Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          3FUOPy61CWEpG8u9OX9zgqGsoX8c9rtNv9Li2bM1KE8=
Subject key identifier:   A8:04:D6:02:7E:05:2A:89:AF:4C:B4:31:98:80:72:35:05:27:98:0E
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       019F8FEC02F7ABAFEB356CFAB753B40D7810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          1248
Signing time:             Thu 23 Jul 2026 17:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:36 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: A170NCOWPMz+cr6GSZkS3BocWWvv+yj4X1fWdg8NO4I=)
                          2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:02:f7:ab:af:eb:35:6c:fa:b7:53:b4:0d:78:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Jul 23 17:00:36 2026 GMT
            Not After : Jul 24 17:00:36 2026 GMT
        Subject: CN=a804d6027e052a89af4cb431988072350527980e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:2a:17:81:27:87:93:43:3a:5f:a8:29:53:3b:
                    ad:10:c4:6b:4f:d1:76:f6:06:a1:79:20:87:d7:76:
                    6c:8e:43:45:18:5e:be:20:49:a6:02:f9:84:1b:38:
                    76:ff:81:cb:11:c3:0d:d3:98:52:ef:d0:5f:a9:c9:
                    46:06:93:3f:cc:58:ef:be:80:ef:3f:38:80:df:16:
                    08:ad:45:05:ba:c4:61:95:66:31:7a:22:a9:24:5e:
                    fe:ba:86:cd:ca:14:41:de:ee:d1:80:76:24:7e:ae:
                    f0:9b:82:5c:ef:31:ec:40:a1:9b:d4:50:68:8f:76:
                    36:4f:01:25:71:8b:e2:90:b2:2d:12:89:06:5e:b2:
                    02:f3:05:fa:37:12:85:1e:8f:42:e9:a1:8d:7e:32:
                    b2:d6:c5:6b:f1:68:39:a9:05:61:25:df:ba:1a:7b:
                    69:80:9e:b2:3e:b5:13:05:ff:aa:a9:58:d8:08:6c:
                    f3:4c:81:24:42:49:98:6b:c1:95:07:62:c4:ca:80:
                    41:39:e1:c7:04:e5:6e:77:7c:d1:8a:51:12:00:30:
                    8d:b8:2b:3a:9d:22:36:26:df:12:18:37:95:c1:db:
                    fe:e0:1e:fe:82:0e:32:d3:fe:1a:b7:4e:37:49:0c:
                    77:c6:f9:83:72:12:88:60:5a:84:21:ec:f9:02:a2:
                    3d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:04:D6:02:7E:05:2A:89:AF:4C:B4:31:98:80:72:35:05:27:98:0E
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b2:fb:92:6a:53:39:b3:34:fb:c0:ca:74:c5:47:9a:9d:46:
         d6:e9:c9:45:f8:3c:19:c8:13:b5:62:ca:a8:c1:4d:4f:a0:d3:
         29:07:76:87:cd:31:ed:c0:4a:14:af:10:ad:1f:a1:c9:06:31:
         ce:01:1a:87:28:e7:a4:17:c9:13:7e:97:c0:09:77:88:61:1e:
         1b:b9:db:79:3b:85:07:ba:f5:77:8b:be:9b:3d:26:45:8f:68:
         31:65:1a:37:69:a8:5b:3d:6f:23:1a:70:7a:8c:d7:20:f5:4e:
         ca:37:7c:3a:93:6d:73:31:1f:fa:b9:c8:1b:32:39:9d:63:66:
         1e:b8:3e:67:4a:27:3a:e6:9c:3d:af:e9:44:b0:27:11:10:a7:
         7d:3c:76:a8:9a:a6:5b:58:4c:41:7c:dd:81:dd:ac:59:65:3c:
         50:ac:97:02:54:23:74:39:5e:f8:be:94:ba:81:d8:64:86:59:
         23:28:83:c8:c9:03:aa:e3:3d:bb:67:13:26:12:5c:04:76:a1:
         46:77:e6:ec:a5:ba:39:e1:2d:e3:67:22:ae:0d:cc:82:30:d6:
         97:6f:44:be:08:29:94:41:43:bc:be:e7:ed:9f:3a:25:b9:19:
         a5:87:da:c6:b7:4c:05:a0:0f:11:d1:3f:db:63:f4:e3:43:84:
         1d:6b:53:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7AL3q6/rNWz6t1O0DXgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl
MmQ4NGEwHhcNMjYwNzIzMTcwMDM2WhcNMjYwNzI0MTcwMDM2WjAzMTEwLwYDVQQD
EyhhODA0ZDYwMjdlMDUyYTg5YWY0Y2I0MzE5ODgwNzIzNTA1Mjc5ODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yoXgSeHk0M6X6gpUzutEMRrT9F2
9gaheSCH13ZsjkNFGF6+IEmmAvmEGzh2/4HLEcMN05hS79BfqclGBpM/zFjvvoDv
PziA3xYIrUUFusRhlWYxeiKpJF7+uobNyhRB3u7RgHYkfq7wm4Jc7zHsQKGb1FBo
j3Y2TwElcYvikLItEokGXrIC8wX6NxKFHo9C6aGNfjKy1sVr8Wg5qQVhJd+6Gntp
gJ6yPrUTBf+qqVjYCGzzTIEkQkmYa8GVB2LEyoBBOeHHBOVud3zRilESADCNuCs6
nSI2Jt8SGDeVwdv+4B7+gg4y0/4at043SQx3xvmDchKIYFqEIez5AqI90QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgE1gJ+BSqJr0y0MZiAcjUFJ5gOMB8GA1UdIwQY
MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt
ZmQ1NTkyNDJkNDcxLzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx
LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrL7kmpT
ObM0+8DKdMVHmp1G1unJRfg8GcgTtWLKqMFNT6DTKQd2h80x7cBKFK8QrR+hyQYx
zgEahyjnpBfJE36XwAl3iGEeG7nbeTuFB7r1d4u+mz0mRY9oMWUaN2moWz1vIxpw
eozXIPVOyjd8OpNtczEf+rnIGzI5nWNmHrg+Z0onOuacPa/pRLAnERCnfTx2qJqm
W1hMQXzdgd2sWWU8UKyXAlQjdDle+L6UuoHYZIZZIyiDyMkDquM9u2cTJhJcBHah
Rnfm7KW6OeEt42cirg3MgjDWl29EvggplEFDvL7n7Z86JbkZpYfaxrdMBaAPEdE/
22P040OEHWtTlw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:15:30 2026 by rpki-client