Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File:                     8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier:          /eGQsizVI8i3xy7U/KLaSX/5USUqv9AJwHG/B5n8RqI=
Subject key identifier:   78:06:DD:0F:4C:D5:86:A4:0A:A8:19:23:A2:75:9E:D3:20:43:FB:36
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer:       /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial:       019FA906ADC8C81A2D5E25E6723C877DCC5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number:          19E2
Signing time:             Tue 28 Jul 2026 14:00:14 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:14 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:14 +0000
Files and hashes:         1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: QX5KNE44pkJ+qH1SdlD++TJQZyUoLi3zN6W1iAVSj0o=)
                          2: unUyBQz8XFF2OcgZ1f90_tl9Ad4.roa (hash: Q3zQczsKFUa5DCI4QfqsevX6E5xk3SVGs2WbjqkExHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:ad:c8:c8:1a:2d:5e:25:e6:72:3c:87:7d:cc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
        Validity
            Not Before: Jul 28 14:00:14 2026 GMT
            Not After : Jul 29 14:00:14 2026 GMT
        Subject: CN=7806dd0f4cd586a40aa81923a2759ed32043fb36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:2f:b2:58:92:33:31:7f:31:6c:05:ac:05:
                    77:1e:2d:fd:76:03:a7:57:9e:b1:8d:7c:16:9d:41:
                    19:a4:f2:40:2e:41:da:72:19:79:b7:01:43:3b:fe:
                    c6:62:4c:f2:e9:a0:d9:05:d6:84:34:61:3a:37:54:
                    84:f7:7e:3e:56:18:ad:7f:8f:00:fa:24:7f:01:2e:
                    1e:59:ae:24:2c:42:29:44:1a:e8:c0:8e:f0:48:6f:
                    bf:b9:16:41:7f:b3:cc:24:4b:1d:71:14:f5:28:80:
                    fb:ee:3d:8a:ae:af:a2:ec:56:cd:f5:a7:a8:06:b4:
                    26:d8:fb:45:63:34:24:4f:ea:cd:7c:ab:5a:28:bd:
                    e7:75:1d:a4:da:36:9a:54:d5:fd:2e:3f:5d:74:2b:
                    12:5b:4f:07:43:f9:10:4c:9f:2e:2d:c6:5b:a2:9d:
                    51:d1:f0:15:e4:59:c7:b3:53:7b:0a:fb:9f:95:c2:
                    8e:0e:4b:72:46:51:28:86:e9:d4:5b:d6:cd:d6:2d:
                    48:5c:25:1e:21:ef:ec:a8:40:50:78:eb:f9:b4:d9:
                    8e:0e:84:47:e4:ee:1b:b3:1f:37:08:e8:dc:8e:ca:
                    0c:82:55:72:37:e5:b0:ee:0a:1d:06:18:6c:44:09:
                    0d:07:3b:e9:13:ba:3a:bc:79:2b:48:08:b1:05:f4:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:DD:0F:4C:D5:86:A4:0A:A8:19:23:A2:75:9E:D3:20:43:FB:36
            X509v3 Authority Key Identifier:
                keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:29:80:5c:59:49:a0:d7:e7:b4:85:dd:a4:e6:ea:be:c9:96:
         c8:e3:04:48:ae:a6:e2:ba:77:80:54:ab:ba:0e:01:d8:5e:4d:
         cc:fc:e2:48:96:36:9f:88:4a:1f:a0:fb:e4:63:54:a8:f7:45:
         4c:dd:6c:cf:1e:54:25:5b:f5:4b:af:78:d2:8a:69:59:df:3d:
         9a:1f:b9:94:f1:ad:2a:d4:27:2a:8a:3a:02:ca:7e:6f:85:c2:
         0d:97:8a:6d:5a:7a:de:40:79:af:17:83:78:41:23:de:80:a6:
         b3:8e:25:a0:72:a4:b4:dd:2e:12:c4:c0:f7:18:40:84:ac:db:
         4a:5c:4f:5a:1f:e1:f0:29:9d:4b:09:e7:2f:33:aa:9d:b2:2d:
         dd:dd:a3:a8:90:ea:45:d9:64:a5:99:ff:4f:80:b0:d0:22:f4:
         ac:18:40:4a:b8:e5:5e:2c:ec:77:82:a7:32:18:f3:c1:e6:21:
         bb:89:4f:9a:53:ce:51:f4:b2:9d:ff:0c:68:e9:e6:b1:b6:b4:
         5f:c4:15:44:54:a0:68:d8:02:e8:67:aa:c0:b6:76:6d:33:ca:
         fe:f2:76:30:af:90:6b:49:f1:c1:8b:b9:73:d1:41:33:ba:b8:
         83:28:db:ee:4d:3a:67:a4:d9:3a:8e:27:4f:80:12:1f:9d:6b:
         96:74:02:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:20:07 2026 by rpki-client