Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File:                     8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier:          SeKPnC6BqQEhFdVRZJYVoedNUTINR9Wz06AWWmG/NPo=
Subject key identifier:   7B:7B:7D:1F:5B:4B:75:58:22:00:F8:B2:C8:82:CD:6B:26:64:2F:B4
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer:       /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial:       019F92ED6F4B2B648EA1EC3EBC3F324EB009
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 07:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:01 +0000
Files and hashes:         1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: wwrJfNtyPCIicIYrnQewlPz+cvy4NMmqShWOV+X8TJ4=)
                          2: L7z1z3kD8b7F1K7aacc1gzUm6kI.roa (hash: D3CWLsb8k5BIPwmtHzd5EPsN02bvpYKIOpfirvWVx3E=)
                          3: UefnhI4rD4WdnFSP87tCcgYjugY.roa (hash: wX49sflwTEuHFD6MRKkajE1pPkRG+Oqz51HRQlhSsxs=)
                          4: lgrQvjx5MIWGF2Zc_WzTTVLP-v0.roa (hash: weF1SPmq8vuRk/u5oRHyuZvuVh74XYHXLM966wmgglw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:6f:4b:2b:64:8e:a1:ec:3e:bc:3f:32:4e:b0:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
        Validity
            Not Before: Jul 24 07:01:01 2026 GMT
            Not After : Jul 25 07:01:01 2026 GMT
        Subject: CN=7b7b7d1f5b4b75582200f8b2c882cd6b26642fb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:d9:fb:18:de:8b:22:e7:40:3f:96:b3:e3:
                    cc:26:f2:36:24:80:2f:86:f0:d7:6c:1c:bd:2b:aa:
                    7c:6b:77:10:ee:4f:cb:71:52:9d:82:30:a0:c1:38:
                    5c:dc:d6:58:91:51:a9:54:b0:92:5f:dc:cc:f7:7e:
                    1a:97:bc:e8:f0:b7:ef:5e:e7:8e:be:94:2d:1f:52:
                    ac:c7:45:07:e6:23:62:99:dc:11:8d:52:e9:50:28:
                    ff:bc:4d:8c:d4:96:d4:4c:49:76:3f:ad:44:0a:6a:
                    a1:f5:0c:9c:a3:d3:94:3c:4f:bf:ae:0d:96:07:44:
                    a1:5e:9f:eb:0c:5a:7f:01:8c:4e:46:de:0f:88:35:
                    8a:dc:af:b9:df:65:da:3e:fc:9d:00:27:bb:dc:e6:
                    0a:e8:02:aa:4c:3a:5a:74:a9:0b:56:d5:89:c8:8d:
                    98:6e:e5:d9:b5:5f:62:b8:94:49:e5:bb:40:81:87:
                    95:41:59:90:ac:46:3a:20:04:bc:dd:2a:23:c8:71:
                    b5:42:dd:3f:63:f1:71:17:c8:3e:a2:d0:d0:17:d7:
                    46:e1:aa:ac:35:ec:a7:91:2f:6a:70:9a:46:c7:8a:
                    44:c3:e1:4e:03:ed:17:ee:64:54:47:9f:b6:c3:0f:
                    9c:07:da:d9:cd:05:ee:6e:97:45:e2:86:8f:4b:03:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7B:7D:1F:5B:4B:75:58:22:00:F8:B2:C8:82:CD:6B:26:64:2F:B4
            X509v3 Authority Key Identifier:
                keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a7:19:c8:7a:1b:a3:bc:0b:40:94:03:52:a4:78:f2:92:bf:
         32:a9:43:2d:a5:54:41:20:28:54:08:ee:9f:2e:9b:fd:1c:f1:
         32:0a:1c:42:eb:bc:76:8c:e1:ac:88:3b:71:97:75:2a:01:e7:
         a9:60:da:b0:a8:5b:92:9d:8f:e9:eb:32:3b:cf:80:48:4e:f4:
         26:16:be:8b:bb:db:12:d7:70:7b:be:7e:3e:b0:88:9a:39:87:
         b8:da:b3:f1:f4:b1:06:f8:e9:7b:1a:8f:1e:3f:43:42:a7:65:
         f5:9f:4e:09:c8:9c:e1:e7:bc:e0:0c:ca:f2:25:fb:a5:61:25:
         79:7c:e6:15:49:59:88:de:43:e3:90:b1:1a:cb:5a:39:e8:47:
         ad:a6:9c:1f:b2:46:82:94:70:c5:7d:44:d1:7b:50:73:19:ce:
         56:d0:09:76:44:b0:06:ef:7b:67:f3:c2:dc:aa:aa:c9:19:a8:
         8c:f7:ce:89:66:5e:6b:49:98:fa:e1:ca:4c:77:80:0e:f2:c9:
         fb:e7:0f:02:f0:40:59:aa:82:7b:8a:70:c8:26:ec:7a:0c:8a:
         e7:68:3b:95:ab:43:ac:2d:9c:98:d5:dd:60:cd:eb:c1:d8:88:
         77:0f:b8:6e:a2:26:14:04:a0:2d:27:54:f9:67:99:19:ae:75:
         9e:0c:82:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7W9LK2SOoew+vD8yTrAJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZjYzNmZlYzdiNWIyZDE4ZGUzNzk3ZTY5ODRjMDY5NTVl
NzE2ZDcwHhcNMjYwNzI0MDcwMTAxWhcNMjYwNzI1MDcwMTAxWjAzMTEwLwYDVQQD
Eyg3YjdiN2QxZjViNGI3NTU4MjIwMGY4YjJjODgyY2Q2YjI2NjQyZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p7Z+xjeiyLnQD+Ws+PMJvI2JIAv
hvDXbBy9K6p8a3cQ7k/LcVKdgjCgwThc3NZYkVGpVLCSX9zM934al7zo8LfvXueO
vpQtH1Ksx0UH5iNimdwRjVLpUCj/vE2M1JbUTEl2P61ECmqh9Qyco9OUPE+/rg2W
B0ShXp/rDFp/AYxORt4PiDWK3K+532XaPvydACe73OYK6AKqTDpadKkLVtWJyI2Y
buXZtV9iuJRJ5btAgYeVQVmQrEY6IAS83SojyHG1Qt0/Y/FxF8g+otDQF9dG4aqs
NeynkS9qcJpGx4pEw+FOA+0X7mRUR5+2ww+cB9rZzQXubpdF4oaPSwMEfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHt7fR9bS3VYIgD4ssiCzWsmZC+0MB8GA1UdIwQY
MBaAFPD2Nv7HtbLRjeN5fmmEwGlV5xbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDIt
NjQzYzFmZTM4Mzg1LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hMDFhY2QtYTNkZS00ODM5LTlkMDItNjQzYzFmZTM4Mzg1
LzEvOFBZMl9zZTFzdEdONDNsLWFZVEFhVlhuRnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABacZyHob
o7wLQJQDUqR48pK/MqlDLaVUQSAoVAjuny6b/RzxMgocQuu8dozhrIg7cZd1KgHn
qWDasKhbkp2P6esyO8+ASE70Jha+i7vbEtdwe75+PrCImjmHuNqz8fSxBvjpexqP
Hj9DQqdl9Z9OCcic4ee84AzK8iX7pWEleXzmFUlZiN5D45CxGstaOehHraacH7JG
gpRwxX1E0XtQcxnOVtAJdkSwBu97Z/PC3KqqyRmojPfOiWZea0mY+uHKTHeADvLJ
++cPAvBAWaqCe4pwyCbsegyK52g7latDrC2cmNXdYM3rwdiIdw+4bqImFASgLSdU
+WeZGa51ngyCMQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:54 2026 by rpki-client