Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
File:                     8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json)
Hash identifier:          o2go5glvuVJt1OaGXyouJ4tHpoIJ6+AFc2cOalFFvKU=
Subject key identifier:   81:E9:42:6C:94:F3:61:5F:F6:D8:29:C1:03:C2:08:8B:F4:25:B8:0C
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Certificate issuer:       /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial:       019FAABE81774C6BB1B44D2571794D296041
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
Manifest number:          4E
Signing time:             Tue 28 Jul 2026 22:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:39 +0000
Files and hashes:         1: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=)
                          2: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: GVS3vejpjM3trBRB6DtPcSvcrAmNoQvk0BF/oLLI3mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:81:77:4c:6b:b1:b4:4d:25:71:79:4d:29:60:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
        Validity
            Not Before: Jul 28 22:00:39 2026 GMT
            Not After : Jul 29 22:00:39 2026 GMT
        Subject: CN=81e9426c94f3615ff6d829c103c2088bf425b80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:7b:f8:51:1f:46:c8:f5:3d:76:91:10:b9:
                    cc:f7:90:8d:cb:90:49:60:da:fe:4b:8f:35:82:13:
                    52:77:a4:0f:05:a9:3d:d7:87:60:f9:63:50:24:47:
                    a7:ed:9c:d8:44:d8:3f:3f:31:d7:fc:ea:0b:3c:c3:
                    14:11:2e:d2:9c:2e:78:84:9b:0e:7d:13:d4:2f:86:
                    83:46:53:82:5a:32:e2:36:b4:f3:fa:7c:bf:2f:a9:
                    f4:b4:92:35:65:04:12:92:64:20:8b:cd:2a:20:36:
                    82:aa:dd:ca:68:f6:40:be:8e:9e:e2:65:a2:cf:dd:
                    dd:3a:0d:e2:83:40:d3:4d:7a:94:e3:df:25:91:90:
                    d9:e6:3a:b4:9e:b6:eb:a2:9b:35:5f:41:06:60:e0:
                    3f:f6:f2:e2:b5:5f:b3:91:2e:a2:45:53:43:ca:66:
                    68:08:d4:47:f6:57:26:31:6f:25:ea:2d:05:50:bf:
                    35:5f:d3:e4:64:61:10:fe:82:03:db:d9:d3:c9:24:
                    2f:dc:d6:71:ce:7b:73:48:b8:0a:48:d6:e1:37:c2:
                    56:c6:0e:20:7c:5b:5d:9a:99:26:59:7e:b5:78:62:
                    a2:01:a1:1f:09:42:44:09:a9:bd:6d:d8:3f:2d:5a:
                    f6:26:6f:97:d3:05:9c:66:34:e1:c8:9e:76:89:86:
                    3e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E9:42:6C:94:F3:61:5F:F6:D8:29:C1:03:C2:08:8B:F4:25:B8:0C
            X509v3 Authority Key Identifier:
                keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:aa:33:0f:0e:94:7a:fd:91:c9:2c:2d:0f:41:18:bc:b8:6e:
         cf:be:37:80:1a:6e:13:ca:11:58:ac:80:bd:c7:bc:34:e5:93:
         dd:22:69:fc:31:e8:07:18:89:72:c0:04:6d:71:ee:fb:23:25:
         73:8d:2e:d5:0e:ad:a9:60:f8:51:46:f8:93:cd:b4:fd:26:0d:
         7c:ed:05:24:37:10:30:38:d9:ad:04:ee:45:11:07:45:3b:89:
         b5:59:ee:fc:9c:e5:a0:b6:49:b3:d9:12:40:2d:6d:0f:d3:87:
         8e:5d:13:6a:89:f6:56:f5:78:b1:8b:01:35:a2:62:8f:61:3c:
         ae:29:05:70:4a:89:6b:9e:e1:7b:01:85:98:03:44:8b:65:d4:
         74:b5:4d:b1:c7:a8:15:75:24:60:e7:44:29:02:87:dd:85:2e:
         16:b0:e3:ab:a3:fc:0e:1d:fd:ae:33:4e:aa:30:02:c8:9e:7c:
         4f:e1:44:c0:f3:87:7a:26:5b:76:cc:90:fd:84:ad:9c:db:55:
         b4:47:48:39:31:66:34:c7:5c:22:46:d6:09:6f:12:3c:1b:4a:
         fe:d0:3d:a4:cd:57:93:b2:05:f5:73:77:8e:1e:20:c7:e0:fc:
         8a:54:3d:0c:b7:50:44:45:d0:fa:16:65:49:41:1f:b0:0e:f1:
         f1:98:80:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:35 2026 by rpki-client