Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          hl+4yxlsNiirs7zrY4yVxRAhHDnViIDQNpvPG/BnATc=
Subject key identifier:   5B:CA:28:44:05:09:50:CB:1A:97:D7:F1:FA:01:60:5B:44:8E:CA:BC
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019FABD1045DBC9D05079E65C367745AEEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          14E8
Signing time:             Wed 29 Jul 2026 03:00:29 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:29 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:29 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: UpQGNjjyjQaLy6yVDFS8Bwl9jakl/9tsJN5Sfnz6cwE=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:04:5d:bc:9d:05:07:9e:65:c3:67:74:5a:ee:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Jul 29 03:00:29 2026 GMT
            Not After : Jul 30 03:00:29 2026 GMT
        Subject: CN=5bca2844050950cb1a97d7f1fa01605b448ecabc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:39:10:d0:74:af:62:b1:c8:51:c5:54:0f:2e:
                    d2:03:19:f4:29:26:9e:7d:87:01:60:2d:68:01:b2:
                    ac:b6:ce:b1:de:f5:25:c6:20:fc:41:5b:d1:77:00:
                    f8:1d:85:bc:76:ce:94:35:84:04:5f:d7:13:1e:9f:
                    3d:74:d8:e3:3f:77:f4:7c:ba:bf:33:a7:0e:fa:0e:
                    67:94:0c:30:13:40:9e:56:03:c4:09:3c:e0:da:93:
                    2f:82:6e:ab:90:99:4f:ca:ae:db:62:7f:64:90:2c:
                    1d:7d:c7:90:e4:08:3b:fa:08:2a:27:c1:c7:7f:84:
                    9c:34:46:b3:c4:30:1f:02:ec:54:51:80:77:21:eb:
                    d0:18:14:ae:64:a2:fb:1a:1e:17:49:a3:fc:db:07:
                    c7:61:3d:e2:38:86:d6:0f:6a:60:8e:3f:ed:f1:e4:
                    9e:78:02:e3:cd:7e:46:c9:55:11:9c:86:58:37:d4:
                    c5:5c:75:af:08:93:7a:97:38:e4:7d:88:c9:f2:2c:
                    71:c4:d4:7f:64:fd:09:8e:d9:b4:58:d3:43:64:15:
                    17:b6:58:04:a2:96:b5:0f:8b:2b:7d:13:1b:e1:18:
                    c7:3f:97:19:41:89:30:2f:db:82:46:10:f9:5b:ca:
                    b9:45:22:72:f7:a6:b2:a6:21:23:78:4b:66:5c:d5:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CA:28:44:05:09:50:CB:1A:97:D7:F1:FA:01:60:5B:44:8E:CA:BC
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:cb:36:67:2b:90:ee:6e:5d:69:5b:14:6f:5e:e6:6c:da:
         a5:28:56:c6:8a:2c:52:7b:fc:46:ab:c8:06:30:cb:1c:12:f3:
         ce:00:ef:d3:9f:3d:99:14:ff:13:73:43:14:f5:09:a6:21:64:
         2c:b6:1c:b5:0a:b5:ae:63:db:10:3d:e0:e3:ee:16:8c:d4:e3:
         0c:c2:85:24:57:9b:06:27:c4:30:e1:a2:9c:10:6b:19:96:b0:
         d1:2e:cc:58:81:15:85:a4:aa:7f:40:5a:46:aa:e4:06:47:8d:
         94:04:35:1b:53:1a:58:c6:99:ab:d0:92:f2:ea:73:bf:86:c5:
         13:2a:e2:d5:7d:30:62:f8:76:ab:9d:93:8c:fe:61:25:de:e7:
         64:dc:db:ef:e9:b8:17:bf:88:36:b0:6c:4c:42:6d:36:7d:1d:
         c9:14:46:f3:6f:23:98:4d:c1:fd:4e:20:0d:bd:55:ba:12:4e:
         12:18:da:41:05:76:51:ff:b9:7c:bf:51:80:23:2d:5d:51:63:
         4f:db:07:06:81:a8:c2:2e:14:f7:89:1c:48:69:04:a3:11:67:
         c1:c4:c3:cb:1d:79:b2:8b:62:70:c8:e0:c7:65:e0:d7:33:13:
         e2:1b:65:27:12:bf:5d:ae:49:6f:8d:20:13:b4:2f:f8:a2:9f:
         e6:bc:56:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:22:14 2026 by rpki-client