Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          f7W+9EyJ+W5iElsItkucHcp5U5QU0ZTju0NL6mlVSGg=
Subject key identifier:   7B:24:96:9B:DD:18:CC:98:B7:92:45:84:0E:44:E5:66:17:45:4B:C1
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019FA975372050BFFFCCF676249BBF1B6AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          19F5
Signing time:             Tue 28 Jul 2026 16:00:59 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:59 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:59 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: YbQxG/YmwwjPqfOQrIVS8/m7bxMOCzWLrYVgZ/XooEo=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:37:20:50:bf:ff:cc:f6:76:24:9b:bf:1b:6a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jul 28 16:00:59 2026 GMT
            Not After : Jul 29 16:00:59 2026 GMT
        Subject: CN=7b24969bdd18cc98b79245840e44e56617454bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:73:d0:5c:90:ca:c7:b2:cc:80:93:2f:94:
                    b9:10:73:35:20:73:64:fb:26:7a:07:69:cb:e4:a3:
                    93:55:fc:f2:03:c1:5b:2e:e9:22:a6:63:da:ec:fc:
                    98:6a:7b:d4:bd:19:f1:36:7c:a2:45:e1:0a:8a:ed:
                    1f:08:1c:f4:51:01:ca:a8:ac:b3:10:00:69:7b:29:
                    71:39:94:63:46:e2:f5:e5:89:e7:f5:50:62:64:80:
                    63:07:79:7b:3e:db:be:11:b6:01:5e:60:f0:af:e7:
                    45:77:8c:e4:2a:9e:3c:2b:2f:7c:05:a1:04:b8:dd:
                    3e:96:80:04:c5:0a:a1:c9:f1:57:17:2e:a8:cd:97:
                    f8:57:f3:17:4b:e0:d4:ff:65:a6:eb:73:f6:0d:c7:
                    c8:4c:98:ff:fd:48:20:66:f2:f8:3d:df:7f:62:02:
                    ad:b3:3c:dc:8b:3d:19:83:ed:f8:44:87:48:4e:f7:
                    77:7d:fb:f6:d7:63:a8:98:63:9a:75:e6:31:14:c7:
                    6b:90:71:57:a5:f4:b8:87:05:2a:85:0c:51:8e:71:
                    18:be:0e:2b:e8:f3:96:2b:60:44:c7:d0:20:0d:b8:
                    61:43:eb:cc:75:a9:3e:99:8a:37:4e:d9:e3:a2:2b:
                    3a:36:e5:d4:15:83:24:42:a1:48:fc:ee:ec:ba:19:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:24:96:9B:DD:18:CC:98:B7:92:45:84:0E:44:E5:66:17:45:4B:C1
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:05:b0:9e:e2:c4:0b:6d:be:fc:ba:61:61:f7:71:5f:a9:
         0f:7f:20:23:13:30:c5:fc:fc:1d:a5:7b:83:0a:5f:95:e9:48:
         12:72:df:ec:0b:17:cc:ba:bd:22:b9:cd:a2:d1:64:ab:64:0a:
         fa:bc:1f:e3:a7:13:54:9d:ac:7b:a0:4b:b6:b3:e2:39:da:07:
         7d:97:90:0d:2f:ba:b2:c3:69:1b:a3:97:63:4b:03:24:34:f4:
         d0:21:7b:f3:66:4b:24:7b:32:81:a5:b3:43:72:21:5d:67:bf:
         67:42:75:5b:0f:a4:f7:2c:cb:d5:9c:0c:87:cd:52:f6:3e:a7:
         71:d4:47:85:dc:da:ec:b8:23:c3:f0:09:bd:13:13:5f:41:fb:
         77:ce:40:a3:b9:b2:67:6a:b7:ad:b0:a5:df:1b:7b:47:db:18:
         9c:b2:df:98:a1:0c:d4:16:95:49:c5:63:ef:15:c9:f4:45:97:
         3a:ad:80:e9:e4:a0:cd:a8:7e:7f:a4:21:84:94:d8:6b:46:27:
         41:70:16:cd:38:36:77:48:ec:20:9a:e5:6d:9e:59:ac:fc:4b:
         5f:01:69:c9:46:fe:06:3b:20:cb:0d:09:a6:91:db:f9:26:f5:
         c5:27:db:df:f8:8e:9d:03:c2:64:da:28:d7:79:fb:a9:0f:88:
         1a:be:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:45:11 2026 by rpki-client