Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
File:                     EH6W-USd78RwvMWpH5IXxigawbI.mft (raw, json)
Hash identifier:          nYhDRdm7gbVWQtOA9e6BYJCkLtj6T+4FHLKzzCS7SBY=
Subject key identifier:   7C:11:8C:96:9C:30:E2:6F:C9:C3:F0:FA:55:A1:58:0B:7F:2A:64:7D
Authority key identifier: 10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2
Certificate issuer:       /CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
Certificate serial:       01A0002567268E7890BFE87D9E2B151704E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 12:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:46 +0000
Files and hashes:         1: EH6W-USd78RwvMWpH5IXxigawbI.crl (hash: LdCriZds++MPRrwYpqilTQP+0oqUuppULNiAKa9opTg=)
                          2: gv1GGCci0GYDu_oCzbbduhxzrWw.roa (hash: YOl1u3KuTTS65SS09VBRfvkXVdLfXku57oCCyc5onLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:67:26:8e:78:90:bf:e8:7d:9e:2b:15:17:04:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=107e96f9449defc470bcc5a91f9217c6281ac1b2
        Validity
            Not Before: Aug 14 12:00:46 2026 GMT
            Not After : Aug 15 12:00:46 2026 GMT
        Subject: CN=7c118c969c30e26fc9c3f0fa55a1580b7f2a647d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:fc:93:a5:df:1e:13:9e:83:22:18:2f:57:
                    7a:3f:f4:49:65:5e:bd:14:ad:02:10:44:d5:ad:ff:
                    32:10:ec:9c:20:98:9b:2c:e3:a3:4d:23:fd:95:51:
                    37:58:0d:ae:f1:bb:81:c8:6e:ec:fc:5a:11:8a:eb:
                    e9:36:60:90:81:3b:df:74:25:0e:91:8e:32:15:c8:
                    6b:6a:f4:a1:45:6a:43:23:eb:f1:0c:76:cd:12:f4:
                    c7:5f:92:a4:e2:c9:b9:7e:49:fe:cb:a8:8b:1f:30:
                    2b:a2:d5:7e:23:ed:2f:c6:98:9d:86:26:07:63:1c:
                    84:39:17:09:dd:5d:0c:d2:bf:f2:52:7f:7d:fa:18:
                    0f:f4:99:c0:8d:0d:4d:1f:be:98:31:37:b6:2b:8b:
                    f5:9f:56:6e:ac:a6:13:6b:b7:61:63:d1:e8:a6:80:
                    04:cf:fb:88:29:c9:e8:0d:5a:fd:ff:8d:7a:4d:f6:
                    b1:77:9e:83:13:5b:63:3c:9e:2d:ae:06:1f:5f:49:
                    e2:c9:78:8b:53:ec:6d:86:f7:1b:10:ab:a5:37:55:
                    2a:2a:65:fe:d9:03:74:79:83:91:9c:78:e6:cd:73:
                    55:e0:31:8a:2e:7e:aa:0c:cb:06:5f:f2:b7:dd:b1:
                    87:f5:e2:b2:e4:c7:f7:1d:56:24:88:56:dd:1e:de:
                    b5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:11:8C:96:9C:30:E2:6F:C9:C3:F0:FA:55:A1:58:0B:7F:2A:64:7D
            X509v3 Authority Key Identifier:
                keyid:10:7E:96:F9:44:9D:EF:C4:70:BC:C5:A9:1F:92:17:C6:28:1A:C1:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EH6W-USd78RwvMWpH5IXxigawbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cf1484-f961-4037-bdbf-66a715ad3783/1/EH6W-USd78RwvMWpH5IXxigawbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:83:07:22:81:e0:55:0d:c5:aa:5b:02:4b:f0:46:86:31:6d:
         a9:60:e6:7f:94:a4:6d:e1:1e:c4:85:f5:98:3f:3e:ab:55:70:
         c9:ee:ff:16:7a:29:bd:e9:df:1b:3d:51:ad:7f:37:8b:84:aa:
         75:ac:3f:78:29:be:01:d2:5c:00:01:b2:2a:51:6d:ae:1e:c5:
         43:46:69:a5:8a:45:7f:06:53:3a:47:45:a9:ba:96:9f:f1:0c:
         1c:ae:a2:e9:b0:a0:b3:7a:1f:da:c8:49:eb:08:1a:36:d4:57:
         c3:e9:6d:cb:4e:08:c9:34:01:a4:5f:f8:f3:c7:68:ec:e6:6e:
         20:f4:60:21:ea:c5:b6:0e:f1:e9:0b:f6:6e:71:fa:f4:ba:3b:
         dc:74:f5:72:4c:f1:c5:39:76:52:cc:ec:0d:6d:6b:d3:3b:4f:
         93:f6:af:06:da:62:e4:b0:3b:c0:7b:b2:57:ea:e7:a4:63:93:
         89:8a:ab:32:fe:03:19:f6:fd:33:25:0b:c5:99:ba:dc:49:b2:
         32:ea:80:37:5d:12:b1:7c:f8:c4:7c:25:ba:de:e4:cd:42:03:
         e1:86:47:49:bc:13:4f:f0:a6:53:c7:79:e9:14:04:91:f3:a1:
         b7:55:14:43:ba:e0:42:9f:b8:d0:40:00:78:0f:80:a4:92:ab:
         ba:85:be:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:05 2026 by rpki-client