Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          QxocnPB0CZclhzlDMDe/CT7YQn5UlPPnrEgRfhvmXPs=
Subject key identifier:   A5:6D:0D:AF:DC:99:14:91:CB:0E:60:1D:56:E4:97:BA:B3:D0:6C:33
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       019F905A4283B4AA473CA43374EFDFD3CD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          0636
Signing time:             Thu 23 Jul 2026 19:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:02 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: m5o99xPzMd174sHul3JxQFGhnj3RDB4i1U2s1ZYU46Y=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:42:83:b4:aa:47:3c:a4:33:74:ef:df:d3:cd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Jul 23 19:01:02 2026 GMT
            Not After : Jul 24 19:01:02 2026 GMT
        Subject: CN=a56d0dafdc991491cb0e601d56e497bab3d06c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:6c:ae:55:00:cb:3d:90:96:73:2f:5c:f6:
                    5f:24:50:ab:f9:6a:ba:7b:d0:c2:07:e9:f2:87:b1:
                    86:f8:d0:16:c6:12:58:41:ee:8c:2e:00:98:42:e3:
                    bb:25:e9:58:aa:30:89:eb:db:39:d1:98:1a:4b:ba:
                    f7:29:03:2a:34:6f:1f:94:9b:f1:e4:a7:d0:12:be:
                    71:ab:80:6c:51:7b:ba:e3:da:34:aa:27:66:84:b2:
                    0a:bb:02:4d:17:e2:40:f8:e6:56:f5:25:e8:4d:4d:
                    72:b4:f3:e6:54:56:0f:4d:f9:51:f0:dd:d0:04:e4:
                    20:de:25:8a:1a:27:6c:03:82:e1:bb:75:9d:5c:01:
                    18:d0:72:d8:9d:e9:c7:37:7a:01:08:9c:f3:50:bc:
                    91:d3:0e:21:15:01:3b:aa:43:03:44:75:3e:90:e6:
                    61:c4:8f:40:f3:36:eb:2d:d5:de:cc:f9:76:0c:6e:
                    64:34:06:cd:d8:56:76:d9:3a:84:8d:34:3f:e6:64:
                    a1:cb:7b:5f:a1:c3:e6:44:ad:26:d4:52:2f:1d:9c:
                    5d:bb:b1:69:61:bc:a9:47:97:5b:93:2c:68:85:bf:
                    0c:1c:fc:bf:67:af:50:ba:b1:d9:4c:1f:cf:e4:d4:
                    92:77:ec:1b:92:4f:22:b4:c8:97:4e:77:c5:ba:1f:
                    57:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6D:0D:AF:DC:99:14:91:CB:0E:60:1D:56:E4:97:BA:B3:D0:6C:33
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:7f:46:87:63:88:0a:d7:a4:40:90:0b:91:01:f0:f4:48:37:
         c1:50:39:e9:6d:78:11:c9:e8:33:4c:73:b5:b4:0a:41:ff:28:
         af:e0:91:be:d8:27:f4:7e:16:b5:12:ce:55:ad:15:4d:13:26:
         8c:f5:ce:d7:4c:7e:d3:e9:7a:e2:7a:8a:40:21:6f:75:5e:61:
         f6:1e:08:90:31:f4:30:45:cb:2d:e1:83:46:e0:62:f6:f5:17:
         8e:a4:18:e6:6c:95:1b:c5:02:dc:ab:47:1d:e0:2f:63:b4:6b:
         9e:0d:17:b7:2b:b2:3d:23:2f:3f:ae:7d:ac:c1:dd:7a:d9:2e:
         27:72:36:f1:73:ed:07:07:73:54:0b:58:23:2d:37:de:1c:cb:
         dd:bb:f8:7e:ca:b2:ae:86:95:a6:70:0b:6b:36:59:45:cb:76:
         43:e0:a9:7b:84:31:38:c9:ba:a0:4e:c3:88:a5:49:56:70:2f:
         ff:b1:27:e6:f9:67:c2:cb:4c:74:0b:ca:27:1e:54:47:b0:ac:
         2a:0e:a4:49:b0:27:63:1b:59:41:60:1b:2c:2d:fd:aa:60:c7:
         cc:c2:28:06:0d:b2:f2:29:3c:6d:cd:b2:a9:b3:16:33:8b:9d:
         ce:81:0d:b9:81:0d:1e:16:50:60:a7:d9:98:d6:2a:bc:ff:0c:
         67:0e:89:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:48:30 2026 by rpki-client