Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File:                     8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier:          hZFbvWDH+PbWoZawK12PEEP+KJndzCrZ5nGhKpIG/8Q=
Subject key identifier:   47:B5:C0:F2:1C:73:4B:B0:CB:D7:02:20:7C:FA:47:B1:5D:B7:A2:FF
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer:       /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial:       019F909117F386F196D6AAD0947535623D3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number:          0B45
Signing time:             Thu 23 Jul 2026 20:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:55 +0000
Files and hashes:         1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 7s6qSUvI3PngZzT+ZZvN/JDh4RO2ozOFzTWsEBTw0uY=)
                          2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:17:f3:86:f1:96:d6:aa:d0:94:75:35:62:3d:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
        Validity
            Not Before: Jul 23 20:00:55 2026 GMT
            Not After : Jul 24 20:00:55 2026 GMT
        Subject: CN=47b5c0f21c734bb0cbd702207cfa47b15db7a2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:09:1c:cd:8f:82:84:5c:33:7b:74:1e:d0:a0:
                    7f:08:9a:74:de:bd:15:ef:79:f3:47:05:73:08:f7:
                    02:5b:0a:09:f8:6e:b1:21:e9:c3:05:ed:51:e5:f1:
                    26:32:5b:e8:dd:05:87:6d:ff:63:1e:55:48:ac:a9:
                    b4:01:b6:9e:3c:03:47:c1:36:f2:33:60:e8:90:91:
                    eb:7d:73:d4:48:e7:8b:a5:15:16:45:20:36:d9:8f:
                    3a:fb:81:14:82:f3:3d:12:5e:48:d6:3e:f1:58:9d:
                    9f:d1:22:2c:0a:f5:9d:86:2a:36:0b:74:80:70:b4:
                    27:11:e6:db:97:1e:01:b6:08:52:b6:98:0a:f8:26:
                    5a:f2:75:7f:ef:8a:4d:dd:93:4e:25:d2:5f:39:e0:
                    5b:0b:a7:70:34:97:ca:33:a4:02:f0:c4:00:90:58:
                    bd:aa:f5:b3:a7:38:2b:01:d3:b6:70:00:71:ae:e1:
                    66:7c:22:7c:ce:2d:21:56:a6:e5:c5:3d:a5:e9:fc:
                    fa:d1:11:cf:07:89:80:a7:f1:85:59:64:91:95:2f:
                    e8:1c:d5:e1:d5:68:36:6c:b8:3c:56:8b:09:5a:30:
                    b2:d2:6d:7a:e3:07:54:60:c8:c2:6f:4d:e3:20:99:
                    9e:a5:1f:a0:69:c0:fb:e5:cd:63:ad:9b:5e:91:42:
                    54:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B5:C0:F2:1C:73:4B:B0:CB:D7:02:20:7C:FA:47:B1:5D:B7:A2:FF
            X509v3 Authority Key Identifier:
                keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:ed:24:36:f3:ac:49:15:d8:46:ee:fd:1d:2c:ee:ab:a3:
         af:2e:19:dd:bf:7f:a6:c1:20:bf:4d:43:cd:84:fe:19:7b:11:
         51:8e:7c:87:80:c6:58:36:4f:f9:4f:d6:14:1b:7c:bf:32:07:
         e7:49:69:d8:a1:65:d7:72:d0:94:87:99:ac:0d:b1:c1:c8:85:
         8a:1c:a5:88:5c:94:22:2b:33:6f:38:28:43:0f:ce:ef:cd:a2:
         a9:26:fe:a9:df:4d:47:2b:71:6a:cc:52:ab:6a:ef:3c:bc:13:
         1e:0d:c7:a5:25:0f:06:b5:f5:9e:f9:de:c8:88:42:5f:d4:f2:
         dc:b3:9f:22:e8:70:6f:e0:18:28:61:05:88:14:6f:d5:49:92:
         58:6d:69:c6:c7:73:49:95:84:aa:80:c2:2e:ef:9f:f7:7a:8d:
         5d:c3:c1:5b:c9:a2:73:a1:d5:f1:fe:14:38:a9:02:34:96:67:
         9e:c4:dc:e4:47:28:3c:5a:9c:d0:8c:48:e3:3b:6d:28:da:a9:
         af:39:2f:71:6e:d5:fe:1d:31:d6:d4:86:f6:e0:a7:b3:b6:f4:
         cb:10:5b:a0:6e:b7:0b:85:b3:a2:70:95:34:31:0f:ab:f4:c8:
         b2:f3:f4:57:4b:d4:c4:78:dd:87:5e:09:bf:25:d6:8f:f5:83:
         05:6a:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:07 2026 by rpki-client