Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          Q1VXn0Aogr8HTnycP1A6A0pbd8gojGtUoGo4RBPZHL8=
Subject key identifier:   6C:A5:71:C5:D5:4E:AA:B9:3B:A3:91:DD:AB:6B:0D:29:37:7E:29:24
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019FA899BEF85ED1EDB6AD6049CBA18A7707
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1964
Signing time:             Tue 28 Jul 2026 12:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:15 +0000
Files and hashes:         1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: vAFWiGoUu8tQPwnUTOPxT5zPkBYTAUV4j3ZmamOeKqU=)
                          2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:be:f8:5e:d1:ed:b6:ad:60:49:cb:a1:8a:77:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Jul 28 12:01:15 2026 GMT
            Not After : Jul 29 12:01:15 2026 GMT
        Subject: CN=6ca571c5d54eaab93ba391ddab6b0d29377e2924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:8d:76:b8:63:3a:7b:69:22:1a:04:20:44:
                    fe:22:fc:29:34:1b:fe:68:2f:d6:75:c8:02:de:f6:
                    94:fe:14:d6:1c:42:dc:3c:b5:9d:46:09:a7:9a:52:
                    6f:57:c9:da:5b:90:64:be:1d:33:aa:ca:67:7d:ee:
                    5d:8a:6d:d0:7a:91:8d:5f:e2:57:77:a4:52:22:fa:
                    e7:b9:91:82:b6:4d:46:f1:9a:02:7a:c6:ab:09:3c:
                    90:33:96:18:97:5c:5b:c7:18:6c:7e:4d:44:cb:70:
                    15:76:52:3a:84:e4:75:e6:f8:5e:7a:8d:fd:d8:5a:
                    35:ca:81:c4:85:71:74:f9:b8:1f:16:7d:57:7c:91:
                    12:70:0f:9c:da:3e:1e:c6:8f:49:a7:0d:b8:0d:bc:
                    cd:2d:be:c4:99:d8:f0:37:aa:39:49:3a:68:9a:00:
                    42:5c:a7:87:9a:32:4c:17:f1:84:a2:f8:be:ec:f7:
                    40:79:c4:aa:43:62:58:ee:d3:c1:ee:6c:c7:2e:6b:
                    dc:10:96:99:a9:54:66:30:80:5b:6b:71:40:4a:80:
                    df:c0:bc:23:a0:16:35:09:f4:ec:8d:f2:90:81:f3:
                    61:af:31:e8:9e:48:19:78:eb:9d:a9:19:87:67:90:
                    bf:c6:db:a7:a9:0e:ba:0a:8a:85:d8:7a:6d:8f:f0:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A5:71:C5:D5:4E:AA:B9:3B:A3:91:DD:AB:6B:0D:29:37:7E:29:24
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:41:e5:11:f7:5d:c9:f1:62:b6:3a:02:72:b6:32:62:6b:47:
         7f:3a:86:99:d2:e6:1a:76:e2:ff:13:d5:c2:9d:3a:3c:4e:ec:
         56:1a:16:65:89:ea:f3:5c:f3:b8:62:ed:21:f4:64:16:11:b1:
         32:6d:2c:e6:a9:34:5f:18:5f:c6:36:30:79:45:9e:d3:94:60:
         5d:4c:8c:fc:7c:f1:f2:5d:29:00:25:b6:65:a1:af:fc:b0:12:
         92:51:cd:8e:b0:ef:99:c9:07:42:4e:c4:08:4b:37:e0:a6:35:
         ab:88:83:57:37:a9:27:3e:ce:f3:26:96:a5:b3:e9:d1:0b:56:
         d1:02:80:f6:86:ce:ca:45:ba:8d:88:e3:51:27:62:06:a1:49:
         98:7b:66:b6:e7:4e:de:9c:44:b6:d7:1f:fb:6c:89:8b:a8:b5:
         85:42:94:93:15:67:3b:2e:41:0e:e1:5f:31:bf:87:34:99:3f:
         05:77:e5:f1:bf:9b:9a:45:73:6c:a1:e0:3f:82:34:1c:f0:04:
         10:b4:e5:51:ee:ae:a4:33:81:4d:be:11:1e:a9:b3:3e:f4:fa:
         00:f5:6d:58:7a:47:ee:43:f1:b5:a2:d9:1e:c1:58:24:8f:b9:
         d9:a7:dd:5b:e3:0e:2f:49:2d:7f:99:ec:ba:c1:77:d7:ff:f9:
         11:47:be:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:30 2026 by rpki-client