Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
File:                     i2H8DxZbRki3X9-jgNI3iblv61I.mft (raw, json)
Hash identifier:          Y6YLetK1JPmFrcF1aVBv0xKMBhe9GdUnoylsJYOsebY=
Subject key identifier:   F3:F8:E2:DE:A0:B3:21:3C:C4:95:70:62:A6:AA:91:C5:91:2C:CB:07
Authority key identifier: 8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52
Certificate issuer:       /CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
Certificate serial:       019FA82C003E836CFF8D29C68FB15DACC029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
Manifest number:          75
Signing time:             Tue 28 Jul 2026 10:01:23 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:23 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:23 +0000
Files and hashes:         1: i2H8DxZbRki3X9-jgNI3iblv61I.crl (hash: TKrslRFJAJeM8RqZsEimc3NgVgbwRJpd5TOvsFkSAEQ=)
                          2: ozXAdPsdIFqyx1N_0quYyoEkT7k.asa (hash: 7S1hNli0f7Eh9CTGs9N/Ok/OO+DwCV2KnybIJmgIzr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2c:00:3e:83:6c:ff:8d:29:c6:8f:b1:5d:ac:c0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b61fc0f165b4648b75fdfa380d23789b96feb52
        Validity
            Not Before: Jul 28 10:01:23 2026 GMT
            Not After : Jul 29 10:01:23 2026 GMT
        Subject: CN=f3f8e2dea0b3213cc4957062a6aa91c5912ccb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:98:83:8e:3d:d8:ec:91:a2:e0:1d:c7:17:
                    da:51:97:20:7d:e0:8b:df:7e:4a:76:2a:dd:f6:10:
                    de:bc:7c:15:a2:85:75:ca:49:f8:de:f1:4a:80:03:
                    4c:81:0d:35:79:ec:5a:fd:84:29:4e:65:44:42:89:
                    d9:8e:0c:e2:83:27:54:6c:ea:54:3b:ec:ba:b4:17:
                    a9:2b:6d:e1:e9:10:3c:6a:d3:10:55:1c:c4:b3:3b:
                    69:2d:c0:31:03:53:88:e5:13:bb:69:c8:bc:8a:d1:
                    da:ac:bb:b6:b5:04:01:84:5c:1c:17:e1:95:2d:0e:
                    44:c5:99:23:92:48:30:45:37:8f:75:71:0f:e6:cb:
                    63:24:c3:f8:91:6e:d4:38:e4:54:59:b4:f6:62:50:
                    65:ae:5f:58:3b:c8:ee:fd:45:63:2f:55:3b:f9:8a:
                    7d:a6:98:54:d8:9e:3a:41:6b:c7:d6:1c:9e:0c:38:
                    bc:37:c7:bf:2a:3c:f1:09:54:c3:e7:e6:1d:ec:3e:
                    c9:15:1d:10:7e:e3:99:4a:eb:c5:a8:90:59:5e:8f:
                    22:4a:41:89:e5:d5:20:90:ac:e4:b5:47:df:ef:b2:
                    38:ef:64:e6:85:67:3b:a0:6d:d3:53:c8:07:af:e3:
                    7c:7a:13:7f:99:a9:90:75:b2:a2:2e:2f:14:a6:97:
                    74:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F8:E2:DE:A0:B3:21:3C:C4:95:70:62:A6:AA:91:C5:91:2C:CB:07
            X509v3 Authority Key Identifier:
                keyid:8B:61:FC:0F:16:5B:46:48:B7:5F:DF:A3:80:D2:37:89:B9:6F:EB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2H8DxZbRki3X9-jgNI3iblv61I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b82747-70af-4d80-a81f-b6e185e155a9/1/i2H8DxZbRki3X9-jgNI3iblv61I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:34:b4:4c:f3:73:1d:28:76:ad:80:73:21:e5:4f:e6:b5:b0:
         9a:db:ba:cd:bd:e7:dc:c4:62:88:45:74:f3:29:55:05:42:a5:
         ce:0a:1d:eb:04:e3:07:ae:84:08:8f:75:6d:67:b9:5a:f4:fd:
         53:41:e7:41:38:2a:82:1a:7c:33:44:1f:84:53:2b:d1:bd:d8:
         a9:7c:79:ef:b6:f9:05:da:07:51:85:d2:25:e1:c1:7a:11:42:
         6f:a6:7e:07:55:0f:97:a7:8f:07:3a:5f:60:f0:88:ac:82:43:
         c0:1b:e1:65:63:5e:66:90:5c:0c:c4:4c:91:70:bc:5f:7d:29:
         40:8a:dc:51:6c:bc:13:f7:d5:b4:f6:d0:c3:c0:21:b9:7c:b5:
         35:04:25:48:a3:56:7b:a9:b0:dc:19:6c:db:34:89:c8:86:f3:
         f9:03:40:e8:58:21:da:e9:dc:59:c8:62:7a:8b:ea:42:73:11:
         a2:53:a6:86:a7:19:31:33:70:ad:3e:6e:8e:83:8b:55:ec:e4:
         fd:1e:eb:1d:5d:ed:e8:76:df:ee:02:7b:0e:40:9f:16:b6:30:
         82:90:12:c3:d1:40:8b:2f:b0:37:6b:b6:51:66:37:4a:aa:40:
         3a:e7:6d:4d:46:9a:ea:2b:b6:9f:d2:ed:b9:d4:0d:12:bf:0b:
         17:81:2d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:43 2026 by rpki-client