Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          IOI3P69AS1bJ6XzBSwe0vC03nAip3HigF0w++usnuoU=
Subject key identifier:   2D:36:3D:61:10:0A:1E:72:55:AE:D8:68:6F:33:72:0B:A1:C0:D3:18
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       019FAA19687DBB5CC93786605356CD42E3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          1157
Signing time:             Tue 28 Jul 2026 19:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:19 +0000
Files and hashes:         1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
                          2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: BriWd+lEjDEwIjPG3R/dOG/Fg8eiByPhNAE0hF3Mffo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:68:7d:bb:5c:c9:37:86:60:53:56:cd:42:e3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Jul 28 19:00:19 2026 GMT
            Not After : Jul 29 19:00:19 2026 GMT
        Subject: CN=2d363d61100a1e7255aed8686f33720ba1c0d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f5:07:6c:40:c5:b5:b9:49:7a:e4:fa:28:50:
                    c4:d3:0e:b4:52:a0:9f:b9:bb:8e:a1:21:8e:3f:cf:
                    29:d5:c2:4f:4c:24:f1:88:d0:79:dc:01:d7:3a:8e:
                    9b:22:09:cd:bb:66:1d:6b:69:e1:94:d2:87:7a:bd:
                    0d:5e:bd:17:62:10:16:3a:e8:f7:4e:c5:9e:2b:52:
                    c9:1e:ae:2d:a2:bb:18:36:8e:35:05:21:fc:56:41:
                    21:ee:ae:73:e3:bc:a0:3a:95:89:64:f9:c7:e5:2e:
                    8f:ba:13:da:46:62:11:e0:fb:99:1e:c8:8b:16:3a:
                    cc:1e:63:cc:9b:44:20:6c:48:85:b4:0f:1d:8e:52:
                    7f:49:af:b5:06:f9:a8:48:0a:73:75:85:9d:e1:03:
                    7d:bf:f3:ee:45:c3:60:84:5f:24:cc:7d:6f:14:b6:
                    9f:68:42:7c:b4:fb:df:2b:2a:e6:4c:aa:d2:b2:41:
                    5f:84:ba:c2:6c:86:85:6d:b7:12:17:45:88:6b:0c:
                    ec:f6:cd:cc:ab:f4:6b:32:4a:e3:85:32:ab:12:f7:
                    20:1e:fc:dd:2c:98:e9:c8:1d:b1:24:77:de:c7:99:
                    49:60:c8:81:79:68:7e:a2:a3:87:e0:42:ed:b9:60:
                    1c:46:56:6a:98:da:8a:ce:c5:8c:6c:4f:9c:8b:c1:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:36:3D:61:10:0A:1E:72:55:AE:D8:68:6F:33:72:0B:A1:C0:D3:18
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:b5:43:57:9a:9f:87:bf:e3:a4:d1:4d:5e:3f:29:c9:c4:18:
         30:25:6b:f6:bf:b7:69:62:cb:87:3a:10:6c:87:78:17:8f:74:
         e8:76:b7:39:36:f2:c2:96:ed:2c:5b:f6:06:54:f4:93:7f:46:
         11:22:e3:f2:e6:7e:a4:54:18:54:7b:0c:ef:1d:eb:f4:9b:f3:
         cf:4a:5c:73:d0:e4:f8:f5:ec:97:42:87:aa:2d:d9:bd:77:c6:
         44:da:ee:8f:5b:f8:d6:e7:1a:61:80:e5:9f:f6:ae:12:a8:98:
         c4:23:42:c8:7c:b1:ab:db:00:1d:7c:27:a4:fa:ee:cd:37:42:
         ad:09:0e:51:80:05:7e:53:3c:ec:00:ba:42:74:0d:63:a5:61:
         2f:33:10:b8:ac:15:0e:3c:19:d7:14:d5:0d:df:7c:99:6b:be:
         b9:86:c3:e6:26:a7:2d:87:c4:64:33:8f:aa:17:fd:75:34:7a:
         1c:74:58:86:b4:39:ff:26:f5:1d:f0:91:e6:34:ed:58:a8:0a:
         fd:95:0a:61:2e:d5:6f:4a:ba:08:c8:62:2f:57:fe:9d:35:86:
         69:64:68:7e:e7:09:53:9c:cb:34:d7:f4:5d:1a:d7:51:a2:85:
         f6:53:93:76:51:91:df:d6:f2:28:d7:ad:b9:a2:8d:55:68:3c:
         7a:24:bc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:55 2026 by rpki-client