Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          xIHiufEnpvzm+IJS/ELWs4vksn3gYKCrH3joAxImfyw=
Subject key identifier:   6D:8B:90:EB:B4:13:B3:87:F6:17:B1:ED:FB:EC:42:7F:8D:E9:53:E1
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       019FA907C9A9FDBE01B26574C59548E43863
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          1255
Signing time:             Tue 28 Jul 2026 14:01:27 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:27 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:27 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: bw5IXSmclazASQgjY2ikgqyktecFx8/AWWpdF208LCE=)
                          2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:c9:a9:fd:be:01:b2:65:74:c5:95:48:e4:38:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Jul 28 14:01:27 2026 GMT
            Not After : Jul 29 14:01:27 2026 GMT
        Subject: CN=6d8b90ebb413b387f617b1edfbec427f8de953e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:1a:38:ba:17:cf:62:db:65:63:b1:e7:12:
                    3b:5d:a8:a4:77:45:4b:52:e3:7f:28:8b:d4:09:7e:
                    fa:bb:4a:ac:2c:76:bd:72:a8:2a:5e:6b:bc:1d:b0:
                    64:87:23:98:83:0c:c7:b9:3d:01:41:ae:44:ce:6e:
                    c0:36:29:0f:ca:4f:8d:b0:31:a4:89:b1:72:55:b0:
                    09:ec:ba:3d:43:cf:6c:fe:a9:51:6f:f0:aa:07:5b:
                    1b:e2:1c:21:cf:ed:30:27:b8:7d:45:b0:32:ad:64:
                    c5:4b:f0:e8:6d:0a:b9:6c:5b:ed:e6:87:f1:46:b0:
                    00:10:4d:96:ed:23:a9:56:b7:a6:75:5b:06:e0:fe:
                    9c:a3:03:b7:23:0d:7e:d1:15:34:f8:1a:43:40:f7:
                    0a:d1:db:90:9a:d2:1b:fa:01:ee:d1:3b:77:9d:31:
                    c5:f9:84:aa:90:9e:e2:bd:41:0d:d8:dd:77:30:47:
                    68:9f:79:db:32:e4:a2:62:1a:4f:2d:56:9d:b3:ce:
                    5f:08:f4:83:b5:ae:bb:ea:82:46:c4:af:17:cc:98:
                    fb:87:cb:67:56:33:fd:21:c7:3b:1c:29:7e:f8:15:
                    3b:52:c3:2d:d7:50:96:b7:ac:2e:48:35:b7:07:45:
                    a8:12:dc:e0:3b:54:4f:a4:2d:5f:30:10:37:4d:9a:
                    44:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8B:90:EB:B4:13:B3:87:F6:17:B1:ED:FB:EC:42:7F:8D:E9:53:E1
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:25:bd:11:35:f6:4f:05:29:0d:21:e7:e4:7e:31:3f:92:50:
         48:af:f5:32:f1:f8:2e:d7:21:2b:59:c4:de:b5:e6:0a:8f:b9:
         63:3b:1c:4c:69:1d:3b:e3:1f:c0:cc:60:c8:b8:a2:66:68:5c:
         82:f3:39:31:d7:ef:af:39:d6:3b:75:21:9c:68:5b:1f:cf:c3:
         ac:a3:c9:54:6a:53:b7:7d:57:64:b6:80:bd:22:01:c3:03:5a:
         ca:e6:88:1f:b5:bf:a2:d0:1a:70:2a:68:d2:67:c7:74:e9:b0:
         1f:06:91:43:55:a6:5f:50:60:3c:53:89:47:33:7a:a6:dc:14:
         97:de:1d:c0:e7:7d:87:7c:94:cf:ff:c2:7b:96:d8:1a:aa:aa:
         42:7f:4d:48:90:3f:95:06:9b:af:65:11:61:0e:f0:bc:44:d1:
         6d:64:99:da:76:48:fe:38:f4:2a:2e:2c:85:70:bf:78:c2:24:
         f5:56:fc:96:5b:df:12:c1:1b:cc:bf:d5:10:d3:71:6e:5a:eb:
         02:87:22:1f:17:9f:79:2a:d6:42:90:73:8a:53:97:99:e3:69:
         ec:d1:34:e6:f3:5c:dd:24:87:bd:93:fd:b3:a9:1e:38:ea:ec:
         42:6f:51:c9:6b:4c:20:81:73:90:fa:8d:bc:e5:e4:86:52:62:
         68:fc:1e:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pB8mp/b4BsmV0xZVI5DhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl
MmQ4NGEwHhcNMjYwNzI4MTQwMTI3WhcNMjYwNzI5MTQwMTI3WjAzMTEwLwYDVQQD
Eyg2ZDhiOTBlYmI0MTNiMzg3ZjYxN2IxZWRmYmVjNDI3ZjhkZTk1M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcMaOLoXz2LbZWOx5xI7Xaikd0VL
UuN/KIvUCX76u0qsLHa9cqgqXmu8HbBkhyOYgwzHuT0BQa5Ezm7ANikPyk+NsDGk
ibFyVbAJ7Lo9Q89s/qlRb/CqB1sb4hwhz+0wJ7h9RbAyrWTFS/DobQq5bFvt5ofx
RrAAEE2W7SOpVremdVsG4P6cowO3Iw1+0RU0+BpDQPcK0duQmtIb+gHu0Tt3nTHF
+YSqkJ7ivUEN2N13MEdon3nbMuSiYhpPLVads85fCPSDta676oJGxK8XzJj7h8tn
VjP9Icc7HCl++BU7UsMt11CWt6wuSDW3B0WoEtzgO1RPpC1fMBA3TZpEBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2LkOu0E7OH9hex7fvsQn+N6VPhMB8GA1UdIwQY
MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt
ZmQ1NTkyNDJkNDcxLzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx
LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSW9ETX2
TwUpDSHn5H4xP5JQSK/1MvH4LtchK1nE3rXmCo+5YzscTGkdO+MfwMxgyLiiZmhc
gvM5MdfvrznWO3UhnGhbH8/DrKPJVGpTt31XZLaAvSIBwwNayuaIH7W/otAacCpo
0mfHdOmwHwaRQ1WmX1BgPFOJRzN6ptwUl94dwOd9h3yUz//Ce5bYGqqqQn9NSJA/
lQabr2URYQ7wvETRbWSZ2nZI/jj0Ki4shXC/eMIk9Vb8llvfEsEbzL/VENNxblrr
AociHxefeSrWQpBzilOXmeNp7NE05vNc3SSHvZP9s6keOOrsQm9RyWtMIIFzkPqN
vOXkhlJiaPwe0g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:26 2026 by rpki-client