Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File:                     8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier:          gmZ6uzXzqwW38BZfs7GawVwZ4oUTpmf16+JfpWcxDYQ=
Subject key identifier:   E0:68:8D:AC:42:6D:11:70:5F:64:5F:88:A9:71:D7:E0:28:A0:34:9B
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer:       /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial:       019FA9E28EF74A876BB84636CBE7F30D8C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number:          0954
Signing time:             Tue 28 Jul 2026 18:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:24 +0000
Files and hashes:         1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: JgGEKfadtYwPcX2KnTs1Yxx0qnJZ8Mt+4y6m9TEc8fQ=)
                          2: wF_q_VT2vLpTBM5Oeqm7M9XsChw.roa (hash: aN3q8Drn260bx+eRQtUiCzDsSBkZm+NdLG36hflpNDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:8e:f7:4a:87:6b:b8:46:36:cb:e7:f3:0d:8c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
        Validity
            Not Before: Jul 28 18:00:24 2026 GMT
            Not After : Jul 29 18:00:24 2026 GMT
        Subject: CN=e0688dac426d11705f645f88a971d7e028a0349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:17:57:77:a1:bf:b2:a3:88:2d:14:12:30:
                    77:03:e8:62:c9:dc:50:19:90:6f:3f:b9:eb:ac:d3:
                    16:81:0f:df:89:87:f1:43:ab:d8:a0:c0:29:15:96:
                    09:97:cc:db:82:4a:08:2c:99:b8:31:86:95:c4:c0:
                    78:c0:ce:0d:3a:52:6a:25:71:64:34:92:cb:51:ab:
                    e3:58:66:1c:f9:be:0e:c9:31:9a:9d:38:2a:cf:e1:
                    ce:d5:0d:ba:af:c9:4a:23:b7:a2:5e:c9:71:af:e8:
                    c5:60:40:3b:ed:99:97:cf:c4:88:64:72:29:e3:19:
                    7b:95:2d:ca:63:35:f0:b2:c9:55:23:e1:1d:89:af:
                    6c:84:55:8b:8d:e5:c8:af:e1:79:cb:5e:90:1d:e9:
                    27:e6:3c:2a:8a:15:7a:07:9a:c5:d3:d5:6d:44:d0:
                    1d:08:f0:44:6b:4a:28:9c:bd:71:36:11:b0:40:ea:
                    67:2c:53:4c:f5:59:f4:6a:21:e3:99:06:80:2c:e8:
                    4d:89:88:e7:da:3d:1a:17:a5:28:f9:ca:65:68:c2:
                    9b:61:2b:95:d9:11:39:ed:ab:ca:f6:33:b5:31:8f:
                    bb:d3:b9:19:c5:1f:0f:c9:db:6a:a8:4d:33:8c:7b:
                    c3:43:48:d5:6c:3c:41:e3:7f:58:3a:67:75:80:7d:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:8D:AC:42:6D:11:70:5F:64:5F:88:A9:71:D7:E0:28:A0:34:9B
            X509v3 Authority Key Identifier:
                keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a2:24:6b:1a:9a:50:9e:9e:4c:3f:e7:3f:c6:35:93:ff:a1:
         36:95:8b:79:b9:17:d5:fc:f2:66:bc:aa:93:e2:4e:68:31:32:
         9b:80:41:b6:4d:25:e0:a5:55:91:8c:ac:a4:e4:80:c7:3a:95:
         90:fc:6b:c5:a7:7d:f0:06:7a:c8:0b:d8:53:82:6d:85:83:72:
         41:03:be:8d:e3:74:67:37:a6:f3:9e:7d:39:4c:8c:8f:c4:3a:
         f1:a5:1c:c0:36:ee:c0:c1:96:ab:07:64:cc:9d:96:47:d9:4e:
         fa:0d:97:7d:a1:dc:03:14:25:18:6e:28:a7:e5:89:8c:2d:11:
         33:25:84:84:ad:88:30:e4:a9:e3:89:4c:0d:6b:71:10:f1:2c:
         aa:e5:30:0c:c7:91:1d:4a:da:ac:51:d6:90:e0:39:fb:85:e3:
         e8:2f:c2:1c:51:d6:1d:37:8a:25:8e:7d:11:58:1a:e8:e6:ea:
         3c:7b:00:a7:14:8d:cc:e8:57:44:7e:ce:26:72:b4:5a:af:f2:
         aa:92:38:d0:f9:a3:6d:e5:fc:85:ce:26:39:f1:71:b9:e2:85:
         35:61:42:3b:f2:00:63:64:a4:e1:a2:f8:81:2f:e1:87:d1:ca:
         cb:4b:7a:d1:69:c7:e8:de:ee:b6:9d:69:17:1f:30:90:96:35:
         a4:b8:48:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:49:42 2026 by rpki-client