Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File:                     i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier:          Lj/ZJn59GGgMpvyZRv9NJFS76vgOsgctVxwhUfrftXE=
Subject key identifier:   AB:0B:12:BF:22:F4:48:D4:E4:58:D9:65:3F:9E:20:59:11:0A:6E:AD
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer:       /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial:       019F8ED9CAE1C41E1ED5E98F8F40002B8B7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number:          19DC
Signing time:             Thu 23 Jul 2026 12:01:05 +0000
Manifest this update:     Thu 23 Jul 2026 12:01:05 +0000
Manifest next update:     Fri 24 Jul 2026 12:01:05 +0000
Files and hashes:         1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
                          2: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
                          3: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
                          4: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
                          5: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: v6AR7hd64YMmDcnKwztBP3fdVvYvOqAo57XdBIqDzrM=)
                          6: iZdJ0QX0G1vfk69oMHVFQ34W6Zg.asa (hash: oKspxLsKbdfZFXIMEqaNBaecIl0lk1KJLeO2odsQH/4=)
                          7: kZguNbKDxcwx7TTRhlYgy4TEeQ8.roa (hash: gALJSh2LcRXQqCp+dXvtYhynkz9C6FiHkuFaiMFg4sM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:ca:e1:c4:1e:1e:d5:e9:8f:8f:40:00:2b:8b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
        Validity
            Not Before: Jul 23 12:01:05 2026 GMT
            Not After : Jul 24 12:01:05 2026 GMT
        Subject: CN=ab0b12bf22f448d4e458d9653f9e2059110a6ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:7b:56:5c:8d:11:a5:35:cf:f0:10:e7:01:
                    9e:a5:59:38:08:b7:c9:7e:2a:e1:64:77:36:01:3c:
                    f9:66:dc:87:95:ce:c6:d3:ea:b6:61:07:3f:90:50:
                    06:26:bb:a3:72:d9:1f:36:7f:b7:6f:2c:9b:16:9a:
                    04:f6:30:ef:b6:07:29:65:89:68:01:fa:8c:cb:1c:
                    a3:ec:7b:fa:73:0d:96:fc:52:8f:30:48:46:3e:1e:
                    1c:7b:a9:a3:57:81:11:ef:1b:e6:aa:e6:c8:9a:f9:
                    ec:59:fe:5e:ab:70:2e:cf:7e:b8:d0:4e:4c:56:2f:
                    2b:17:fa:4a:a1:f2:a6:76:51:18:7c:11:e9:64:4f:
                    68:7d:83:bb:b5:54:c0:4b:4d:f9:65:13:ca:d2:9b:
                    5d:eb:c6:bc:98:8f:04:f5:78:4f:bf:5f:78:c4:92:
                    2b:ca:5f:d8:81:1a:af:19:48:11:f1:32:b5:48:50:
                    37:74:6e:4b:ae:24:57:0f:fa:36:ef:b3:5a:de:bb:
                    0f:13:22:d3:b5:76:79:bb:2c:09:9a:fb:ef:d1:18:
                    a1:4b:e6:e6:f1:a7:3a:66:b5:c1:93:ae:67:8c:ae:
                    36:1b:46:da:cf:a9:d4:7e:b4:27:c1:a6:91:61:e6:
                    87:5a:b8:88:5c:ea:ee:8f:59:ec:95:36:77:7c:dd:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:12:BF:22:F4:48:D4:E4:58:D9:65:3F:9E:20:59:11:0A:6E:AD
            X509v3 Authority Key Identifier:
                keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:4c:9e:75:e3:03:6b:74:5a:c9:d4:a5:cc:0f:05:f0:07:ed:
         74:fb:36:f9:dd:3b:d3:34:c9:c5:1b:46:52:db:0e:cf:da:3c:
         75:c8:b2:c6:e2:58:1b:de:7a:a3:88:f6:ca:a5:43:a7:ad:89:
         79:b5:8b:06:ea:fc:75:5e:04:22:b5:62:4c:b7:02:a4:3f:05:
         e0:7b:43:49:1b:a1:00:12:2c:c5:46:a2:a7:24:00:e2:71:a9:
         a1:1e:c2:56:a0:41:2c:e1:41:95:7d:1f:fd:ec:5c:52:cb:bd:
         59:37:8c:74:41:54:09:d2:45:4f:01:d7:b4:b3:4c:56:5a:9c:
         2c:a9:8d:d6:e2:c9:3d:64:a7:9f:9f:ea:37:ad:b2:b6:97:2e:
         33:e8:c8:cc:12:b9:23:15:62:e9:0c:c3:a0:7f:9f:06:13:50:
         9a:08:77:d9:93:aa:ba:20:86:03:53:2b:3d:a4:23:5b:d5:5e:
         b0:9a:72:a4:6c:24:80:23:89:7e:88:ec:0e:01:07:ba:45:01:
         51:eb:8c:df:c4:76:f7:ed:6a:27:ea:a5:77:00:14:ae:9f:32:
         12:34:5a:cc:32:20:b6:4e:b3:66:03:b7:36:3d:6a:ff:fd:34:
         80:cd:a0:55:cb:d2:d4:67:56:d0:00:b2:52:27:a6:2a:78:d2:
         97:be:4e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:12 2026 by rpki-client