Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          Icx8tme1JRrpBwisirtPgLTNMXDnmPHDANipV1XMPuo=
Subject key identifier:   70:B5:BE:1F:9F:E2:92:5A:C5:B6:60:7B:A2:D2:90:D7:02:A7:9A:39
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       019FA8D0A59A1340EC25B2CC08DDB1EF2DD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          0BED
Signing time:             Tue 28 Jul 2026 13:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:13 +0000
Files and hashes:         1: 8Xy3JsOZp8agZio6JEl9loRjlFY.asa (hash: TlktL9oV1UI2Vlhdx1LCfEJgVLcoU4hMjN/LcKxuLUg=)
                          2: GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (hash: DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=)
                          3: bpghwUTmmKl7QliDST1W5dViYJc.roa (hash: 4spP8UJYeO4cFPA8qwPfd8/MAEzw0jEK2c/OI9/edUY=)
                          4: cc1TTqmdRs97AUGnV9VmDxVcmEY.roa (hash: 0frevua5I/QSYlx9nukpKBzsUYerNRu+NzKXQNZQtFQ=)
                          5: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: 8WR1ipZbBJDX3wfshGaOfVIKyv3xbBgxU3FZe7dr7go=)
                          6: vbW9HDnSvJmxsqC-cV5z-907X4o.roa (hash: RVRq1+9gitJwQNotHLkJdZpm6YORt32/tbHB/qnAsaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:a5:9a:13:40:ec:25:b2:cc:08:dd:b1:ef:2d:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Jul 28 13:01:13 2026 GMT
            Not After : Jul 29 13:01:13 2026 GMT
        Subject: CN=70b5be1f9fe2925ac5b6607ba2d290d702a79a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:65:3d:8c:f6:c8:d9:5c:fa:89:01:4e:68:e2:
                    46:23:89:cc:f2:ba:08:21:a0:89:3b:9c:4c:f8:47:
                    b1:c8:a5:b1:b6:26:c3:a9:f6:46:33:db:ee:48:01:
                    93:5b:70:2c:b4:80:28:17:5d:cb:fe:7a:57:44:04:
                    52:09:44:62:a9:7f:8b:c2:e5:dd:b1:57:8e:83:eb:
                    b3:6c:95:a4:51:7e:a6:15:bf:7b:43:f7:9c:ee:c7:
                    f7:c3:94:e2:8e:c6:02:7c:e1:54:bd:40:3e:6d:e6:
                    89:66:7e:99:15:25:53:24:f8:21:5f:ca:16:58:be:
                    70:e3:ae:62:83:03:a8:67:9e:80:3a:92:a1:62:e1:
                    32:ab:1a:58:8d:e9:97:8e:1a:2e:54:3d:c8:29:56:
                    cd:64:58:e6:1d:20:46:51:7c:89:30:ca:9c:a3:e0:
                    1a:36:f2:42:01:3f:c2:56:17:e5:20:86:4c:cd:04:
                    78:34:47:5a:1b:e2:e3:6a:a7:01:a9:6b:5c:83:98:
                    b9:ff:6c:a8:a6:4f:0b:88:eb:bd:aa:f7:14:11:46:
                    23:05:d2:99:65:04:22:39:89:e1:9c:71:fd:c3:9a:
                    fe:75:1d:38:26:f3:c0:a8:0b:1c:40:01:c5:de:c0:
                    22:f7:89:0b:db:af:ed:6a:97:ae:21:c0:91:40:9e:
                    38:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B5:BE:1F:9F:E2:92:5A:C5:B6:60:7B:A2:D2:90:D7:02:A7:9A:39
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:55:4e:e8:8f:76:04:ef:0c:5d:7a:06:39:0e:e8:81:c1:
         a0:89:5b:c8:95:e6:d2:d9:7e:63:c4:a4:30:58:d8:90:f1:e8:
         ad:07:63:5b:1a:c6:40:1e:40:24:cd:44:7c:5f:3b:e9:e0:d7:
         39:a8:49:aa:55:40:cb:6d:36:10:67:38:28:bc:a7:00:d9:f1:
         79:71:0e:14:e4:76:f6:85:60:54:f6:44:6b:f8:21:47:b0:75:
         cf:52:f3:fa:a9:8c:fd:6f:f5:66:cc:b3:4a:24:84:cc:94:7f:
         fc:85:3c:2e:3f:54:51:96:26:19:fa:03:ea:3e:59:72:ee:80:
         13:96:66:0f:1d:c7:06:b8:59:92:73:48:79:68:34:70:5c:6d:
         39:52:ee:8c:6e:3f:83:7a:f6:30:dc:6c:08:e7:3c:94:9a:1e:
         b5:d3:a8:03:bb:f0:b6:47:7c:78:5d:fc:c8:32:71:8a:20:79:
         04:a6:bf:b7:4b:9c:dc:6f:92:ff:8a:20:9d:94:c9:99:90:b0:
         59:85:1b:02:c5:6a:cd:6d:19:d9:2e:dd:76:fe:1c:18:43:be:
         51:0c:cc:e2:85:83:4b:4d:b3:71:a0:57:7e:ea:14:f9:d5:5e:
         17:8f:0c:b6:9b:79:48:cf:e5:36:04:2a:06:f5:a3:07:e1:3d:
         cb:8b:35:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:32 2026 by rpki-client