Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          r5breo/s3+AcUHdkL9PiL4Ouk3mZ0bVLbmQAHoSaWmc=
Subject key identifier:   D5:78:CC:98:7D:E9:42:50:6B:40:23:89:64:84:FC:AC:87:FA:1F:FE
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       019FA9E2D9FEE67CAC142F5ACD322E0BBE48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0D80
Signing time:             Tue 28 Jul 2026 18:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:44 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: EiV4jZuhQgD6b71+6NiXzYuseHLF+KxxI1bqYr/2lPA=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:d9:fe:e6:7c:ac:14:2f:5a:cd:32:2e:0b:be:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Jul 28 18:00:44 2026 GMT
            Not After : Jul 29 18:00:44 2026 GMT
        Subject: CN=d578cc987de942506b4023896484fcac87fa1ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:50:ad:ad:e0:ae:2b:a0:b4:9b:2d:60:ca:
                    66:fa:bf:71:b0:8a:3f:e2:d9:58:68:a0:f6:67:8f:
                    b1:dc:86:42:66:4a:98:10:0c:f5:f3:8d:96:7f:12:
                    66:50:49:d2:bb:b6:be:be:40:d4:42:c1:43:da:75:
                    8f:26:a6:4f:ef:a2:15:ed:be:1d:fa:e9:d2:c1:60:
                    37:6a:02:7f:88:88:a8:97:2a:8f:49:0d:21:9e:7d:
                    4d:b1:e1:fa:02:56:96:15:6f:cb:fc:bd:25:f1:49:
                    25:cd:26:62:6b:0d:83:5a:54:81:ae:a9:eb:a3:24:
                    20:59:6b:2d:08:a8:24:54:8f:dd:aa:13:a3:ca:0b:
                    10:ee:9e:5f:55:12:30:b8:fa:08:33:65:d4:84:e1:
                    e9:d0:b8:40:0c:06:e2:85:d0:e6:b1:77:02:f3:39:
                    ec:e9:af:21:26:9b:17:5d:68:2a:16:6c:9c:7a:9e:
                    7f:bd:f3:62:37:f1:3e:30:33:14:4e:ff:4b:0a:96:
                    59:c2:58:a6:12:05:9c:67:a6:58:7e:b1:2c:0b:b7:
                    3f:5a:41:aa:c2:72:b6:4b:e8:f1:bc:16:ec:7c:4e:
                    eb:f3:f8:9b:88:48:17:69:f8:3f:8a:4c:ea:27:84:
                    5a:73:13:c9:67:25:6a:eb:72:b6:e3:be:19:56:d6:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:78:CC:98:7D:E9:42:50:6B:40:23:89:64:84:FC:AC:87:FA:1F:FE
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:47:80:1b:1f:58:64:57:07:50:80:4a:79:98:1c:67:8e:b4:
         71:b9:f8:f4:0a:f3:12:3b:f7:cf:fc:03:9b:77:43:ac:99:4a:
         60:bc:51:25:5b:fe:f0:c4:ca:68:16:58:ae:08:1d:7d:e6:a7:
         73:ab:b1:25:52:c9:c3:a0:4a:b2:de:8c:ab:42:af:b8:ac:fa:
         1e:b6:93:2b:48:2f:bb:69:10:b7:f7:02:88:a8:13:89:96:eb:
         c2:97:e4:f7:1f:b0:fc:ab:65:ab:57:8c:05:0a:ab:8f:89:52:
         b4:3b:ef:0f:cf:3e:42:4d:55:14:7a:fa:cb:1a:ee:40:c3:dc:
         9d:7c:ea:26:ea:be:03:bc:fa:ac:ef:4c:fc:e0:ea:09:36:47:
         4d:d5:03:57:ef:15:0d:26:59:95:e7:f5:75:ed:5f:dd:f6:22:
         9d:ad:49:af:ef:22:65:c9:9c:7e:5a:30:2a:1c:87:5c:0e:07:
         ba:0c:22:de:bd:47:38:c6:94:b7:ae:6f:04:7b:f7:6d:65:b1:
         d8:35:ad:e0:8a:bd:18:e7:29:61:80:ae:43:69:be:ef:17:c0:
         e0:84:d7:e4:90:07:07:8f:d2:49:0c:e0:b4:90:e7:db:a9:02:
         8d:82:60:ea:a2:a3:f0:c8:35:22:e9:fd:df:2e:25:52:ca:94:
         aa:66:d9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:03:53 2026 by rpki-client