Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
File:                     8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft (raw, json)
Hash identifier:          26yg19Y1mKHOGhQ3XSrW3o/qQD1UPa1D+i+Mf6fyTTU=
Subject key identifier:   F5:CA:F0:42:30:78:BF:2A:E9:BF:D8:15:E0:4E:1B:ED:8D:66:7A:2D
Authority key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Certificate issuer:       /CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Certificate serial:       019F916C5DD6AD0846F2F20EBC4297D56365
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
Manifest number:          177A
Signing time:             Fri 24 Jul 2026 00:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:25 +0000
Files and hashes:         1: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl (hash: Bm3kVK1dgzmM7CkbSPA61HSz6SjX6YGE5iHW70rVVbo=)
                          2: u5KaxC_LjZl4glkpkZdsvGnJ4pk.roa (hash: Go7rnWsx0cmxk8Ezurf4VMcNVol6bQI4xHvGGXPZG0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:5d:d6:ad:08:46:f2:f2:0e:bc:42:97:d5:63:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
        Validity
            Not Before: Jul 24 00:00:25 2026 GMT
            Not After : Jul 25 00:00:25 2026 GMT
        Subject: CN=f5caf0423078bf2ae9bfd815e04e1bed8d667a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c8:ca:7e:80:51:4c:7c:12:07:49:cb:1f:b2:
                    84:41:27:91:fd:48:7f:b0:fc:06:1f:12:e3:2d:24:
                    cc:44:32:46:33:0c:38:f7:11:11:dd:db:84:ab:39:
                    b0:1a:29:3e:e1:5e:5b:c7:76:5a:7d:34:d5:56:44:
                    0e:37:c5:6f:9a:ed:d9:c1:a0:ac:f8:ec:b1:0c:2b:
                    74:81:c5:8a:0c:5b:14:ec:ec:9e:43:9b:21:74:48:
                    14:6f:e8:ad:2d:fd:d1:4b:7e:7d:65:e7:67:06:29:
                    9a:1f:43:b5:85:0e:20:a8:6b:d6:28:30:6a:0d:ff:
                    6d:24:c1:f7:77:6a:e1:64:96:2d:2a:d6:9d:c1:0b:
                    f4:a9:32:63:d5:6f:b6:a6:1c:bc:f3:dd:7c:b1:1f:
                    cd:7e:99:1c:93:aa:41:57:ec:25:56:24:98:b7:69:
                    b6:b9:c8:47:67:91:5d:d4:1f:1b:90:d8:d2:9a:41:
                    25:ec:73:b3:f3:38:b7:1f:2a:03:16:4c:21:d5:2e:
                    e7:9e:2a:03:e1:ec:f4:be:c0:e4:f3:f1:89:f1:eb:
                    ca:d1:c7:b0:a6:87:70:a8:dc:b8:a7:db:7a:cb:de:
                    89:18:dd:65:a8:ab:4b:1e:8a:71:f1:c1:05:49:b9:
                    81:aa:b1:a0:c0:f9:ef:2d:5e:38:eb:da:a7:42:de:
                    0f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:CA:F0:42:30:78:BF:2A:E9:BF:D8:15:E0:4E:1B:ED:8D:66:7A:2D
            X509v3 Authority Key Identifier:
                keyid:F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:09:e5:88:39:fa:a6:63:c2:23:1d:c7:8a:df:de:7e:cd:8c:
         0b:af:7c:57:08:3e:be:bb:f0:00:4f:92:35:a6:75:9e:f0:e0:
         ab:31:7a:bb:33:a0:09:96:b8:91:77:c3:30:79:64:85:c5:07:
         d9:ff:cf:7f:da:16:c2:9a:57:6a:f5:c3:54:02:23:57:74:4d:
         3a:12:36:14:2d:e4:cd:0b:5f:8f:1f:f9:d7:56:ac:7b:ff:98:
         6c:7d:f5:20:9f:2f:1a:07:a5:c7:ee:35:82:f7:2c:d7:6a:0c:
         6b:f6:21:3a:d9:69:d3:07:cd:cb:b3:28:d4:e7:47:7d:b4:6e:
         d0:6d:cc:f8:0c:57:b3:e6:43:94:e7:a5:5c:54:59:62:39:47:
         68:72:93:ca:89:e7:94:3d:0b:58:16:1f:72:c2:56:b8:8c:c7:
         6e:4e:a3:50:4b:8c:33:66:67:51:69:f8:0d:47:37:d2:15:cb:
         8f:57:1f:0d:79:f3:a9:8b:96:a8:bf:92:f5:93:12:82:16:39:
         b9:f7:cb:d4:f5:27:86:3d:dc:a3:0f:54:fa:87:0b:20:9a:c5:
         17:06:62:b7:93:ef:7b:e7:33:da:5e:df:ac:4a:87:d0:7f:a5:
         17:d9:45:6d:0e:39:05:0e:cf:13:c2:ca:5c:0b:24:2c:6b:db:
         f0:04:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:47:23 2026 by rpki-client