Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          x/Q0O2q/314rgNAiofhdNXP/tanvc2tVFwsmE5mXnlU=
Subject key identifier:   F5:A2:47:C4:56:8C:93:56:1C:60:C7:C5:65:F3:6F:8D:DA:62:08:7D
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       019FA9AC0A512551B7788D072870677BC896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          12E4
Signing time:             Tue 28 Jul 2026 17:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:52 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: 7yyg634OWlni+XVySeVC+fy0CZc+DX+d6XgMjKd41BU=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=)
                          5: EsIWvzYNxFeMPUFmjBH6kTpjbB0.roa (hash: 9ZtPQ0L/4UvcfpXOzs0mWSnfUX+7UiuSsVqPpiFMuzI=)
                          6: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          7: ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa (hash: csuuV2gLozTCG0Y40dpOQI7fvEKfdkpWci0A66Okg3A=)
                          8: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          9: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:0a:51:25:51:b7:78:8d:07:28:70:67:7b:c8:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Jul 28 17:00:52 2026 GMT
            Not After : Jul 29 17:00:52 2026 GMT
        Subject: CN=f5a247c4568c93561c60c7c565f36f8dda62087d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4e:53:6e:bb:73:65:92:a9:c2:55:19:be:c9:
                    66:35:7a:c3:29:10:34:39:2c:fd:39:0d:43:f0:1c:
                    93:ca:ce:70:09:3b:1e:f6:40:43:9c:9c:20:54:14:
                    27:0b:23:21:76:93:12:58:10:bf:3c:06:5d:38:96:
                    f0:68:69:ab:4d:10:c1:6f:8d:93:62:11:b5:1f:64:
                    9b:2a:f6:ad:54:e4:2a:9e:13:61:5f:3a:b7:20:ec:
                    1f:af:47:a2:1e:50:19:a4:39:62:db:b0:d4:d3:c2:
                    a2:03:00:a7:5f:13:e8:69:f4:fa:7e:f6:78:d2:82:
                    de:f1:da:f7:aa:ab:dd:36:e0:5d:a3:a8:88:84:97:
                    52:4e:c8:89:71:f7:ec:c3:bb:22:d2:47:ac:2c:00:
                    b3:6f:5f:be:67:41:8b:af:7a:09:f4:86:f1:d2:6e:
                    12:76:b0:a0:53:4c:29:b6:5b:0c:7e:35:bd:b5:9a:
                    1a:0f:4c:4f:f9:7a:8b:fa:f8:e7:8d:c4:2b:52:01:
                    cb:f3:1c:45:19:69:a5:30:ce:c2:64:88:b1:da:e0:
                    31:f0:fe:c1:6c:ea:68:4d:59:51:5a:f3:d8:04:db:
                    1b:c1:06:05:a8:14:ec:3d:84:8f:48:bf:88:03:e6:
                    6b:9f:41:81:ef:c2:15:06:57:71:24:80:00:82:4f:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A2:47:C4:56:8C:93:56:1C:60:C7:C5:65:F3:6F:8D:DA:62:08:7D
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:09:e0:43:02:a5:06:39:f4:42:16:b5:24:35:f7:59:3e:
         da:4b:22:3c:aa:58:ea:ec:1e:74:5f:35:e8:3d:09:6c:45:a1:
         80:86:09:6c:da:23:2b:46:ba:2f:81:9e:89:ad:15:de:ab:87:
         76:5b:54:b1:63:0b:e8:bf:fb:89:20:3d:86:17:fe:3a:c1:81:
         09:a1:c5:6d:ad:a9:75:a6:51:8f:b0:a1:3d:26:ca:1d:40:05:
         60:d8:69:52:7e:07:1c:0e:52:9a:10:9f:18:6c:f0:91:0a:65:
         85:3f:6c:dc:2e:56:49:d1:b1:62:d2:4f:3a:cf:92:d5:37:c4:
         68:6a:df:58:a4:f9:77:a3:68:ca:e8:fc:d3:40:31:26:66:87:
         2d:7a:a0:10:d5:d3:ab:c3:f5:60:03:66:f8:99:72:3b:77:fc:
         00:e9:23:20:02:05:5f:6c:dc:41:1d:ba:e3:6c:89:7f:c8:ad:
         92:3a:dc:1c:95:e8:8b:9a:89:fa:6c:5c:85:bf:ad:61:c8:4c:
         20:68:da:50:1c:a7:da:ae:d0:d3:93:1b:41:8c:c6:a2:06:b9:
         79:21:d4:79:bc:85:d2:5e:de:58:8e:0e:7f:da:fc:a6:8a:a4:
         a2:72:94:dc:b4:73:3c:db:ab:57:9a:c5:11:53:14:13:75:16:
         4f:89:53:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:36 2026 by rpki-client