Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          tuVV5/zLIqLKW7eZJc/espeGwjtLxICXEBxgvConeDY=
Subject key identifier:   9B:58:08:73:80:A1:8B:E7:83:3F:6B:BD:78:52:06:46:38:C9:DE:89
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       019FA9ABC9C159DD400813A5FF219F1229B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 17:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:35 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: LLwdcpoiyU1nj/bczdM33ZWGCpfNDql3LX7zrHS9y5g=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:c9:c1:59:dd:40:08:13:a5:ff:21:9f:12:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jul 28 17:00:35 2026 GMT
            Not After : Jul 29 17:00:35 2026 GMT
        Subject: CN=9b58087380a18be7833f6bbd7852064638c9de89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:9b:f5:9e:2d:f0:2b:6a:03:8d:38:94:79:
                    8a:4f:50:75:5f:50:cb:04:2f:3c:5e:ca:06:b1:93:
                    e6:0b:59:a2:05:a0:5d:c9:2f:b1:f6:66:e2:c7:08:
                    77:fa:2c:14:4d:e2:27:af:fa:fe:3a:c9:86:bd:57:
                    ac:f1:f1:15:9a:f4:ab:d6:31:33:89:fd:1f:ef:2a:
                    ae:30:bc:0e:6d:dc:4a:9e:b4:18:e3:4e:e4:ce:c6:
                    31:c0:e9:b9:d0:02:cf:f9:9f:91:15:f6:be:fe:f9:
                    84:ab:b9:37:0a:3f:c0:e6:47:16:fd:1e:52:41:03:
                    b2:bf:8a:26:48:d8:5b:53:47:69:92:52:82:55:42:
                    11:42:05:f2:41:25:8b:96:04:bd:45:35:77:7e:e9:
                    c7:f9:b6:0c:0b:39:94:93:99:5f:8e:56:1d:40:88:
                    3b:48:3b:cd:a7:05:c4:0d:f2:99:88:8a:0c:cc:ad:
                    58:a3:a9:3e:cc:6f:51:c6:3a:1f:27:56:61:87:74:
                    97:6e:b2:b4:bd:49:22:c2:e8:fa:2b:c8:6a:79:f6:
                    3e:ff:c9:26:e3:ad:c7:dc:b7:53:c3:11:f3:fb:b6:
                    d8:72:fc:b7:d9:e0:ce:66:f4:cf:c3:f4:4c:a5:ff:
                    94:f5:71:b2:0d:2f:6e:64:a4:84:ac:30:ce:3b:ca:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:08:73:80:A1:8B:E7:83:3F:6B:BD:78:52:06:46:38:C9:DE:89
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:13:8f:81:70:90:b0:55:23:0d:f8:0c:e8:82:06:24:4c:
         04:8c:e7:f5:18:8c:ac:aa:72:25:75:32:45:a5:21:cf:80:66:
         a5:5d:81:79:c1:93:c6:94:1c:c0:ea:4e:b1:c9:e5:b3:08:b9:
         35:0f:2f:9a:8d:fb:d8:52:ae:14:bc:a0:58:2a:43:86:41:26:
         47:ce:3b:6b:a6:d4:8c:04:d6:43:fa:c1:d8:72:20:d1:8a:cc:
         ab:7d:99:ad:e0:fc:9c:9e:cc:69:9d:1a:4a:c8:da:63:99:bf:
         a3:83:63:da:76:ea:68:13:f8:81:a8:61:cc:d0:d1:82:b8:2e:
         f4:8f:e6:c5:7c:19:7e:69:49:93:a6:d3:61:6f:9e:09:49:94:
         b6:8b:81:df:bf:97:82:29:7b:67:84:5a:86:2d:d3:10:21:86:
         f0:fa:56:f7:de:ce:3d:50:46:2e:82:e1:a7:6f:af:23:ef:bc:
         b3:34:12:da:a0:4a:cb:04:da:f5:8c:16:63:1d:5c:d8:00:93:
         6d:98:91:fc:7e:e1:48:56:c9:e8:d1:27:f6:19:ee:22:fd:f8:
         75:55:64:b6:fd:83:d9:44:4a:2a:09:71:e7:6b:d1:f2:ec:f9:
         fc:5d:61:80:59:36:c6:41:ea:c5:86:1f:39:95:57:5e:ab:db:
         ff:aa:43:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:13 2026 by rpki-client