Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File:                     8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier:          +Q4L5Tl+7R4csPTt3xGHWv/lNXlHP37jVnPUF/mgl4o=
Subject key identifier:   62:83:B6:D7:1C:E9:90:60:AD:0A:44:33:B8:1A:E3:59:47:52:46:C8
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer:       /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial:       019F916D7C1A38C097FD73547010367B862D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 00:01:39 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:39 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:39 +0000
Files and hashes:         1: 2Dp-8EHBxX1D_lV6UsxoVqLNQkQ.roa (hash: /w5oHdONNvnOMtk1REGHeO07sYAW2esYZRyAkdp9jRM=)
                          2: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: wqmJBWC8jpqyS9CEEFkubqe/UB4QXgLXoM+g8EXYRfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:7c:1a:38:c0:97:fd:73:54:70:10:36:7b:86:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
        Validity
            Not Before: Jul 24 00:01:39 2026 GMT
            Not After : Jul 25 00:01:39 2026 GMT
        Subject: CN=6283b6d71ce99060ad0a4433b81ae359475246c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:00:c1:bf:c9:39:54:54:b8:61:08:bd:90:
                    46:da:2e:a3:44:94:c0:44:36:53:2e:4b:32:14:d9:
                    bf:6d:58:96:f0:57:3c:19:9c:76:0f:29:40:3d:1d:
                    a9:2e:3f:99:25:a8:3f:64:78:c0:f1:f5:60:c3:0f:
                    e5:72:57:be:d2:24:14:15:0a:e6:71:18:89:ef:ff:
                    54:8c:7c:62:14:2b:b6:85:0d:06:70:0d:2e:15:61:
                    ac:e8:13:94:4f:2a:9b:25:1c:56:ad:15:28:26:bd:
                    76:cf:21:1b:6a:a7:53:c7:e6:12:07:61:50:8e:8d:
                    1f:a5:3b:eb:fa:c4:ce:0f:77:af:93:33:77:53:43:
                    c9:ce:de:6b:84:36:ad:de:c7:51:f3:a0:ce:15:20:
                    12:95:5d:96:96:a6:1d:c6:45:33:f1:f9:80:53:bc:
                    64:6a:71:49:99:20:26:14:0a:d5:34:13:05:d4:b3:
                    35:29:fe:af:f6:b2:86:92:55:c3:9b:26:9b:0c:58:
                    95:67:32:58:1a:5d:f3:23:d1:b7:fa:7f:cc:63:66:
                    06:65:04:7a:7a:6b:7b:7d:50:2e:4f:a1:57:49:7e:
                    7d:63:e0:63:5e:b6:b7:c3:a6:7d:83:cc:53:32:09:
                    c1:0f:e8:f1:4a:c1:24:f8:2b:fb:0e:49:1d:35:33:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:83:B6:D7:1C:E9:90:60:AD:0A:44:33:B8:1A:E3:59:47:52:46:C8
            X509v3 Authority Key Identifier:
                keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:bc:19:03:71:4d:99:1f:d1:58:7f:31:b1:ef:b3:f6:c4:
         bb:ff:56:86:a5:5f:93:07:7f:4c:c7:b1:b0:23:f1:a8:8f:60:
         1a:e7:f1:1f:08:f5:d1:c7:4f:cf:73:81:de:49:66:5c:64:fa:
         6c:ed:f1:0e:f7:d6:92:dc:9d:67:1b:a0:b9:64:27:6a:15:d0:
         93:92:b4:b6:19:d8:f0:a2:65:8a:db:97:7a:2d:17:6b:e7:0f:
         28:e1:07:71:62:d4:58:60:c5:e5:db:fe:23:a3:a0:46:34:c2:
         9f:28:a1:1d:6a:04:6b:e8:0e:d8:7f:16:81:fa:d2:81:7d:a4:
         af:07:21:e7:62:42:35:1e:e7:02:3d:f5:8e:82:8d:ab:4a:62:
         db:c0:79:6a:f9:42:cd:34:1d:76:88:dc:35:ec:4d:14:69:e6:
         c3:39:b1:b5:2d:b8:5c:3f:2b:dd:ce:64:d1:10:45:0d:a7:13:
         97:19:51:ab:c8:87:58:93:10:58:39:c5:0e:32:51:6a:88:55:
         d8:ec:78:38:ef:2d:eb:77:6b:5c:6a:02:0e:9f:0f:83:22:03:
         56:4b:d1:1a:89:42:b2:b7:fe:d3:fa:5c:89:3c:c9:04:d7:fb:
         fe:bc:bc:fe:65:cc:0d:da:74:81:1c:d9:0a:ac:a9:61:08:5b:
         35:7a:8c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:50 2026 by rpki-client