Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
File:                     80fO2aDtf5RLn078OFd7OObRxnM.mft (raw, json)
Hash identifier:          y3MdaO5mrj/0Q4tAOmzkg9JmIzlzCbZSljDcHJ/bOsg=
Subject key identifier:   DE:05:AF:45:F4:D1:F1:6B:63:F1:70:37:12:08:2D:23:00:25:3A:19
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Certificate issuer:       /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial:       019FA9AC30B194276C919E883C0D81164E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
Manifest number:          0F85
Signing time:             Tue 28 Jul 2026 17:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:01 +0000
Files and hashes:         1: 80fO2aDtf5RLn078OFd7OObRxnM.crl (hash: BZZldP25jHEytEbn1SGrOuJwsctLmvWxH6Tei2SU7DM=)
                          2: epa_Kdx-LVaM8CuhAOU9qbUA_EM.roa (hash: Aa6u3inS9dGYjD1jBcsF2Mf4ginAblBytDS0JIhmA9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:30:b1:94:27:6c:91:9e:88:3c:0d:81:16:4e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
        Validity
            Not Before: Jul 28 17:01:01 2026 GMT
            Not After : Jul 29 17:01:01 2026 GMT
        Subject: CN=de05af45f4d1f16b63f1703712082d2300253a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:3b:d0:05:3b:73:ef:2a:ad:d8:19:eb:a0:
                    d3:9f:5f:bf:38:f1:09:07:b9:f7:29:4c:5c:35:2c:
                    7f:6c:61:c5:c0:eb:50:0e:60:0c:41:96:96:c2:b4:
                    16:64:93:e7:e9:d2:a1:ac:64:0e:71:3c:36:d5:ca:
                    e6:e8:ea:8c:39:fd:5a:1b:11:db:36:8c:d1:b0:66:
                    4b:b3:ac:65:7e:91:fd:9b:fa:3d:09:06:f8:ec:d4:
                    bd:d1:04:97:b0:3d:56:68:59:b2:b8:24:c5:d9:e1:
                    5b:09:03:35:8d:ae:b4:f0:76:8d:bd:01:c2:33:34:
                    b8:fc:9c:3c:95:c7:51:c5:d1:0f:f0:6e:d8:2d:2c:
                    9d:7c:f7:6b:7f:b3:77:95:56:ad:58:65:89:02:4b:
                    9a:b2:9a:49:ff:d1:d6:35:d7:c7:86:e6:0f:42:a6:
                    c2:97:bb:d6:bd:c3:e0:45:9f:44:30:81:7c:1f:da:
                    9d:1a:d4:98:42:39:2b:50:2e:63:76:b6:83:b4:10:
                    ef:f1:c6:cc:eb:e1:19:bb:5b:f8:3b:3c:d6:0c:d3:
                    01:d1:f5:4e:98:9b:dd:c8:98:ed:2d:01:20:33:ef:
                    6f:5b:d6:ef:8f:95:31:a3:40:c2:66:25:c4:5a:fa:
                    f5:b7:f0:67:29:db:24:f2:64:92:72:c9:6d:66:60:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:AF:45:F4:D1:F1:6B:63:F1:70:37:12:08:2D:23:00:25:3A:19
            X509v3 Authority Key Identifier:
                keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:fc:a5:d0:46:82:8c:89:44:ff:2c:b3:4e:c5:59:b3:9e:ab:
         b9:73:b8:22:1c:3f:1e:54:27:d6:5a:b5:36:9b:86:84:55:6a:
         3f:1d:9e:b7:7d:19:8d:21:35:30:40:2b:1b:9d:92:25:65:ac:
         a5:5f:5d:c5:67:f3:af:44:81:b2:4f:3d:ab:90:2e:8b:d9:ca:
         c2:95:9f:e8:16:a7:77:c1:72:28:4b:11:ab:f7:dd:a1:10:4c:
         6e:a2:4c:00:b4:7d:4f:80:6c:b4:f6:cb:4f:ff:06:c3:b7:b6:
         1a:11:ae:ae:8b:a7:d3:7f:ee:1c:2f:10:c6:09:9f:7c:f8:ed:
         dd:c7:56:1a:ac:f5:a3:4b:3a:95:b5:25:0c:1e:6c:0f:e2:17:
         85:7d:54:88:fe:2e:93:6a:72:eb:a2:b5:6c:a3:be:07:6d:c6:
         91:92:02:8d:7b:87:47:f2:a5:be:23:42:bf:10:3d:3a:96:a5:
         d6:ef:61:a6:f7:e4:a5:47:c8:69:e5:16:74:c9:e1:60:d8:aa:
         82:1b:38:59:88:78:a9:07:41:2f:39:fb:14:ba:a1:47:fe:ad:
         ab:4d:d5:30:ab:c4:1b:3d:cb:22:4a:b7:3c:86:26:d5:0c:7d:
         04:0e:fc:39:d0:6a:a7:1e:a8:19:2a:75:78:f2:89:e4:36:57:
         a5:4e:26:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:13:47 2026 by rpki-client