Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
File:                     S8hY5QhWNUaEpdBKPsw1klgNVI0.mft (raw, json)
Hash identifier:          cquR5m0P5vz07EeeS/jm+cU7QLOAq1WZRPj27ELQ4pQ=
Subject key identifier:   01:1D:5B:A1:FB:B5:80:F7:C8:9F:8D:E5:BB:2D:97:C6:65:6B:31:26
Authority key identifier: 4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D
Certificate issuer:       /CN=4bc858e50856354684a5d04a3ecc3592580d548d
Certificate serial:       019F96251BFD1018EE3BC29785F4BC433DCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
Manifest number:          0C87
Signing time:             Fri 24 Jul 2026 22:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:41 +0000
Files and hashes:         1: S8hY5QhWNUaEpdBKPsw1klgNVI0.crl (hash: 203UQA1h8UZOOGgeNwl0RxXnAX6u2bTD//kYYVCYAKc=)
                          2: hOCqHr0-rwjOn6wU8z8C-ggKXAo.roa (hash: aczilg5expuAqkln7fFu+xj4eV4HRQvyQA+wDQF1/60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:25:1b:fd:10:18:ee:3b:c2:97:85:f4:bc:43:3d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bc858e50856354684a5d04a3ecc3592580d548d
        Validity
            Not Before: Jul 24 22:00:41 2026 GMT
            Not After : Jul 25 22:00:41 2026 GMT
        Subject: CN=011d5ba1fbb580f7c89f8de5bb2d97c6656b3126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:92:cd:49:c0:fd:34:60:4a:79:bc:3f:f5:fb:
                    c4:cc:8c:e9:1e:4a:bd:7a:d0:89:a5:26:97:9e:a7:
                    5a:8e:ee:fa:5f:3f:c1:4d:45:b4:e6:36:de:95:b0:
                    35:eb:1f:96:fc:b3:21:20:05:dd:ba:54:a4:77:bd:
                    98:30:3b:5c:cf:49:b0:ec:1c:a2:56:57:d9:5b:f5:
                    a9:eb:3d:ea:bb:3b:19:86:2b:ef:63:6e:c7:0b:09:
                    d5:23:51:6e:89:40:22:8b:ca:73:85:a9:2e:f5:b3:
                    0a:30:fe:c0:9b:1c:26:3f:e5:59:a1:20:33:ac:7e:
                    f6:a0:fb:38:2e:e0:ab:8e:b7:d6:a1:17:75:d9:30:
                    3a:20:67:1f:d3:fb:13:98:9d:5f:69:0c:fc:bb:56:
                    63:9a:58:c6:e7:8e:7b:27:0d:46:fb:5c:35:60:71:
                    0b:07:f3:33:7d:ec:9a:8a:2d:67:1a:81:cf:04:2c:
                    1d:23:e1:45:4b:18:c8:81:f3:de:36:ba:76:25:a9:
                    01:f2:f6:25:a5:53:b2:92:69:91:fb:bc:e5:34:e0:
                    00:73:c8:66:ba:a8:95:c8:86:29:5b:88:d5:16:2f:
                    10:a8:bf:99:4d:9e:7d:41:b3:30:d7:b9:23:56:f0:
                    1d:d6:fe:78:3f:9d:8f:a9:5a:e8:98:a0:2d:2c:52:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1D:5B:A1:FB:B5:80:F7:C8:9F:8D:E5:BB:2D:97:C6:65:6B:31:26
            X509v3 Authority Key Identifier:
                keyid:4B:C8:58:E5:08:56:35:46:84:A5:D0:4A:3E:CC:35:92:58:0D:54:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8hY5QhWNUaEpdBKPsw1klgNVI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/267966-f039-4174-810d-3f4ef81a2e53/1/S8hY5QhWNUaEpdBKPsw1klgNVI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b6:d2:e8:9b:6e:2e:e8:65:59:08:59:74:85:9a:bf:61:46:
         aa:d1:60:a5:59:81:c8:82:bb:88:a8:76:88:52:3c:71:02:27:
         ef:37:89:fb:ee:78:ae:72:9e:10:f4:9c:54:e5:90:37:35:ef:
         2b:5b:0a:ae:56:06:3c:e2:be:53:24:9d:96:4f:3d:b4:83:6a:
         c4:6a:54:ca:2f:33:11:7e:02:96:c0:55:94:26:08:3d:ce:48:
         33:af:b3:ac:45:d4:c5:03:10:35:ff:ca:88:aa:7f:b7:e1:e8:
         5e:2a:df:e6:e9:ab:5e:e2:19:52:84:cd:1c:3b:a0:67:77:3e:
         46:3a:79:08:09:20:8d:ed:33:c4:bc:b8:2e:ae:8e:f3:13:6e:
         c9:00:51:23:a1:d7:ef:3b:78:f4:78:7c:a9:cf:72:97:8e:cb:
         64:8e:b4:97:2e:62:ce:d5:b1:44:b6:46:a8:b3:70:60:c1:cf:
         1d:3b:fc:ba:5d:7c:5e:54:22:9d:37:04:b2:1e:c2:70:3f:22:
         6e:82:63:11:9e:a8:9e:cb:7e:85:00:4c:aa:ef:8e:5d:8d:a0:
         d1:d1:02:a3:c0:07:5e:b4:bd:6e:9f:2b:89:02:38:33:51:9e:
         2e:04:a7:6e:94:0a:20:1c:51:4e:10:f7:a4:d7:76:6c:2d:21:
         6e:e6:db:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:27:21 2026 by rpki-client