Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          L1EFMV+kEuMptdk6/0GpKnw7/muoA+5aEOpIq4FyVlc=
Subject key identifier:   78:88:BE:BF:82:75:49:82:CF:D0:2B:0C:DF:8F:6E:3F:44:25:35:98
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       019F916D7D455A24F44D6C742B129C2ABDC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          1918
Signing time:             Fri 24 Jul 2026 00:01:39 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:39 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:39 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: DrqmKSHMEdPkmsOgwA4VTW1tw7oURxL07JETpkKbpnw=)
                          2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:7d:45:5a:24:f4:4d:6c:74:2b:12:9c:2a:bd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: Jul 24 00:01:39 2026 GMT
            Not After : Jul 25 00:01:39 2026 GMT
        Subject: CN=7888bebf82754982cfd02b0cdf8f6e3f44253598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:06:5e:79:2a:8e:c1:93:93:d4:d7:28:b0:
                    5f:2c:7c:56:9f:11:d1:c4:2e:82:5c:88:2e:bb:0b:
                    a8:b4:1d:b5:d2:27:21:60:a0:b4:18:97:cb:94:30:
                    ad:29:9a:68:d2:18:03:f6:4e:49:bb:68:e4:0b:a4:
                    db:6b:a4:02:d8:e9:2c:35:ea:37:43:c9:55:e0:f9:
                    c2:f5:50:0e:13:51:de:d7:92:5d:14:51:25:d8:c6:
                    c2:52:16:55:d3:af:69:85:7a:e5:89:2c:be:63:3f:
                    f7:a3:93:e3:36:93:b2:d2:ef:31:1f:4c:8a:6c:c2:
                    f2:c0:cd:f3:14:5d:73:80:ec:29:e7:63:d6:58:28:
                    40:23:ee:7d:06:c9:ce:5d:5c:5a:92:de:9f:e1:3e:
                    f2:d0:fe:ab:aa:8c:a5:84:28:41:54:b7:d2:3f:40:
                    8c:87:9c:da:a7:9e:f7:aa:5c:42:84:8c:50:67:64:
                    47:bd:b4:5a:a3:a3:8d:28:6b:cc:ff:ab:35:6c:25:
                    a0:d7:fa:f5:2b:77:91:ac:b4:31:a5:4b:5d:cb:e6:
                    60:c4:87:12:00:56:de:ff:f6:fd:2a:09:3d:d6:69:
                    f7:9a:a9:c7:e4:91:9a:68:e3:e2:ce:97:6b:82:b8:
                    a0:66:f0:dd:9e:a6:68:00:e3:81:bc:f2:b8:d2:16:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:88:BE:BF:82:75:49:82:CF:D0:2B:0C:DF:8F:6E:3F:44:25:35:98
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:47:51:fa:a3:79:95:a5:0a:a6:a4:b3:d8:1a:ae:0f:7a:78:
         06:c3:0c:22:0f:00:ed:3b:78:75:5b:ec:62:07:ee:11:0a:b8:
         0e:ed:ae:12:a4:76:15:a6:8c:76:c1:ba:4c:92:17:80:da:83:
         e7:01:01:94:f7:ad:a6:6b:ed:7c:6c:ca:5b:59:46:90:4b:95:
         7f:a5:e3:8a:0e:06:e9:f3:d5:da:3f:12:79:1e:84:86:ab:c1:
         6e:df:fa:63:65:e7:95:30:53:b9:12:c0:92:97:de:14:3e:55:
         95:e7:92:5b:1e:7b:69:7a:cf:38:74:86:3e:10:40:71:46:a2:
         59:aa:79:81:4c:a3:74:0d:11:3a:5a:1a:27:df:68:bf:16:0e:
         2c:ed:fa:49:ff:24:a3:12:e5:38:b2:3f:56:53:be:55:7a:7a:
         89:b2:49:56:9b:1c:7e:77:cd:9c:fb:e2:23:e3:79:2c:bb:02:
         91:37:0d:e6:3d:ef:55:36:00:1d:47:bf:fc:74:1d:cb:0f:3d:
         8a:1d:29:91:81:08:a9:44:3c:0c:18:7d:47:42:40:69:40:4c:
         40:46:26:a1:0b:d6:56:7a:92:1a:fe:6e:9a:b0:4b:72:59:00:
         c3:a2:e1:c5:7d:f4:63:9c:c7:b3:f4:eb:d7:ac:09:4a:4c:12:
         11:5b:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:48 2026 by rpki-client