Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
File:                     ed8llh8UGyFYbrmkC11BZtc7uMY.mft (raw, json)
Hash identifier:          tolK2/+H85/Nh2d2y1ALBUGkAJWWjbQEwIzpUO1k/9M=
Subject key identifier:   9B:CA:2D:0A:4F:15:B5:6E:DC:2D:C6:81:1D:73:DE:37:8D:5E:DB:B6
Authority key identifier: 79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6
Certificate issuer:       /CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
Certificate serial:       019FA8995CDE3D43607A0DC498BF342EE84C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:50 +0000
Files and hashes:         1: 14vJMYWPfWJwLTm41EvJP3dxv0s.roa (hash: 6ta2h79FQjtJwBWFhRNFFHbCANlnZ9ggluTNDumd/P8=)
                          2: 2S_ID7M9u_dFUxvYaa-rOKZfxVo.roa (hash: azGZRtp2vi+dLaLafqy17TsgwENfpndyykRPxlFzCt8=)
                          3: ColFWMx2SicSK2vPCJtdp35IxLw.roa (hash: rN/XHcCGJxpspXE9IogMlXoXWrc2sWRTkNIB4nxC/V8=)
                          4: JfePGHZn8PdBCpyVxuC72hLezmU.roa (hash: qUZTXfZZMQWlR7HAmT2PJRdk8x5fYttpFcNmzhQ5xI0=)
                          5: XsO2HaqGs-17M3S_0Vkj-FO0Hco.roa (hash: hE1KJAdLZvP7FX5UT1YKHBqj5sFEzuymXQsrErEPbpw=)
                          6: ed8llh8UGyFYbrmkC11BZtc7uMY.crl (hash: JyQeWb70tsy4BlECNSlJeXXqzLs6lWtUS1XuBPVzhDI=)
                          7: z3o1Wljd8fwYujmKWAy7mtR3VdE.roa (hash: E81csimlsIdRleSilJPwt5zMyJxZ+MqkzRlol8b0D5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:5c:de:3d:43:60:7a:0d:c4:98:bf:34:2e:e8:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79df25961f141b21586eb9a40b5d4166d73bb8c6
        Validity
            Not Before: Jul 28 12:00:50 2026 GMT
            Not After : Jul 29 12:00:50 2026 GMT
        Subject: CN=9bca2d0a4f15b56edc2dc6811d73de378d5edbb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9f:63:0b:d4:8d:8e:4f:ce:c9:9d:cc:75:6d:
                    f4:f6:f3:25:9a:69:aa:de:ac:c9:24:29:e6:62:85:
                    61:df:2d:7c:b4:df:ce:90:59:ce:f1:6d:54:f9:8d:
                    69:51:b9:83:9b:25:a9:92:76:6d:0e:cf:e7:07:13:
                    c7:67:c5:da:7f:2f:35:88:df:bb:76:9a:fd:97:9b:
                    68:76:6d:5b:c9:42:28:8a:6a:6c:f6:b4:57:e2:dc:
                    38:d0:e6:c5:31:6c:89:31:ef:23:0d:a9:54:f7:9c:
                    b6:01:91:5d:20:89:a7:55:40:14:16:7e:a9:40:6e:
                    4d:3f:ec:8b:6f:f6:bd:1d:2c:ee:1e:b7:7a:e9:1e:
                    ce:1c:3c:68:a6:84:18:d5:02:7b:81:bf:ea:78:6e:
                    d4:61:ea:3b:5e:a8:f4:c3:1e:a9:98:ff:e0:9f:43:
                    13:5d:5f:b4:0c:32:46:07:d2:33:33:3e:61:a3:1e:
                    44:90:f9:34:a3:d8:30:8a:b9:ba:61:8d:81:5d:ca:
                    c8:70:fa:5c:45:71:c4:dc:46:76:4c:15:74:02:54:
                    88:e9:20:54:af:af:e9:3e:74:94:58:d3:c4:29:b5:
                    4a:17:7e:0f:68:99:07:12:cb:1e:c1:f7:d4:e9:00:
                    24:a3:37:dc:bd:c3:a7:ed:a6:49:60:c2:78:ae:92:
                    5e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:2D:0A:4F:15:B5:6E:DC:2D:C6:81:1D:73:DE:37:8D:5E:DB:B6
            X509v3 Authority Key Identifier:
                keyid:79:DF:25:96:1F:14:1B:21:58:6E:B9:A4:0B:5D:41:66:D7:3B:B8:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed8llh8UGyFYbrmkC11BZtc7uMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/7bddda-0c6c-4a5e-b1c5-3ba5f30caabf/1/ed8llh8UGyFYbrmkC11BZtc7uMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:7b:7a:8b:9d:d6:dd:26:55:1e:4b:ab:9e:1d:ac:63:30:d9:
         e3:0b:5b:f2:07:ba:fb:56:ad:17:c2:25:52:46:85:6c:23:b0:
         c5:63:f2:d5:0d:a6:ac:4a:9a:c5:5f:f7:06:11:02:c3:f4:2f:
         9a:fa:f8:6b:76:4b:46:47:f1:3b:78:c1:cf:41:ab:ff:05:60:
         8d:3f:e1:e2:b4:a3:9f:89:5f:09:6b:6b:8a:94:0c:7f:49:fc:
         5c:72:ee:a1:9e:08:b8:df:97:19:a2:a9:bf:9e:a8:8d:15:ec:
         0d:a2:4e:1b:15:5c:fa:96:05:c2:cf:c7:7a:41:5e:7a:1a:63:
         ed:e2:2f:b2:08:92:c3:36:66:25:c8:aa:f9:de:9a:88:fa:6f:
         74:15:f1:e0:9e:dd:4f:ce:83:ec:13:17:9c:6f:f4:dc:43:eb:
         84:a9:d5:d9:ed:4a:9b:8a:77:70:58:79:13:ac:53:7c:30:af:
         ea:6a:01:cc:3d:6a:f3:18:7c:7a:8a:8a:a3:69:a9:86:fd:3e:
         b0:87:5c:6f:2b:9d:90:ea:88:8f:c5:fe:17:02:aa:e2:d3:ec:
         dc:3d:2f:2b:29:15:a6:d1:7b:2d:8c:b5:7e:4d:5c:d6:4a:b6:
         4f:39:8b:82:5b:0c:c3:e3:db:0a:9e:c3:90:13:89:3f:77:9f:
         9d:07:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:02:04 2026 by rpki-client