Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          RP1ew5HLfPEfHXAiLCgdt6NnIckDebpy65ELqbaubY4=
Subject key identifier:   CF:EB:D1:76:98:A2:54:CE:E3:89:70:A5:C7:52:82:5E:70:33:02:65
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019FAB63F195883DE33637ED082A9CB094E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          0644
Signing time:             Wed 29 Jul 2026 01:01:21 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:21 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:21 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: AS3c+MSPrt2aBfx/epmoZkhCu3FJebeZuk+eJMleL7o=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:f1:95:88:3d:e3:36:37:ed:08:2a:9c:b0:94:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Jul 29 01:01:21 2026 GMT
            Not After : Jul 30 01:01:21 2026 GMT
        Subject: CN=cfebd17698a254cee38970a5c752825e70330265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:84:f7:64:80:10:03:e8:37:57:e5:1b:ce:
                    1f:c8:c9:06:f9:a9:3a:d0:7b:8f:6c:a2:f4:1a:99:
                    7a:7e:15:ea:8e:4a:5d:be:d1:24:3b:f9:6e:ae:a4:
                    76:26:db:d2:bc:ee:af:0d:19:87:96:11:a2:5f:1b:
                    12:79:8c:de:7f:c6:20:33:db:b5:c6:51:3f:5a:bb:
                    79:2f:8e:ef:22:52:90:3d:44:30:75:8b:94:4b:46:
                    22:b5:85:ba:d8:f6:5f:7a:6c:d7:12:02:b0:02:8c:
                    e6:d3:6e:de:ef:40:48:65:97:1f:6b:91:a1:e4:41:
                    e0:dc:6a:e5:46:8d:0c:22:c0:07:ca:05:24:7b:3f:
                    ef:77:a7:6b:cb:9f:25:02:e3:32:60:29:3f:ae:4e:
                    7c:67:8a:5e:11:f4:22:88:33:73:d2:29:56:32:b3:
                    a0:86:95:3c:82:4c:4c:76:36:79:00:d4:fa:6c:94:
                    a9:4c:73:79:f9:8b:c4:a0:9b:42:61:7d:3f:f4:30:
                    d4:58:40:d1:67:5b:c8:2d:b6:74:ca:b7:59:da:b6:
                    07:32:b7:6f:d5:19:35:f5:d7:ff:15:81:14:52:a0:
                    36:54:dd:2f:d0:3e:c9:71:9a:27:96:70:cf:83:ec:
                    1a:37:2b:3b:7c:a5:26:a3:a4:66:5b:9b:b2:ad:eb:
                    8c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EB:D1:76:98:A2:54:CE:E3:89:70:A5:C7:52:82:5E:70:33:02:65
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:7c:6d:0c:ef:cd:2e:bf:21:9f:0d:25:24:47:48:c3:d4:e9:
         b7:f8:58:74:d6:8d:71:b2:d1:6a:36:15:98:9d:97:94:98:eb:
         ca:ce:f2:64:db:72:17:2a:0a:52:85:ed:bc:43:4f:b8:fc:f8:
         7b:7e:5d:b2:85:bf:0e:4d:b7:55:c5:8a:7a:2b:3f:3f:b4:0d:
         04:63:0c:48:d5:5b:c3:07:f0:72:50:38:13:cf:c6:20:b5:8c:
         0f:40:51:f8:9e:ee:83:f7:58:e1:dc:1a:d1:55:b0:0d:a6:31:
         b0:95:1c:87:37:56:72:f5:8b:c7:6f:4a:f5:4a:0b:ad:cb:64:
         02:9e:78:36:14:f2:9b:70:da:4f:b5:65:9d:95:be:fc:da:d4:
         35:f8:64:3f:13:cd:bb:89:c3:44:25:51:8b:11:76:cd:bc:25:
         4f:2f:d3:da:37:3c:20:c8:7c:7e:f6:fa:b8:5b:a9:f6:c7:16:
         ee:d3:df:a5:f7:61:69:7b:c3:7f:fd:e1:3f:5b:3c:17:d4:a1:
         4a:e6:7c:73:f7:3d:c1:6c:50:d0:33:a4:d9:cf:60:ba:8d:d9:
         40:b6:86:25:35:80:44:d1:d4:06:c3:0f:80:46:6b:e9:82:23:
         25:d9:70:0e:b3:fe:52:e2:af:05:68:01:83:2d:a1:4d:87:a8:
         a5:70:35:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:12:19 2026 by rpki-client