Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
File:                     08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft (raw, json)
Hash identifier:          EDVlcYx72bdeMGkQ1sn2kUv4Qh/XkhL4BOgRrvXM0zM=
Subject key identifier:   48:3F:0D:AA:40:72:A2:44:4A:51:2B:0F:F7:72:21:75:8E:1A:73:C8
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Certificate issuer:       /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial:       019F8FEBBC61FE1D9DB982C9C35F0579F917
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
Manifest number:          12D6
Signing time:             Thu 23 Jul 2026 17:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:18 +0000
Files and hashes:         1: 08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl (hash: rMbKaMBFo/+k7+kBJJKSb5IBJ3iAJIQA3oDy3cyYtJc=)
                          2: 8iiGHlsOJWwsrr4dYEu2DAJmDu4.roa (hash: 8N8stGdhMpNHOzJEakrzgY5qXFCD32clBj0A+s284Zo=)
                          3: AFteCS1Hd7e6qi02RMRsgw9AZFI.roa (hash: gi5cvPOf8jzBgqQP0MjAWXH2Iw3GEPq9YJDLxWTBGA8=)
                          4: Bf1ICiFWHnqDiPMjiau8ZWQ7k-k.roa (hash: YEYPYSN2Ox9vi1nDDFcsvGXIuVBfRDtl1tK03TttRWQ=)
                          5: NYre9NG9YeEOV-9DADYBR1_ANFc.roa (hash: SGio3sReojeOyDGlNC4y1GQcfv+IKwO1tdbB5z6Ax9c=)
                          6: ajeT3sebZ8kJy4R4yO4LNoMCv7U.roa (hash: csuuV2gLozTCG0Y40dpOQI7fvEKfdkpWci0A66Okg3A=)
                          7: ilxsUka29LSmxhagYYgOUwx9G1M.roa (hash: Z+faE599Aw5TvsDGU85PKGJH3ruym0pUbib3gVDAVFE=)
                          8: ur620Y0Jnk61OHeYYoTBq--EZKE.roa (hash: OtNM19zTl3crChLyF+XGQsp+urHf9QrZvH/kX/2ejmE=)
                          9: zvdtmpKU0r789ctjHEiX8csffJk.roa (hash: XTusHS5R6Rka2VjSd91V1+2/jcIhKHh0nvlZOZ8uISo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:bc:61:fe:1d:9d:b9:82:c9:c3:5f:05:79:f9:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
        Validity
            Not Before: Jul 23 17:00:18 2026 GMT
            Not After : Jul 24 17:00:18 2026 GMT
        Subject: CN=483f0daa4072a2444a512b0ff77221758e1a73c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:99:ac:66:b2:ba:a5:3e:5a:b9:9c:d8:ad:
                    f4:ab:9d:ae:54:d9:aa:4d:e8:37:7e:cc:64:e9:09:
                    d0:6e:d9:f0:eb:8a:f5:3f:02:28:1c:14:ed:08:40:
                    09:1c:4d:15:87:f5:b7:d4:89:d5:bf:bc:dc:cd:0d:
                    aa:76:c3:4b:ed:e8:0e:3c:84:81:09:68:92:b1:85:
                    b1:b2:31:1b:0e:a1:18:0a:c7:b5:c8:38:30:70:5a:
                    bc:88:28:8b:74:04:83:01:a5:81:87:42:31:cf:95:
                    98:28:73:61:df:71:23:29:24:f7:40:8f:3f:d3:cc:
                    35:88:27:42:67:ff:67:c1:dd:be:91:09:5a:34:5b:
                    c2:a1:e8:2e:80:ec:42:a7:d5:bc:31:62:a0:bb:6c:
                    5a:7c:db:40:f9:0a:d5:eb:0b:85:df:db:f8:d2:0f:
                    1e:4f:2d:35:26:5d:56:fe:59:75:d8:5f:23:13:38:
                    47:f7:a8:4b:3d:cf:eb:73:89:30:63:1c:5e:bf:23:
                    bc:75:91:13:a1:9d:a8:89:bb:b8:dc:8b:d3:3d:75:
                    5d:58:ed:98:db:84:be:7b:08:bc:ea:ae:ee:2d:67:
                    bb:f5:9a:2e:66:8a:39:cc:06:5f:88:59:af:c4:81:
                    66:f0:d5:c5:0a:3b:a3:be:81:31:b2:af:91:d3:ac:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:3F:0D:AA:40:72:A2:44:4A:51:2B:0F:F7:72:21:75:8E:1A:73:C8
            X509v3 Authority Key Identifier:
                keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0b:48:a6:84:cb:e7:7b:ec:1e:11:8a:4d:14:02:0f:d5:d4:
         3d:c8:8a:64:46:17:f8:84:c2:59:0c:05:6e:a3:15:a8:a0:62:
         e2:ed:9d:d8:6a:fd:11:f7:d6:96:8b:59:f5:a6:e9:ef:45:55:
         94:43:af:c4:e0:e8:20:44:df:6d:d7:0a:2d:b5:33:3d:61:2a:
         00:22:4f:1b:b4:19:95:80:48:28:84:95:23:c7:f2:59:cc:03:
         9a:4c:04:fd:db:c4:f7:5f:e6:89:f7:91:f6:03:e5:ad:52:8f:
         23:59:80:ca:17:7f:35:e9:94:89:58:86:19:8f:19:80:8b:69:
         a4:34:45:88:cc:e3:1b:dd:be:41:89:8d:e0:45:1e:d5:0d:ea:
         b8:15:c6:a5:be:ba:68:4f:32:3c:ab:e8:1e:b8:a6:64:aa:cb:
         28:0b:33:4c:36:c9:69:68:5f:fc:0e:6a:50:80:42:0d:b3:37:
         ce:26:2f:c8:f0:85:ee:8c:f3:d0:b5:fd:c6:7d:0f:9a:01:4b:
         79:d9:01:d4:b2:d3:6c:39:f3:cf:a9:9b:fa:ec:b5:2d:a3:6c:
         7f:9f:d6:2a:33:bc:7f:a4:b2:36:e4:c1:c7:e6:80:8a:23:76:
         d4:cd:a8:58:01:52:c2:6c:be:b4:d7:66:59:14:af:02:c2:10:
         98:a2:ac:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:58 2026 by rpki-client