Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
File:                     p8dSnZiE2jCIq487WPs-Y1F501o.mft (raw, json)
Hash identifier:          yPN3EnmTeFylD6U6nicRTMkZSNvJN0jAeDT7eX4aOWU=
Subject key identifier:   6A:00:47:28:8C:EC:5D:71:3F:D1:72:4D:7F:54:BE:E0:E5:1F:E5:A6
Authority key identifier: A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A
Certificate issuer:       /CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
Certificate serial:       019F9392463F58190F57811C2F0E7F97468D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
Manifest number:          8B
Signing time:             Fri 24 Jul 2026 10:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:04 +0000
Files and hashes:         1: 6wwyHetaWlbuQqBi8km0Pln5kLU.roa (hash: NfTKPcEnOPcVeUQUwx5+VFtDZy/ENtzf3n4eNOFkcHM=)
                          2: RMWx0na57fb4dm5uTmWlaZfAY8o.roa (hash: oMhmDSIeMo2V2QXvcmz5Nm8/bP3iTh98RN6hsLbmoWU=)
                          3: p8dSnZiE2jCIq487WPs-Y1F501o.crl (hash: E9ht3sdHf5VE4S+m3m4CL1+lpBmGR6hK5r1D0ZQE+ko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:46:3f:58:19:0f:57:81:1c:2f:0e:7f:97:46:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7c7529d9884da3088ab8f3b58fb3e635179d35a
        Validity
            Not Before: Jul 24 10:01:04 2026 GMT
            Not After : Jul 25 10:01:04 2026 GMT
        Subject: CN=6a0047288cec5d713fd1724d7f54bee0e51fe5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:c0:ac:2d:db:39:0f:44:6e:7b:a7:d0:37:
                    8f:55:15:43:bb:a7:fc:d4:39:8b:68:b7:9a:98:bc:
                    49:90:3e:95:d6:89:37:0e:43:ec:02:69:59:43:08:
                    51:b5:c8:c0:81:ef:12:5a:f7:ce:12:d9:24:57:6c:
                    2f:a7:94:78:18:f6:59:44:21:c3:39:ca:22:07:7b:
                    c5:c8:6b:50:55:cc:f4:5c:43:47:a9:b6:18:fd:4a:
                    46:c0:db:00:dd:5e:5f:ed:c2:bd:4c:08:c4:b7:b7:
                    08:37:40:28:90:d7:1f:c8:c2:3c:3e:69:62:07:00:
                    ef:bf:54:d7:b5:f0:63:92:ab:2a:63:7e:fa:9a:9e:
                    d7:ec:6e:30:ca:1c:1a:29:60:da:36:9d:cc:bb:13:
                    19:c3:c1:eb:11:69:a9:f4:3b:d8:cb:51:f0:46:85:
                    0c:6c:da:74:0b:69:e3:06:42:15:bb:c7:b4:b3:4d:
                    56:1e:9e:ba:1b:a6:c5:6c:c4:48:09:66:03:29:98:
                    44:32:37:3d:3f:ac:0c:f7:ee:f5:9c:78:c0:b6:68:
                    10:6a:fb:2e:fb:4d:13:e2:eb:2a:d4:48:2a:a5:61:
                    b6:7a:a5:f5:b2:6d:f1:eb:1b:19:ac:08:28:70:8e:
                    42:0f:90:5c:de:9a:79:de:bb:b9:b0:ae:75:27:95:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:00:47:28:8C:EC:5D:71:3F:D1:72:4D:7F:54:BE:E0:E5:1F:E5:A6
            X509v3 Authority Key Identifier:
                keyid:A7:C7:52:9D:98:84:DA:30:88:AB:8F:3B:58:FB:3E:63:51:79:D3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p8dSnZiE2jCIq487WPs-Y1F501o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c77dfd-2ce6-4f2f-a9b2-2e68903e7cb9/1/p8dSnZiE2jCIq487WPs-Y1F501o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6d:3f:29:06:31:71:67:4e:2b:35:47:b1:a9:d7:1a:84:98:
         63:16:7b:d1:a9:98:8e:1f:ca:56:6f:29:88:85:d7:71:ac:f7:
         37:66:da:3f:a5:7e:70:16:38:3b:42:73:f5:ee:ec:28:9d:79:
         33:0d:f2:6f:63:e4:34:6d:2d:35:40:d9:83:c2:d9:d5:01:83:
         01:fc:c3:1b:36:3b:dc:e0:4e:6b:af:36:15:bc:70:31:c0:bd:
         0d:6b:07:1e:0c:c9:fe:e0:01:dc:55:62:14:0d:d5:44:c8:13:
         88:69:3b:7a:ef:b1:09:dd:4e:7b:09:cf:11:ce:7c:f3:b2:6a:
         a4:f5:a2:c1:dc:a9:63:e4:7b:02:74:2e:d7:98:09:90:0f:84:
         2d:d8:46:24:cd:4f:98:e5:f8:67:43:4d:df:76:50:39:98:c1:
         0f:94:3f:b4:3b:f1:33:91:fd:85:50:1d:0b:d2:39:e7:75:99:
         98:92:a2:a4:9f:e4:70:30:24:46:98:33:04:a3:1d:6b:86:94:
         82:6e:81:88:b7:10:a3:b9:46:08:7d:bf:5a:a4:03:1b:f4:8f:
         08:3e:dc:e3:7b:93:1d:47:55:0b:a9:59:21:8c:8b:f5:59:66:
         cf:c4:c7:a9:83:6b:df:50:3a:db:6d:f9:39:cb:9f:eb:ee:9b:
         83:c3:38:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TkkY/WBkPV4EcLw5/l0aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3Yzc1MjlkOTg4NGRhMzA4OGFiOGYzYjU4ZmIzZTYzNTE3
OWQzNWEwHhcNMjYwNzI0MTAwMTA0WhcNMjYwNzI1MTAwMTA0WjAzMTEwLwYDVQQD
Eyg2YTAwNDcyODhjZWM1ZDcxM2ZkMTcyNGQ3ZjU0YmVlMGU1MWZlNWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRDArC3bOQ9Ebnun0DePVRVDu6f8
1DmLaLeamLxJkD6V1ok3DkPsAmlZQwhRtcjAge8SWvfOEtkkV2wvp5R4GPZZRCHD
OcoiB3vFyGtQVcz0XENHqbYY/UpGwNsA3V5f7cK9TAjEt7cIN0AokNcfyMI8Pmli
BwDvv1TXtfBjkqsqY376mp7X7G4wyhwaKWDaNp3MuxMZw8HrEWmp9DvYy1HwRoUM
bNp0C2njBkIVu8e0s01WHp66G6bFbMRICWYDKZhEMjc9P6wM9+71nHjAtmgQavsu
+00T4usq1EgqpWG2eqX1sm3x6xsZrAgocI5CD5Bc3pp53ru5sK51J5XvPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGoARyiM7F1xP9FyTX9UvuDlH+WmMB8GA1UdIwQY
MBaAFKfHUp2YhNowiKuPO1j7PmNRedNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDhkU25aaUUyakNJcTQ4N1dQcy1ZMUY1MDFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jNzdkZmQtMmNlNi00ZjJmLWE5YjIt
MmU2ODkwM2U3Y2I5LzEvcDhkU25aaUUyakNJcTQ4N1dQcy1ZMUY1MDFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9jNzdkZmQtMmNlNi00ZjJmLWE5YjItMmU2ODkwM2U3Y2I5
LzEvcDhkU25aaUUyakNJcTQ4N1dQcy1ZMUY1MDFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm0/KQYx
cWdOKzVHsanXGoSYYxZ70amYjh/KVm8piIXXcaz3N2baP6V+cBY4O0Jz9e7sKJ15
Mw3yb2PkNG0tNUDZg8LZ1QGDAfzDGzY73OBOa682FbxwMcC9DWsHHgzJ/uAB3FVi
FA3VRMgTiGk7eu+xCd1OewnPEc5887JqpPWiwdypY+R7AnQu15gJkA+ELdhGJM1P
mOX4Z0NN33ZQOZjBD5Q/tDvxM5H9hVAdC9I553WZmJKipJ/kcDAkRpgzBKMda4aU
gm6BiLcQo7lGCH2/WqQDG/SPCD7c43uTHUdVC6lZIYyL9Vlmz8THqYNr31A62235
Ocuf6+6bg8M43A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:34:57 2026 by rpki-client