Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
File:                     8QEB-_qGP-Reriv2uX4O_n7IMSU.mft (raw, json)
Hash identifier:          w9rfZirGKVMBya8NBLo9rYFEoqIpQtLXGjUn+kuzj48=
Subject key identifier:   4F:7A:BE:52:06:A4:82:77:AF:03:80:FC:C4:3E:CA:38:87:4B:58:73
Authority key identifier: F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25
Certificate issuer:       /CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
Certificate serial:       019FAAF5F3CEA07711BAA171EF54696FA04F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
Manifest number:          097F
Signing time:             Tue 28 Jul 2026 23:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:13 +0000
Files and hashes:         1: 8QEB-_qGP-Reriv2uX4O_n7IMSU.crl (hash: NvdsjU0XPZbI85xCVEXafRIRihErWDLAvoTkDTa6sP8=)
                          2: NwpxsBvkXInCfE7s58C2EVrv1wo.roa (hash: T0KsGiCR7aM3uhR3oT8/7BFXwqzPIAkn3MY+dfdaeXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:f3:ce:a0:77:11:ba:a1:71:ef:54:69:6f:a0:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10101fbfa863fe45eae2bf6b97e0efe7ec83125
        Validity
            Not Before: Jul 28 23:01:13 2026 GMT
            Not After : Jul 29 23:01:13 2026 GMT
        Subject: CN=4f7abe5206a48277af0380fcc43eca38874b5873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:14:60:c7:b3:59:0c:55:69:6b:46:25:6d:4d:
                    67:27:5f:bb:27:d6:9f:da:ec:ba:ad:6a:8b:41:b2:
                    dd:8d:fc:d2:fc:94:6a:76:47:12:c5:0e:55:35:87:
                    b6:90:5a:3d:08:9f:90:75:64:15:3e:c9:8a:d5:e8:
                    60:0b:47:27:41:99:28:a9:41:3b:42:59:99:ad:ab:
                    37:b7:80:de:e9:7c:8c:b0:f8:08:06:6c:59:2e:41:
                    ac:51:df:cc:64:1f:e7:f8:6c:19:bd:8b:0e:e7:e6:
                    84:6a:72:ca:70:8f:74:01:11:45:a0:d4:eb:a9:2a:
                    78:0d:fa:47:18:37:d8:95:fd:8c:db:b2:b3:a1:cc:
                    f9:ae:b1:cb:18:20:86:89:49:f7:49:38:45:03:e4:
                    e4:a6:3a:37:c7:07:90:af:3a:69:9a:70:e9:2c:0d:
                    03:49:04:c7:7a:42:b4:ac:98:08:fb:c7:1b:16:76:
                    de:65:5f:98:a8:63:ca:20:79:c2:a9:3e:90:c8:0e:
                    f8:3e:94:88:5d:bf:05:dd:e3:94:2e:8f:5c:c1:c2:
                    51:1a:01:94:1f:d5:2f:0c:56:a4:07:82:90:0c:75:
                    2f:6a:a2:d3:39:a5:b3:10:af:3b:79:b8:f0:6b:2e:
                    65:5a:af:e8:3f:32:a1:69:69:a3:35:33:d8:1b:d3:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:BE:52:06:A4:82:77:AF:03:80:FC:C4:3E:CA:38:87:4B:58:73
            X509v3 Authority Key Identifier:
                keyid:F1:01:01:FB:FA:86:3F:E4:5E:AE:2B:F6:B9:7E:0E:FE:7E:C8:31:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QEB-_qGP-Reriv2uX4O_n7IMSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e1f80c-d920-42d4-891f-de2641d44fa0/1/8QEB-_qGP-Reriv2uX4O_n7IMSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:66:9b:5a:36:c4:5c:6d:52:2b:1f:3e:0a:6a:47:bc:45:76:
         fe:6e:ed:53:28:ff:fe:55:ae:96:5e:c9:40:a2:40:77:ae:3d:
         21:10:89:82:91:bb:58:98:c0:2a:91:66:a1:cc:20:a7:3a:bb:
         f9:55:09:39:e2:1f:b8:f8:75:b9:83:56:ce:34:03:99:04:14:
         07:53:56:29:ba:1b:c3:4f:6e:83:bb:e4:13:95:42:bd:93:d4:
         b7:3a:d9:56:0a:b8:94:25:ed:93:d2:03:d7:07:7c:bc:31:08:
         00:f2:5f:8b:64:89:44:45:e5:08:03:a7:17:10:d4:42:b5:bb:
         96:04:05:27:f9:f0:c7:17:98:1d:da:46:16:d1:17:3f:c3:5a:
         53:6d:85:08:38:d7:73:6e:a3:15:de:b4:82:ef:be:9f:9b:47:
         4b:c6:b5:63:45:f8:d7:f0:51:2b:77:3b:44:fe:d3:ca:f0:6f:
         cb:5a:a6:65:1d:47:91:51:2e:a0:8d:ce:09:fd:e3:ca:49:14:
         76:15:ef:97:6e:23:57:c5:11:42:b6:31:7d:c8:0f:78:f0:58:
         0c:65:0c:2d:1f:22:cc:b4:bc:2a:e9:d6:a9:b6:75:04:fd:bd:
         13:a1:12:d6:87:50:ea:56:ad:64:74:b5:1d:10:d0:f3:d6:bb:
         36:13:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:01:42 2026 by rpki-client