Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File:                     8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier:          HvxdSMlDHHVuVzh2qdHqZa/3RV0mkVVmvbWilvxdjXY=
Subject key identifier:   2D:5F:0D:36:6A:AF:10:15:70:BF:BE:12:C0:38:0E:BE:55:C5:47:5B
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer:       /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial:       019F905A8C4885E521E33DE78DFC62790795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number:          15BC
Signing time:             Thu 23 Jul 2026 19:01:20 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:20 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:20 +0000
Files and hashes:         1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: lCzMUFm2MywDqBcMhwhzNe73/P6ge5il/Jcj2w/nHR4=)
                          2: Fj143MGHKktmJd-EbkW5Fscgq7Q.roa (hash: qVq1ZDi68rbqJdslxCJ44DoiVXJKtqjpcHKrD37I/Xk=)
                          3: HxHmMC4hn6LUcbe8FZyQ9Bp9E7I.roa (hash: Lh+MTs7zk3xzxtVQ8DETff3QLgsLbSUualTWlhIFivY=)
                          4: WHeuBr41SRHYb97wRA-9N6rZlYY.roa (hash: JKr5DtUCS/MHFFPv5d8SACsCIRv8QZPYpdOpKjP/pqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:8c:48:85:e5:21:e3:3d:e7:8d:fc:62:79:07:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
        Validity
            Not Before: Jul 23 19:01:20 2026 GMT
            Not After : Jul 24 19:01:20 2026 GMT
        Subject: CN=2d5f0d366aaf101570bfbe12c0380ebe55c5475b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:39:ef:7d:0c:c0:44:86:7c:49:43:7e:03:
                    16:85:7c:56:23:0a:ec:bd:6e:46:55:28:f3:f0:4c:
                    8c:ef:ad:41:5a:31:22:34:25:ea:9a:9c:d2:8d:cf:
                    1a:3d:b8:37:a5:5e:60:4b:b8:cf:c0:8f:a0:92:c2:
                    8b:8e:e7:6d:c2:13:b7:77:61:60:37:58:d3:ae:e4:
                    bc:36:ea:57:38:5a:18:b2:f8:78:b4:74:42:ca:33:
                    3a:ca:99:40:dc:69:b0:ff:21:03:d2:6b:11:13:d8:
                    b2:27:49:53:64:33:d5:cc:4d:7e:2f:12:a2:fb:95:
                    16:6e:8f:36:9e:b0:1f:ef:1c:96:88:f2:30:14:f2:
                    5d:be:f0:f5:cd:21:7d:4f:f4:57:c5:cb:fa:47:a2:
                    c0:4f:bc:0d:7e:5a:96:b9:7a:cf:0a:7c:69:b8:53:
                    a5:c4:51:03:ac:10:63:fa:d6:15:86:85:b0:87:2d:
                    1d:a8:ae:52:39:64:21:3e:bf:a0:82:90:20:c0:8c:
                    6c:96:17:72:ae:09:2c:0c:26:6f:fb:76:cf:7a:fa:
                    8d:fc:d8:30:31:6c:76:3b:f6:96:87:b7:6d:e9:ca:
                    30:de:ac:94:44:4f:db:ee:a7:33:64:69:13:29:6c:
                    df:72:b7:84:0e:86:e3:4d:40:38:d3:c5:c6:0b:06:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:0D:36:6A:AF:10:15:70:BF:BE:12:C0:38:0E:BE:55:C5:47:5B
            X509v3 Authority Key Identifier:
                keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cf:c1:c1:28:79:d6:b2:72:e8:e7:49:90:84:db:71:14:1d:
         90:8b:b3:8a:33:ce:44:8b:5a:d0:b5:ed:87:db:85:f7:db:c4:
         52:85:19:65:4f:e2:42:9c:e3:95:22:65:72:74:02:5d:97:cd:
         49:5f:5f:d8:31:0b:54:a1:75:65:00:f9:04:3e:94:4b:2c:10:
         76:23:67:7f:81:d5:b6:7c:59:70:30:2f:36:44:ef:31:85:b5:
         b5:33:26:01:b7:ea:be:73:d7:31:7f:b9:7f:76:11:72:a2:ee:
         3d:6e:d7:aa:fd:34:be:49:aa:87:64:59:12:9e:aa:19:ed:64:
         c7:b7:be:c1:8f:45:8c:f6:88:ec:f4:33:8c:03:b0:0f:d5:0b:
         4e:a1:b7:bb:ad:19:8a:d6:4b:62:1e:69:8a:8d:0b:85:54:77:
         30:9b:60:80:20:bf:9c:ae:fa:c2:1f:47:a0:e1:ff:99:a5:c7:
         fe:28:7e:52:d0:36:33:72:62:81:08:ea:df:d5:7a:cb:76:24:
         e3:bb:f5:e0:ff:62:96:b3:1e:38:e2:30:ae:7e:c5:5f:b9:bc:
         a0:b3:32:a7:73:bf:d8:a1:36:6a:3f:2e:10:17:0b:6b:1e:0a:
         9a:e1:1a:58:98:21:03:ed:1d:07:94:e0:3d:7b:8d:fa:3b:45:
         d7:9f:90:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:32:39 2026 by rpki-client