Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File:                     8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier:          5gOyYViMuhSRIbFXSeEqT/Ja3Tdd7NyDCtMHQ+MHx54=
Subject key identifier:   50:D7:8F:E0:EE:81:21:10:CF:07:5C:69:6E:56:85:DC:00:F7:C8:D6
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer:       /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial:       019FA86223B0BB04FF87DAFAD0D67D1C9143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number:          13E6
Signing time:             Tue 28 Jul 2026 11:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:31 +0000
Files and hashes:         1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: 4kwidWnRjv/YYVOeh9vWe0k6dcY+aySoQqe7MxKA/hE=)
                          2: po4crTaA95m-lSpTh_du9PtU6gY.roa (hash: SJ7n/VopAoAzW1zSv/V6X7AVtWxebx5P9AXUE5osTUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:23:b0:bb:04:ff:87:da:fa:d0:d6:7d:1c:91:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
        Validity
            Not Before: Jul 28 11:00:31 2026 GMT
            Not After : Jul 29 11:00:31 2026 GMT
        Subject: CN=50d78fe0ee812110cf075c696e5685dc00f7c8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:03:33:5e:63:08:3e:27:62:09:ca:09:1a:
                    3e:40:b1:8e:25:b8:31:f7:90:be:72:d9:19:8d:6e:
                    23:06:7c:41:90:0a:e6:43:e3:aa:3a:e7:7a:bb:f8:
                    ca:2a:4a:46:ac:50:c2:92:45:46:2b:8d:ba:92:e4:
                    f4:1e:1a:bd:a2:d6:42:aa:13:63:75:fe:78:e8:65:
                    a9:7a:bb:40:e0:05:cb:1f:a2:22:c9:17:ca:44:9b:
                    ee:fe:40:86:a7:b6:5b:9a:33:49:5a:66:f8:8b:02:
                    d6:19:2b:df:02:fe:45:0a:6a:9d:8b:1b:a3:ef:cd:
                    d8:09:85:d0:5c:fb:33:e4:49:f7:c3:cc:2b:5c:f9:
                    79:e1:4e:b3:ca:36:87:eb:c3:5f:cb:0e:ec:de:34:
                    c3:fc:d9:44:ca:4f:8c:21:28:1b:e5:74:5e:d0:0c:
                    35:01:c8:12:a1:21:d4:78:13:38:1e:3f:93:45:42:
                    43:49:cb:b6:16:89:c4:3b:17:07:a4:ee:f6:f5:a1:
                    c7:88:f8:ee:2f:ce:39:6c:1d:7e:b7:c0:95:15:04:
                    75:e9:66:9d:f8:8e:3e:07:41:a0:05:96:de:6e:f3:
                    7a:85:ee:1e:32:3c:a4:fb:19:cd:2e:ca:3c:75:2f:
                    86:b7:93:10:15:fe:a3:c3:7d:8a:40:80:38:f0:b7:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D7:8F:E0:EE:81:21:10:CF:07:5C:69:6E:56:85:DC:00:F7:C8:D6
            X509v3 Authority Key Identifier:
                keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:ae:1d:ed:df:90:5f:16:a9:e2:8f:4f:81:c4:5e:db:f5:
         7c:d2:53:0b:bd:bb:b4:80:42:f7:5a:41:0a:43:5c:33:57:00:
         87:89:a9:b6:24:87:18:f2:35:fb:8e:ad:56:5f:ae:d6:91:ef:
         16:8e:56:9c:05:63:2d:b0:4e:14:63:10:6b:2d:ae:1e:47:b8:
         0d:9d:3e:d8:ce:39:34:b2:d7:ae:da:6a:87:4b:0e:79:52:70:
         a6:e2:9a:b1:d6:dc:8e:1f:e2:d0:05:4d:d7:15:88:08:0c:eb:
         d1:00:11:5f:ef:b3:1c:d6:da:5a:13:50:d8:ea:df:db:7c:43:
         13:ee:eb:29:bf:a7:26:a5:24:8c:37:27:2d:51:e8:f3:ab:11:
         ac:2d:15:a4:c4:c0:5a:1f:31:dd:7c:3b:91:2e:92:da:c1:82:
         a0:65:73:fe:a9:aa:f5:a1:67:8d:89:e7:f0:f7:75:ef:a3:41:
         15:c8:b9:ee:a7:11:e3:76:1c:b9:1b:6e:f2:de:67:b2:b3:70:
         d3:81:7e:36:29:d6:b6:59:ff:fd:08:80:07:a7:1b:92:69:8e:
         0d:f5:41:53:d7:ed:3e:ea:47:22:06:2a:8f:63:cf:35:85:ba:
         ed:dd:ae:a3:78:29:7b:56:c5:36:4a:6d:4d:a9:60:43:8c:c7:
         10:49:1e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:02 2026 by rpki-client