Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File:                     8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier:          8jve3oM7OutoNJjqrdZWRgCEmyZYE0jxU3TNoIov8m8=
Subject key identifier:   AE:2D:E6:3F:8A:04:CF:D7:A8:7B:56:8B:48:CE:6A:EB:35:21:8E:68
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer:       /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial:       019FAABEED1007C41EC2D2BD415C8782E6A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 22:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 22:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 22:01:06 +0000
Files and hashes:         1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: OtTdCORMmFovIQ5GV3al8aubV5Hh/T6DqdqceEwfRNY=)
                          2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:ed:10:07:c4:1e:c2:d2:bd:41:5c:87:82:e6:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
        Validity
            Not Before: Jul 28 22:01:06 2026 GMT
            Not After : Jul 29 22:01:06 2026 GMT
        Subject: CN=ae2de63f8a04cfd7a87b568b48ce6aeb35218e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:52:50:bc:a0:34:2c:d3:7a:87:2e:66:f2:26:
                    45:bb:45:ff:be:5a:2e:f8:b5:48:b7:53:82:78:19:
                    60:72:c8:b0:e2:24:f4:14:6c:b2:d6:20:83:42:3f:
                    06:53:72:48:8e:08:78:ff:52:55:16:9a:a3:69:15:
                    3b:04:dc:11:c2:5c:b4:67:72:b7:af:1e:54:83:b6:
                    8d:29:87:4e:84:e8:72:46:fb:4b:d0:2f:3a:8d:4a:
                    bd:14:ab:bb:37:dc:7f:a0:7e:c1:fc:18:75:00:ae:
                    bb:42:ac:be:93:f4:68:84:b1:7e:13:11:72:c8:db:
                    1f:22:50:1c:86:e6:44:f9:28:a7:41:cf:8b:2c:ec:
                    47:1b:e4:d7:27:72:fe:7d:02:4b:c3:b7:b9:99:34:
                    cf:d3:07:a0:c6:bd:5d:ac:22:e8:6c:a9:ba:c5:47:
                    db:80:79:c7:3d:c1:e9:12:70:b4:a2:21:6c:36:06:
                    e5:b0:e5:50:a2:5d:58:60:a2:e5:e0:67:b6:d8:6c:
                    fc:70:d3:7b:37:be:d1:eb:f2:e5:15:ad:5d:eb:dd:
                    c2:bc:13:fd:73:a3:db:1d:6f:e5:7b:df:35:84:27:
                    53:bc:2d:44:46:06:4b:42:a9:c3:4b:3a:78:21:8b:
                    88:61:fc:59:8e:9f:bd:9a:4c:3b:8a:8f:92:44:22:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2D:E6:3F:8A:04:CF:D7:A8:7B:56:8B:48:CE:6A:EB:35:21:8E:68
            X509v3 Authority Key Identifier:
                keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:29:ee:f4:1e:b8:1f:e1:18:e0:9b:56:0e:d0:52:13:c8:91:
         70:c7:93:f3:70:16:b3:2e:79:f8:f2:71:01:17:fd:cf:4e:e7:
         9d:23:7f:2c:0e:f8:c9:45:9a:c8:3b:fe:6c:55:c1:2d:f3:09:
         9f:92:78:8e:dd:41:15:36:b3:33:b8:b8:de:46:e3:ea:53:bc:
         d0:ad:ae:29:9c:8e:9a:2e:f0:a7:5e:d2:d3:b7:45:e0:8d:bb:
         d4:b1:bd:eb:06:ea:a0:88:48:54:a7:d1:a7:bd:ae:77:8d:09:
         af:91:97:88:83:aa:e9:4c:19:35:ec:00:c4:77:82:fc:90:bd:
         a9:1a:07:ae:0c:47:4d:aa:36:08:6d:e0:85:39:f5:38:30:ac:
         e4:8a:96:2f:5b:e1:4e:80:a6:a8:40:88:2a:ad:70:5a:8a:67:
         35:62:5d:fe:33:8b:42:70:27:ef:49:c2:b2:88:b8:cf:6d:20:
         e0:db:67:45:93:54:7a:0d:22:7a:29:2b:fd:d0:cc:69:54:cd:
         3e:0d:33:29:55:b8:06:a2:8f:7a:b8:f6:de:53:f3:98:eb:8c:
         09:71:0a:71:1a:be:d6:29:ca:0e:f8:17:7f:69:bf:82:42:d5:
         f4:a5:00:93:c4:33:5a:7a:18:27:c5:c2:7a:92:84:b7:6b:33:
         db:63:4c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:15 2026 by rpki-client