Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
File:                     1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft (raw, json)
Hash identifier:          ES/2U5YCFAYd9kQllB/yHhiS3Mu13R82jz5+x3S4g10=
Subject key identifier:   AE:20:15:20:90:0D:85:B7:56:55:CE:81:64:09:6E:2A:3E:87:37:A1
Authority key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Certificate issuer:       /CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Certificate serial:       019F932458B42E0597EA72A7AD707795813B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
Manifest number:          0D08
Signing time:             Fri 24 Jul 2026 08:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:00 +0000
Files and hashes:         1: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl (hash: DWCshE4Jzs3pAT0gNyZAA/fWULV5WFtcrptTJv4nB4c=)
                          2: _bF1xY0tz7JbEXvFbfl2J9z_aGE.roa (hash: RJ6E1ubvdFwW8RqYbgq5Su4V9SdqGf0qZCB+qrw7Uhg=)
                          3: d55MmSSrMOAa7YboXbvWTauB-vE.roa (hash: u/wjI69y9HM6cDlahIXVWn271sSNYCBmkSyoOi+8hS4=)
                          4: tSXjnZHfIFRPkfR23KuWOEzYmso.roa (hash: bT+yAY7ld62QoBr+Sm2VFzdlFNBEOfbRTYnS7F4jOIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:58:b4:2e:05:97:ea:72:a7:ad:70:77:95:81:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
        Validity
            Not Before: Jul 24 08:01:00 2026 GMT
            Not After : Jul 25 08:01:00 2026 GMT
        Subject: CN=ae201520900d85b75655ce8164096e2a3e8737a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:03:2d:a0:d7:a6:03:c3:fa:1b:61:dd:07:
                    24:ec:c8:89:2a:d7:09:cb:03:01:d4:ba:75:50:96:
                    95:87:f6:df:e8:e9:b1:7e:d3:e6:4d:f6:2a:9c:1c:
                    94:11:6f:7f:6b:27:67:72:78:df:a5:d7:dc:d0:3a:
                    aa:f7:ed:28:8b:3a:61:e3:b4:49:8f:99:d8:6f:9c:
                    ef:ae:2a:5a:e7:a3:d1:9d:60:4a:6d:37:2e:cb:ee:
                    c8:84:d4:71:00:92:90:a2:0a:bc:cb:fd:09:46:70:
                    90:c1:8c:54:9a:7e:c6:9b:9e:3a:78:4b:5c:4f:c1:
                    5b:c6:b2:18:b2:d4:5c:13:c1:5d:18:7d:96:d1:b2:
                    db:97:cc:97:5a:3b:b2:99:85:3b:81:c4:6d:7c:af:
                    81:b6:1a:d0:a2:e1:91:27:f6:89:34:ff:4a:e6:05:
                    de:67:4a:b1:c6:64:ce:2e:f2:cc:f4:65:c2:a3:d6:
                    5b:dc:d6:13:2e:6f:1d:65:39:b0:2e:bf:fc:be:26:
                    2f:ce:cb:2e:da:4e:1e:f8:58:95:2f:9d:48:fe:99:
                    ed:32:37:83:e7:ac:eb:f6:3c:e5:29:fa:8c:a5:3d:
                    3f:43:5d:35:91:31:a4:c3:f6:7f:9f:35:44:be:a4:
                    ea:e2:fa:97:95:38:19:07:c5:78:fd:7f:06:b8:e4:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:20:15:20:90:0D:85:B7:56:55:CE:81:64:09:6E:2A:3E:87:37:A1
            X509v3 Authority Key Identifier:
                keyid:F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:50:a5:17:9b:8c:d1:95:9e:b9:06:b5:22:27:b6:44:c6:ff:
         e0:5e:7d:40:35:8e:b5:8c:c6:b8:3d:48:31:d8:db:eb:c6:a3:
         1a:ce:c7:c2:80:e7:9c:31:6f:eb:5b:e7:f1:e7:23:fb:28:4a:
         12:2a:5f:bd:c5:8e:f2:58:bb:2f:69:78:cb:02:91:62:2f:a1:
         68:47:78:11:13:e2:88:59:da:07:1b:16:78:e3:18:c6:36:d8:
         96:7a:a9:ae:f7:ce:52:87:57:78:ee:5f:6f:fe:c5:2e:8b:45:
         96:11:6a:55:62:00:90:47:94:92:dc:5c:22:80:a7:e4:75:7b:
         06:88:15:53:eb:f6:3a:df:60:7f:23:c0:0e:3c:06:51:cd:3d:
         9d:23:ff:7d:cf:f3:fe:14:d3:7c:3c:e5:ae:bb:d0:36:77:a4:
         51:3b:6f:a3:2a:f7:27:11:8c:58:9a:65:07:37:05:3b:54:7f:
         a8:23:90:01:df:4e:84:5a:bd:aa:e8:3a:21:ff:69:0c:4f:3b:
         92:13:0d:1e:32:62:2c:33:97:ce:2d:ed:03:d4:d4:65:fa:a5:
         e6:26:dc:77:98:ec:e6:15:46:05:37:ca:12:f6:0a:13:71:0a:
         32:32:42:48:d6:69:27:c8:46:37:f6:5e:e4:29:90:c6:4b:89:
         d4:be:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:59:55 2026 by rpki-client