Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          2hd10ZjxOThkigosdwD4mZiopxeSVAmG5ta1N2g7cFA=
Subject key identifier:   66:EE:E1:BF:2B:31:B8:2A:C9:74:23:E0:2F:7A:13:47:3E:38:DD:27
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       019F8E6C1576A9740A89F1365B2C13FB9F4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0945
Signing time:             Thu 23 Jul 2026 10:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 10:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 10:01:15 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: W3I8EnpcP1F6agL87fIjuRJnLFLPrVthOmubKai+aVs=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:6c:15:76:a9:74:0a:89:f1:36:5b:2c:13:fb:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Jul 23 10:01:15 2026 GMT
            Not After : Jul 24 10:01:15 2026 GMT
        Subject: CN=66eee1bf2b31b82ac97423e02f7a13473e38dd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:6a:82:99:47:02:4d:6f:01:57:a9:f9:f8:
                    1b:89:6f:2f:31:7b:f4:d1:d5:96:f2:36:61:ed:d3:
                    b0:fb:c0:08:00:88:a6:17:86:78:0e:51:04:ea:fe:
                    b2:dd:a1:37:aa:0d:85:bc:fc:2e:a3:4c:f4:fb:e4:
                    0d:64:5c:88:52:c9:75:1a:57:94:f0:05:d0:7c:62:
                    19:dd:b9:dd:81:0f:64:0a:c4:8c:55:97:99:3d:18:
                    44:b7:9e:ae:3a:fa:2c:ae:23:37:26:9a:1b:00:3c:
                    90:b2:85:ab:85:55:e9:f6:33:e5:df:9b:1b:ed:ee:
                    27:f4:18:0c:a9:01:14:94:df:e7:db:f4:46:9e:30:
                    bc:75:6f:5c:ee:d9:05:8e:3c:b0:ee:ee:04:45:88:
                    02:f3:c5:0c:a4:ed:9b:ea:79:41:6f:50:7d:a2:5b:
                    f9:de:36:4f:76:14:ce:ee:72:62:d0:46:d7:05:93:
                    1f:54:99:99:c2:22:a6:c3:b4:92:b9:1c:b3:d4:8e:
                    15:66:55:25:3b:67:f0:fe:a8:6f:d2:d8:06:b6:78:
                    d9:b2:ae:8e:06:5f:08:89:38:54:13:e1:5c:4c:54:
                    96:09:dd:dd:1d:0f:6f:d9:9b:3c:c8:97:f4:f7:bf:
                    0e:05:3d:9a:e2:79:d6:5d:fe:1e:d8:a3:3c:55:9d:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:E1:BF:2B:31:B8:2A:C9:74:23:E0:2F:7A:13:47:3E:38:DD:27
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:76:16:3b:5e:41:3d:a8:32:08:b8:c4:b7:1b:9b:80:69:15:
         df:57:15:bc:b7:26:1f:59:45:6b:94:9f:9a:c8:b0:de:49:c6:
         9b:bb:dc:6e:ba:62:d2:30:94:a4:62:82:4c:23:27:1c:a3:c0:
         75:0b:c6:c0:71:02:1e:ca:5e:58:91:a8:d7:c3:b8:3f:cc:8e:
         77:34:96:76:9f:92:9a:a8:b3:12:f1:91:43:40:f6:4d:23:75:
         ed:6c:40:82:b3:f9:5f:04:6a:d9:71:63:60:ed:33:e3:f8:4b:
         e1:35:c3:8c:a0:fd:4e:12:d4:63:5d:64:21:b3:fd:c8:50:0d:
         8c:fe:9d:d9:65:6f:27:3a:ee:04:3b:47:26:86:29:04:33:e9:
         ff:62:4f:76:8b:f3:be:e1:d0:c9:f3:4e:c9:d3:3f:d8:37:7d:
         89:dc:99:fc:04:f8:55:d1:e9:df:28:a7:e1:71:bf:62:ad:5e:
         c3:23:02:96:c9:d1:4e:2f:20:9d:dd:f4:11:2d:ff:51:8b:76:
         03:d7:ee:7e:1f:7b:c6:3a:21:53:ce:79:21:2e:0c:34:44:cc:
         cc:59:8e:b0:d5:fb:ab:5c:51:17:ac:93:a7:29:5c:92:11:17:
         f5:e7:cd:44:1a:7c:df:69:31:1d:77:fd:73:bf:1a:4b:6e:58:
         b2:f5:04:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ObBV2qXQKifE2WywT+59LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDJiYThhMmE5NmEwN2I1YjY0Y2FmODczMjkwZTIwNzhk
OTY0YTYwHhcNMjYwNzIzMTAwMTE1WhcNMjYwNzI0MTAwMTE1WjAzMTEwLwYDVQQD
Eyg2NmVlZTFiZjJiMzFiODJhYzk3NDIzZTAyZjdhMTM0NzNlMzhkZDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaJqgplHAk1vAVep+fgbiW8vMXv0
0dWW8jZh7dOw+8AIAIimF4Z4DlEE6v6y3aE3qg2FvPwuo0z0++QNZFyIUsl1GleU
8AXQfGIZ3bndgQ9kCsSMVZeZPRhEt56uOvosriM3JpobADyQsoWrhVXp9jPl35sb
7e4n9BgMqQEUlN/n2/RGnjC8dW9c7tkFjjyw7u4ERYgC88UMpO2b6nlBb1B9olv5
3jZPdhTO7nJi0EbXBZMfVJmZwiKmw7SSuRyz1I4VZlUlO2fw/qhv0tgGtnjZsq6O
Bl8IiThUE+FcTFSWCd3dHQ9v2Zs8yJf0978OBT2a4nnWXf4e2KM8VZ0DYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGbu4b8rMbgqyXQj4C96E0c+ON0nMB8GA1UdIwQY
MBaAFPHSuooqlqB7W2TK+HMpDiB42WSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEt
ZDE2ODk4MDE2Y2ZlLzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS84MDc1YTAtMGM1ZS00Yzc4LWJkYjEtZDE2ODk4MDE2Y2Zl
LzEvOGRLNmlpcVdvSHRiWk1yNGN5a09JSGpaWktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnYWO15B
PagyCLjEtxubgGkV31cVvLcmH1lFa5Sfmsiw3knGm7vcbrpi0jCUpGKCTCMnHKPA
dQvGwHECHspeWJGo18O4P8yOdzSWdp+SmqizEvGRQ0D2TSN17WxAgrP5XwRq2XFj
YO0z4/hL4TXDjKD9ThLUY11kIbP9yFANjP6d2WVvJzruBDtHJoYpBDPp/2JPdovz
vuHQyfNOydM/2Dd9idyZ/AT4VdHp3yin4XG/Yq1ewyMClsnRTi8gnd30ES3/UYt2
A9fufh97xjohU855IS4MNETMzFmOsNX7q1xRF6yTpylckhEX9efNRBp832kxHXf9
c78aS25YsvUEYQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:10 2026 by rpki-client