Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          4pbQ/YCDg9wv+XezkJUKmPLI5iyHnM2CSV76YdjhpmY=
Subject key identifier:   B8:EB:4A:62:50:85:41:26:AA:BD:CF:1C:E2:7F:1C:C4:EE:B9:EA:5C
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       019FAA19762B2014920DFD761CC5FDB92FA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          1124
Signing time:             Tue 28 Jul 2026 19:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:23 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: C-g37o81zdQC9_zopBXPpyRUrjU.roa (hash: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=)
                          3: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          4: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: MBnpfZsq+B+uAG2aeNwJvGL18BS9QKrXcp9IlT06GEo=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:76:2b:20:14:92:0d:fd:76:1c:c5:fd:b9:2f:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Jul 28 19:00:23 2026 GMT
            Not After : Jul 29 19:00:23 2026 GMT
        Subject: CN=b8eb4a6250854126aabdcf1ce27f1cc4eeb9ea5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:de:9d:9d:f7:7e:67:4b:4a:0f:9a:09:52:4f:
                    ca:e3:9e:92:ac:25:dd:4f:06:e6:e2:63:7f:7f:d0:
                    17:a4:78:8d:ab:c3:f2:67:ee:ca:b0:be:87:25:9a:
                    bf:f4:08:93:9a:e6:59:15:cd:56:bc:2a:f4:7f:e3:
                    69:67:73:a9:8c:f6:eb:8d:c9:71:65:1f:e6:9c:39:
                    cc:39:7f:12:31:c5:11:37:d6:5c:e0:e4:e6:b0:b4:
                    35:a2:79:fb:67:d7:ca:cc:3a:08:ab:12:b4:ef:de:
                    d0:5a:d6:63:fc:96:6f:bb:a8:1d:4c:ac:90:88:70:
                    1c:9d:58:97:d3:1e:9a:2c:a7:b2:95:68:a6:78:7a:
                    a8:30:13:74:09:b1:21:1e:4a:b7:19:63:ad:b3:a7:
                    a0:9a:da:00:76:50:af:90:39:42:0e:89:3a:b3:2d:
                    11:fc:32:60:f4:d6:e2:e7:75:75:35:ff:f6:8e:ad:
                    57:5f:79:14:09:24:5d:04:d6:a4:f0:d2:10:ce:a2:
                    a6:b1:a7:01:a8:38:7d:87:fd:02:ee:86:81:26:53:
                    ab:9a:b9:aa:35:4f:e7:d0:a3:b5:69:6c:01:35:30:
                    f7:a7:99:28:52:4f:68:d1:9c:57:07:4e:1e:8b:54:
                    80:45:da:fc:55:0d:5a:44:6d:0f:a4:59:4b:b0:69:
                    23:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EB:4A:62:50:85:41:26:AA:BD:CF:1C:E2:7F:1C:C4:EE:B9:EA:5C
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:90:cb:cc:f6:49:df:a6:06:82:75:0c:8b:3e:8b:68:e3:8f:
         93:e7:e1:59:dc:31:49:a9:01:7e:b7:36:e8:9d:8f:20:16:d1:
         b8:68:9f:f4:75:5f:b0:e1:04:92:42:34:9b:37:ef:e6:e0:21:
         3a:6a:76:6b:78:fa:cd:fa:0f:f8:a6:43:75:67:d0:6a:6a:57:
         a2:b3:c3:95:28:4c:b6:4f:89:06:89:83:95:e1:7c:70:e2:ec:
         da:df:b0:39:2e:3e:cc:90:6f:59:78:1a:ac:47:19:4e:1b:3f:
         a0:66:84:a3:6b:42:0b:b6:cc:81:ed:e4:73:60:0a:55:65:13:
         10:1b:f0:77:05:7e:63:cb:d3:35:6b:b6:63:03:50:31:57:a0:
         a7:e6:0f:16:42:54:c4:19:64:a1:1e:cc:3b:be:37:73:39:3f:
         a1:d9:4d:ab:6d:00:d9:0b:d7:20:f7:9e:f0:d2:2d:1e:00:6b:
         5d:5a:32:c4:03:d1:7f:29:e5:81:ab:1c:92:d4:42:35:25:6e:
         1d:81:bb:e9:04:04:cb:4d:10:01:88:14:83:be:6d:43:18:df:
         c4:1c:dc:fa:44:b2:0a:20:f5:f1:e9:e4:ee:4f:21:ef:04:76:
         29:d5:24:2d:3c:c3:32:ab:12:10:77:2a:6a:2b:04:2d:13:0b:
         6c:c5:98:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:18 2026 by rpki-client