Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
File:                     7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft (raw, json)
Hash identifier:          kkGkaRf8mf3MSRXz5Mfs4sIgQpN8SYV1/1j3O3M3pyU=
Subject key identifier:   D1:A5:88:BA:52:19:56:00:82:EC:ED:85:21:15:64:AA:F8:E5:1F:F0
Authority key identifier: EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80
Certificate issuer:       /CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
Certificate serial:       01A040BCFBB6456B48BD3A2B7F90A6A7C1D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
Manifest number:          96
Signing time:             Thu 27 Aug 2026 01:02:01 +0000
Manifest this update:     Thu 27 Aug 2026 01:02:01 +0000
Manifest next update:     Fri 28 Aug 2026 01:02:01 +0000
Files and hashes:         1: 7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl (hash: ygThNcwf1PwcGMUooGhMsu2G4ZjzZg6T3BzBATztTVU=)
                          2: qWZEFT_OxQeqd6Y0OYCdMhrVv30.roa (hash: g41dSquqqdgjaDzTxJvTsOMXpBmPaLOtw6LNHhJmIbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:bc:fb:b6:45:6b:48:bd:3a:2b:7f:90:a6:a7:c1:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecebb32bd6b84b01cfa4d4277d49bb752f16d480
        Validity
            Not Before: Aug 27 01:02:01 2026 GMT
            Not After : Aug 28 01:02:01 2026 GMT
        Subject: CN=d1a588ba5219560082eced85211564aaf8e51ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:23:4e:09:bb:2d:65:a5:d7:c0:f9:5e:ef:
                    b6:c9:f8:f8:ab:04:03:be:47:4f:d0:45:3d:ca:67:
                    9a:bc:37:44:d2:5e:61:36:6c:e9:84:af:0c:bc:b8:
                    24:b8:a7:cf:d5:35:8c:5c:b0:f7:1a:c2:ce:1e:e0:
                    3b:ae:00:9e:c6:6b:32:71:c8:7e:76:2d:ed:7a:9a:
                    c2:90:9f:7f:6b:b9:5b:4c:f9:fa:cb:1e:db:b8:29:
                    6b:d5:b5:c7:3c:18:5f:86:18:3f:7b:36:72:10:71:
                    1e:ff:70:05:8b:99:fa:d7:3c:b6:3c:54:a2:44:01:
                    7f:1f:3e:7f:81:1b:2a:ee:ff:c8:84:99:60:a2:76:
                    0a:0f:6f:77:40:65:41:12:fb:c6:9b:c2:f2:b8:13:
                    7b:37:67:2e:f9:13:9e:6f:65:c4:59:ec:0d:67:ea:
                    c2:b5:41:8b:9b:6c:ea:7c:0c:c9:ce:76:fb:c2:10:
                    6c:0b:0f:86:4f:ee:7a:d3:02:59:a0:62:e4:a2:39:
                    6c:d5:d9:d7:4e:31:e3:31:e9:80:c5:3f:86:f8:5e:
                    45:50:cc:26:57:ea:27:12:fd:28:f2:26:a4:0a:33:
                    f6:53:fd:c7:e3:7e:8d:6a:6b:78:62:de:ae:d5:22:
                    44:97:ac:1c:85:72:51:18:9c:81:3a:9a:1b:04:a4:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A5:88:BA:52:19:56:00:82:EC:ED:85:21:15:64:AA:F8:E5:1F:F0
            X509v3 Authority Key Identifier:
                keyid:EC:EB:B3:2B:D6:B8:4B:01:CF:A4:D4:27:7D:49:BB:75:2F:16:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7OuzK9a4SwHPpNQnfUm7dS8W1IA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/9ba5fa-ca9b-4f99-9ce5-0870c19ed7f8/1/7OuzK9a4SwHPpNQnfUm7dS8W1IA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c6:06:36:3c:1e:fb:51:67:3e:1a:c2:94:8b:04:92:e9:f1:
         c6:43:c8:56:63:fa:9e:e2:b0:91:41:c2:06:76:d6:b6:92:1a:
         b3:9d:f4:d9:ea:7f:f2:88:9a:89:10:cd:87:f3:b9:60:dc:e3:
         d9:bd:24:75:16:95:7d:76:37:3d:33:55:9b:01:dd:3d:c0:d4:
         5e:70:7a:07:58:3f:05:3b:e1:fb:c5:ff:33:41:ac:d0:f4:18:
         17:a5:60:1f:c3:48:25:de:49:dd:f7:7b:c3:46:e5:c6:8c:f2:
         75:04:39:9e:17:53:03:0d:fc:b3:ff:68:8b:a9:d1:73:30:58:
         09:ec:46:9e:aa:7c:2a:9f:e1:0d:33:d9:4b:e0:30:e2:15:61:
         03:dc:59:82:c2:1d:8c:71:07:47:11:0f:ad:44:cd:05:26:95:
         ad:1a:58:73:dc:73:cc:2c:20:e3:6b:58:e7:2d:db:68:12:65:
         44:b5:8e:4e:e3:e9:24:ef:ef:d3:53:b9:7a:9a:72:0c:e8:60:
         e6:68:cf:3f:52:71:b4:ff:5e:2f:94:93:46:34:d0:f1:d2:65:
         1d:fe:76:2a:2f:12:ae:94:2d:af:4d:e6:ff:f7:ef:3b:3d:1d:
         f2:0c:b7:1d:e7:ff:d2:55:38:57:d6:8c:c7:70:4d:da:e2:86:
         67:2c:72:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:45:33 2026 by rpki-client