Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          hiVc0sENWGNHERrbFrqwMZcezyN/n54SdC+hF5YrxLU=
Subject key identifier:   72:10:CC:C7:31:FD:6B:79:99:7A:7D:2F:71:41:C0:C8:70:19:D5:0F
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       01A001DCFCD70FB2D82B741ACA8AC7A80BDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          1991
Signing time:             Fri 14 Aug 2026 20:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:54 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: 7IL8DfhrxfyMtkKW4c0mJJyzWc3eq6zNS4hl222pUeI=)
                          2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:fc:d7:0f:b2:d8:2b:74:1a:ca:8a:c7:a8:0b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Aug 14 20:00:54 2026 GMT
            Not After : Aug 15 20:00:54 2026 GMT
        Subject: CN=7210ccc731fd6b79997a7d2f7141c0c87019d50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:04:ce:23:64:2e:ba:f8:98:16:a9:27:16:
                    95:d3:5f:23:c1:98:f2:52:1e:af:2a:59:38:de:92:
                    99:21:82:7c:99:1e:83:24:26:6a:d0:4e:70:7f:45:
                    c9:96:14:0a:ff:48:f6:84:c8:7b:b8:30:23:ce:f2:
                    a2:27:df:e8:c4:52:b7:da:97:52:a6:e3:89:08:75:
                    f0:64:99:41:57:d3:79:8a:c4:db:92:f4:67:2f:2a:
                    69:5b:48:0f:d2:e6:be:56:a0:2b:d8:d0:99:74:0d:
                    7c:0d:41:36:df:f4:c5:d4:8c:3c:f5:55:ab:66:c6:
                    d6:7a:16:c4:56:24:07:48:67:2c:79:ae:9b:4d:ca:
                    ee:4e:f7:c9:37:a2:fd:fc:48:92:80:9c:76:cf:7b:
                    e6:da:bc:65:10:62:1e:d4:a6:e2:77:69:50:e0:5f:
                    37:89:99:43:89:94:79:98:bc:49:fc:66:f1:70:0b:
                    4a:d8:8e:f3:14:12:b5:91:80:eb:98:18:43:27:82:
                    01:74:d7:6e:62:50:2a:57:91:56:6d:c9:18:f4:20:
                    ef:13:3c:74:f2:bb:7a:f8:77:c7:99:23:a0:42:e4:
                    47:b2:ee:4c:d5:39:7c:c2:04:c9:3d:79:77:3b:f1:
                    06:fb:a7:2b:51:0c:f4:66:63:1e:21:71:11:14:4e:
                    a0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:10:CC:C7:31:FD:6B:79:99:7A:7D:2F:71:41:C0:C8:70:19:D5:0F
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:db:8d:6a:55:73:f9:5a:0f:12:01:07:85:5e:34:9c:63:02:
         55:60:c0:63:8d:b8:b3:55:a2:d3:9b:fd:43:7e:20:02:c1:2e:
         fc:bd:34:07:1d:b9:c8:16:e2:8e:d4:3f:b6:7f:4b:f7:0b:39:
         ef:ff:e0:8d:2a:db:1b:5b:f3:e9:6c:59:28:0e:5e:96:b0:b7:
         76:62:a4:de:cb:1d:5e:55:81:94:07:70:20:dc:1e:58:f4:fc:
         10:9f:5c:51:82:b5:0b:c6:25:8f:4c:19:9e:a4:c6:55:e1:07:
         e5:d3:98:cb:37:8f:10:fc:de:cf:95:11:fa:82:54:25:ee:f5:
         59:c7:2a:3e:c7:88:b9:f5:43:6d:75:a9:b5:00:f0:6c:e5:c3:
         66:6b:93:29:ef:01:05:dd:cf:0c:5a:65:44:5a:a5:ad:bf:b3:
         24:46:96:51:85:9d:8c:59:c5:9f:f6:ed:31:81:22:6d:32:01:
         4d:ab:dd:e9:ef:a5:52:e3:da:c7:56:00:79:58:00:5a:a2:00:
         bd:c3:58:ba:aa:48:31:76:0b:32:b2:92:83:1c:78:c0:36:a1:
         36:26:c8:64:8e:3f:79:c0:9e:41:5d:f3:b7:d1:91:91:f1:19:
         8c:e0:8f:38:4c:2c:0e:e9:b7:67:3a:2f:63:e2:dd:9d:ed:60:
         40:fc:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:41 2026 by rpki-client