Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
File:                     L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft (raw, json)
Hash identifier:          1T1a1mOXYHfyy70scKZJdRFlDLmNw/ue4Dk+loDnEiE=
Subject key identifier:   FC:F6:E8:71:E3:1D:58:34:07:D7:73:5D:E4:BC:A8:4B:DF:CD:18:71
Authority key identifier: 2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E
Certificate issuer:       /CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
Certificate serial:       019FA7F47341D7500AAF7C34FFB449A5A8EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
Manifest number:          12
Signing time:             Tue 28 Jul 2026 09:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:43 +0000
Files and hashes:         1: L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl (hash: 5dc9VkUHOEeQQTwtW91piqOTS5bFcPj+oZa0ru8h+PA=)
                          2: XV9BcHuc9NNkCnZdJbJHMAFXHhY.asa (hash: BUCSZEjdFaY1WzA8rUkzwkz2gqTUrzX9Z/dRqbYJ/Lg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:73:41:d7:50:0a:af:7c:34:ff:b4:49:a5:a8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fc2d07d6bd5bce5257b619c1d99d721fb8d190e
        Validity
            Not Before: Jul 28 09:00:43 2026 GMT
            Not After : Jul 29 09:00:43 2026 GMT
        Subject: CN=fcf6e871e31d583407d7735de4bca84bdfcd1871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:b8:e0:b4:fb:7c:3a:dd:50:21:30:e5:a1:
                    5b:74:ea:3a:2a:9a:b1:32:08:48:67:8f:f8:c8:da:
                    b8:3a:2a:ad:1d:54:d5:87:d0:6d:b5:05:a9:21:af:
                    5b:f8:87:f3:dd:dc:0b:d6:2e:90:70:87:31:24:28:
                    f1:f5:9c:f9:01:de:e6:e9:f1:b6:71:3d:5d:bc:93:
                    0d:49:8d:6e:4a:34:6a:dd:d0:7a:1f:6a:d4:29:8f:
                    29:6f:03:f6:a9:fd:c0:0a:db:06:62:09:af:0c:f1:
                    d2:0f:1e:87:16:fb:66:e8:84:88:f3:47:40:fb:f2:
                    4f:08:6a:7b:f7:ee:4d:dd:e9:4b:1e:de:bc:3a:be:
                    6c:21:15:0d:ad:d9:ff:9a:09:d6:75:bb:39:2c:d4:
                    0d:99:f2:2a:16:02:6c:d2:60:67:db:b8:00:30:68:
                    eb:ba:42:99:7e:fe:13:6b:94:a5:ba:e7:b9:c9:78:
                    88:c5:e5:76:94:5c:ca:b5:20:8c:85:e9:b4:64:b6:
                    8c:3d:c9:16:bf:f9:9d:19:79:de:8e:d8:fd:eb:cc:
                    41:58:88:c7:b3:9c:75:78:1d:6c:20:8c:b5:12:94:
                    15:ef:57:93:a2:13:c5:4c:39:ec:e7:75:06:cd:39:
                    c6:c7:7c:bb:d5:cb:e4:23:ae:73:c9:ca:ec:52:3c:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F6:E8:71:E3:1D:58:34:07:D7:73:5D:E4:BC:A8:4B:DF:CD:18:71
            X509v3 Authority Key Identifier:
                keyid:2F:C2:D0:7D:6B:D5:BC:E5:25:7B:61:9C:1D:99:D7:21:FB:8D:19:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8LQfWvVvOUle2GcHZnXIfuNGQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3ae5e0-17c4-4430-91a2-8f8fc3c9b1ba/1/L8LQfWvVvOUle2GcHZnXIfuNGQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:7d:04:83:20:fd:69:68:92:f5:4f:32:c5:d5:9a:d1:5d:d1:
         ad:d2:79:b6:a8:27:03:34:6a:d5:26:95:3e:07:62:d1:e0:5e:
         c1:a1:ae:b5:a0:76:69:d3:f8:23:0a:39:c3:c9:dd:7f:f7:22:
         f2:c9:0a:68:7b:5a:3a:e4:c1:23:84:53:f0:15:23:3f:a3:7c:
         31:28:52:c8:c5:fb:8c:d9:4a:70:6b:ae:83:fc:fd:b7:62:16:
         27:55:14:a6:c2:8a:8f:12:b3:27:b0:e4:58:97:8f:4a:fe:35:
         82:bf:a6:45:fd:dd:24:8b:1a:18:9e:dc:0b:a9:4c:67:3b:24:
         ff:5f:cf:9c:4f:39:25:10:7c:0c:ec:28:d6:39:0c:8f:86:39:
         61:77:d4:90:4a:08:1d:54:17:72:ad:0a:9d:d0:ef:3d:06:08:
         a2:b1:a9:d1:bb:ee:6b:bb:a9:32:2c:63:cb:23:f1:4a:e5:21:
         56:37:72:f1:23:6c:95:f3:50:bb:f5:d6:c2:75:90:28:b5:b2:
         57:40:ca:2b:a6:ba:15:80:f5:25:02:28:c6:97:98:20:49:3f:
         b7:77:1c:f2:7f:3f:4c:6b:5f:17:4b:3f:16:36:81:ce:33:61:
         41:68:87:31:ca:e6:bd:16:74:f5:f2:4d:63:96:60:7a:bd:99:
         53:9c:b5:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9HNB11AKr3w0/7RJpajsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzJkMDdkNmJkNWJjZTUyNTdiNjE5YzFkOTlkNzIxZmI4
ZDE5MGUwHhcNMjYwNzI4MDkwMDQzWhcNMjYwNzI5MDkwMDQzWjAzMTEwLwYDVQQD
EyhmY2Y2ZTg3MWUzMWQ1ODM0MDdkNzczNWRlNGJjYTg0YmRmY2QxODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfG44LT7fDrdUCEw5aFbdOo6Kpqx
MghIZ4/4yNq4OiqtHVTVh9BttQWpIa9b+Ifz3dwL1i6QcIcxJCjx9Zz5Ad7m6fG2
cT1dvJMNSY1uSjRq3dB6H2rUKY8pbwP2qf3ACtsGYgmvDPHSDx6HFvtm6ISI80dA
+/JPCGp79+5N3elLHt68Or5sIRUNrdn/mgnWdbs5LNQNmfIqFgJs0mBn27gAMGjr
ukKZfv4Ta5Sluue5yXiIxeV2lFzKtSCMhem0ZLaMPckWv/mdGXnejtj968xBWIjH
s5x1eB1sIIy1EpQV71eTohPFTDns53UGzTnGx3y71cvkI65zycrsUjwGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPz26HHjHVg0B9dzXeS8qEvfzRhxMB8GA1UdIwQY
MBaAFC/C0H1r1bzlJXthnB2Z1yH7jRkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhMUWZXdlZ2T1VsZTJHY0hablhJZnVOR1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zYWU1ZTAtMTdjNC00NDMwLTkxYTIt
OGY4ZmMzYzliMWJhLzEvTDhMUWZXdlZ2T1VsZTJHY0hablhJZnVOR1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zYWU1ZTAtMTdjNC00NDMwLTkxYTItOGY4ZmMzYzliMWJh
LzEvTDhMUWZXdlZ2T1VsZTJHY0hablhJZnVOR1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw30EgyD9
aWiS9U8yxdWa0V3RrdJ5tqgnAzRq1SaVPgdi0eBewaGutaB2adP4Iwo5w8ndf/ci
8skKaHtaOuTBI4RT8BUjP6N8MShSyMX7jNlKcGuug/z9t2IWJ1UUpsKKjxKzJ7Dk
WJePSv41gr+mRf3dJIsaGJ7cC6lMZzsk/1/PnE85JRB8DOwo1jkMj4Y5YXfUkEoI
HVQXcq0KndDvPQYIorGp0bvua7upMixjyyPxSuUhVjdy8SNslfNQu/XWwnWQKLWy
V0DKK6a6FYD1JQIoxpeYIEk/t3cc8n8/TGtfF0s/FjaBzjNhQWiHMcrmvRZ09fJN
Y5Zger2ZU5y14A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:40 2026 by rpki-client