Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
File:                     7a8O0eMJHntcmc5DysEDEFWw84U.mft (raw, json)
Hash identifier:          RSkfyto9QuKcCB9podoVHrJZDZcTAFeQzPlHGPtNT3U=
Subject key identifier:   3B:D0:84:95:4D:D6:3C:57:02:AB:C4:6A:47:A0:37:40:48:34:C8:0E
Authority key identifier: ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85
Certificate issuer:       /CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
Certificate serial:       019F916C8ECD57A4ED2BFDAA03EBE53C9BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
Manifest number:          1958
Signing time:             Fri 24 Jul 2026 00:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:38 +0000
Files and hashes:         1: 7a8O0eMJHntcmc5DysEDEFWw84U.crl (hash: LU7aSUKfWXVpwBMA1CjDBJdLbs6z9aGdI3z+gAWz33A=)
                          2: zlNsdLQAtO6TKIpveiYDahXGOtc.roa (hash: zWs8jQOETQ5X0XyX4yP+smjLWA31kMqZBSgEABnieXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:8e:cd:57:a4:ed:2b:fd:aa:03:eb:e5:3c:9b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edaf0ed1e3091e7b5c99ce43cac1031055b0f385
        Validity
            Not Before: Jul 24 00:00:38 2026 GMT
            Not After : Jul 25 00:00:38 2026 GMT
        Subject: CN=3bd084954dd63c5702abc46a47a037404834c80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c0:e4:44:26:9f:6c:c3:ba:ad:ab:48:e8:df:
                    16:1f:87:c8:4f:8c:97:2b:10:1c:36:c2:d4:6e:f5:
                    41:6f:9e:c1:91:1c:7c:a1:70:ce:8c:02:e6:2f:9a:
                    38:c4:f6:36:ae:5d:78:be:4d:fc:3c:92:4b:32:56:
                    08:33:a9:68:6a:5b:d9:2c:10:05:1b:78:c0:46:c7:
                    2f:fd:8f:aa:60:fd:7b:3d:84:a8:00:7b:6a:9d:ae:
                    8e:f8:97:77:e7:64:9e:0c:5b:14:96:6f:77:9d:cf:
                    f5:57:41:c0:64:5e:c5:ec:66:bf:6c:ee:c1:40:12:
                    a3:47:6b:23:bf:51:d4:98:da:8c:70:21:66:53:de:
                    63:ef:8f:0f:45:c8:55:04:5b:c0:5e:c7:db:75:3b:
                    36:5b:48:ec:7d:2d:13:96:30:03:12:89:95:44:46:
                    21:71:75:b9:c0:1d:60:51:4a:e6:1e:9a:80:fe:b4:
                    90:ef:17:7c:3c:09:db:c1:d7:d1:4d:b2:f4:61:c1:
                    48:98:38:84:93:ac:61:c8:47:8b:f3:b0:e1:60:30:
                    cf:98:51:17:18:f1:63:52:c5:be:17:f0:a7:3f:f5:
                    42:4e:d3:2e:da:51:21:91:6b:ad:a0:21:17:d4:1c:
                    32:d7:2b:d5:e6:72:af:0f:f6:2e:ed:71:c4:37:3e:
                    75:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D0:84:95:4D:D6:3C:57:02:AB:C4:6A:47:A0:37:40:48:34:C8:0E
            X509v3 Authority Key Identifier:
                keyid:ED:AF:0E:D1:E3:09:1E:7B:5C:99:CE:43:CA:C1:03:10:55:B0:F3:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a8O0eMJHntcmc5DysEDEFWw84U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8e43fa-e91f-4818-b83f-17a1f86c6804/1/7a8O0eMJHntcmc5DysEDEFWw84U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:8f:71:25:86:f2:33:26:bd:40:1e:de:f0:56:1b:3e:ba:44:
         7c:7a:ae:b6:17:33:8a:6a:1e:c2:05:8c:38:5d:af:02:81:82:
         1f:4c:f2:11:f9:84:d5:8f:fe:b5:f6:98:ad:e6:5c:4e:72:a0:
         44:a1:b9:f9:79:3e:7b:96:eb:02:3c:76:53:00:dd:2e:c9:49:
         34:dd:6c:8f:b0:a3:4e:e6:27:39:ef:ac:47:6c:80:78:a7:a2:
         d2:0f:a1:36:04:67:e6:8f:2f:09:5a:75:5f:f7:68:5a:31:70:
         89:3c:a0:09:bf:dc:94:9a:81:4e:30:54:d4:85:bd:fa:28:b0:
         1b:e4:0a:93:5e:06:8c:23:e6:85:9b:bf:ac:27:b0:f6:b0:f0:
         5a:5e:79:44:28:28:b0:0e:53:f9:4a:e3:ae:c5:b9:cd:86:ae:
         a1:6e:a4:3f:06:84:12:2f:4f:60:a1:db:8e:a9:4e:05:3e:92:
         01:7e:f4:c2:49:b3:ec:98:1b:e2:c1:07:0d:35:e6:48:fe:7a:
         76:81:ab:e4:5b:e9:69:f1:05:c0:47:07:c2:c9:93:00:c0:ed:
         f1:57:dd:a8:f1:14:c6:43:c2:80:67:1c:51:55:24:45:a5:0f:
         c3:4e:b1:93:49:2a:a5:6e:3c:d7:a8:64:fb:42:88:3d:11:ae:
         59:49:84:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:06:15 2026 by rpki-client