c:a7:e8:8c:ec:0b:
         9d:96:aa:74:6f:7a:03:34:95:a1:55:3c:86:38:ac:ec:4b:90:
         3c:00:a4:cb:8e:70:44:7a:c5:ef:3b:aa:0d:82:fa:0a:e4:6f:
         c4:aa:8a:fe:6f:36:8b:9d:0d:b6:5d:04:b3:17:f2:41:86:5b:
         67:1e:6c:d8:e3:29:63:33:c1:1f:08:e8:4c:a7:4b:6a:c7:55:
         13:90:b7:80:4b:59:b7:aa:ad:fc:27:bd:5b:44:af:91:93:43:
         c7:e3:66:b6:96:ef:8d:6d:a4:e1:a4:ee:60:87:21:04:9f:ad:
         ea:6f:48:fb:0f:89:c5:38:c1:76:06:69:a0:38:d2:00:2a:eb:
         f6:f4:05:e2:85:bc:85:e7:a5:0f:2a:65:5f:dc:45:4f:6b:2b:
         99:18:26:72:0c:c0:a2:ee:67:27:6f:bb:34:28:36:c1:64:08:
         a3:25:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 20:48:23 2026 by rpki-client