Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File:                     8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier:          3cJJ6B9Z1Z1vb1jVQkD+5hTMvc6mIugDSwr0tegIlrA=
Subject key identifier:   E7:14:18:1A:D6:02:CE:8B:67:F6:C2:F7:BF:54:C7:F6:B1:B7:AC:BF
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer:       /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial:       019F8FB53A3E9FCC35BBE8B1D650E097806A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 16:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:46 +0000
Files and hashes:         1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: Ravq78sQteSiFrcQLRkCwI8LMin7GkBTNhwdblH+TZA=)
                          2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:3a:3e:9f:cc:35:bb:e8:b1:d6:50:e0:97:80:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
        Validity
            Not Before: Jul 23 16:00:46 2026 GMT
            Not After : Jul 24 16:00:46 2026 GMT
        Subject: CN=e714181ad602ce8b67f6c2f7bf54c7f6b1b7acbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:ba:da:e8:76:5a:5c:fc:7c:fa:fe:90:c1:
                    9c:39:30:e7:98:34:83:ca:94:ec:10:8d:80:78:7b:
                    f3:26:27:18:56:1c:62:0b:f0:52:4a:9b:f7:0a:35:
                    75:b9:25:16:22:b4:63:45:3e:f5:ec:7b:59:23:c4:
                    87:8c:da:66:80:20:06:ee:03:6b:78:08:67:17:b2:
                    44:df:72:bb:f3:00:a4:ea:8a:85:8d:74:6f:cc:52:
                    a9:c9:1d:79:f4:5a:30:95:fd:c6:50:0d:c6:6d:ae:
                    25:2e:fe:f2:07:6a:91:48:20:f6:28:04:6f:11:03:
                    b7:d5:4f:6d:78:d3:93:58:36:df:e1:98:68:eb:1e:
                    62:a2:81:b2:0c:66:2c:d3:76:ba:62:af:bd:8d:50:
                    0e:d0:f2:8a:cf:be:d6:a6:9c:3c:ba:10:f4:3d:5d:
                    64:bc:14:8d:e8:e2:6c:96:ef:b2:59:59:f9:34:cc:
                    ca:22:34:15:86:3d:06:b1:99:7d:d5:98:c4:ef:f8:
                    4c:32:01:fe:d5:c2:2c:08:38:f2:2c:62:b6:3d:d7:
                    d7:5e:c8:22:48:2c:ab:0c:c9:26:a0:69:dc:92:95:
                    eb:08:da:78:1d:40:40:2e:76:83:92:f8:fc:6c:d7:
                    e7:71:0e:bd:d0:8f:a5:ab:59:67:52:2c:9f:25:0c:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:14:18:1A:D6:02:CE:8B:67:F6:C2:F7:BF:54:C7:F6:B1:B7:AC:BF
            X509v3 Authority Key Identifier:
                keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:14:3c:64:69:a5:b3:71:d8:ac:93:e5:07:b8:06:a1:97:e1:
         3a:b8:a2:5e:d5:a4:45:f4:cf:55:3e:ad:c4:f7:8c:79:2b:f2:
         16:1c:cb:96:81:af:b1:28:be:b3:83:10:99:c9:48:38:5d:a5:
         dd:12:f6:0a:9e:60:04:93:2f:df:15:11:9f:f8:cf:f7:72:dd:
         72:4e:24:bb:3f:55:ac:fe:63:31:e8:83:73:a3:5e:99:50:3a:
         f4:44:42:44:64:26:b6:f2:cc:e3:f9:39:2a:c8:cf:84:5b:8a:
         08:09:14:52:5d:68:fb:e9:4f:95:99:f9:a6:1e:3b:e8:68:68:
         52:9f:bf:f6:5e:4b:78:75:3a:73:b2:c5:0e:fd:de:f9:8f:eb:
         f9:62:ec:b4:5f:b4:f9:15:85:a8:ae:90:b5:c6:8b:63:73:66:
         f4:9d:fc:71:53:57:1e:98:bb:b6:b7:67:10:8a:bb:89:78:aa:
         9f:d4:2e:20:2a:b6:fd:9c:d1:c9:56:7f:7c:67:2e:65:67:e1:
         7e:1e:c7:ed:b2:f3:6b:fb:a8:bf:7a:2e:5b:32:ee:67:10:cd:
         35:09:f9:14:a4:2b:31:5a:ea:1f:ee:f6:ad:0c:65:a3:2f:a5:
         58:ff:8b:55:f8:c7:db:fc:aa:32:58:85:6f:4a:d2:f7:f5:6c:
         20:d0:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:47:23 2026 by rpki-client