Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          ooe9TKTC/ts37d4eryQ1TaOra/UkHK7LxaXcxYOeLuc=
Subject key identifier:   C4:42:1A:3A:69:16:16:79:E5:98:5F:3E:38:17:2E:14:AD:AC:B2:E3
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       019F9059EE8ECDCC169754F7151CA03E6C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          165B
Signing time:             Thu 23 Jul 2026 19:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:40 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: /48tNQpC/BO5p8I0v+qKImDvWLWoFon3Eum9utKXqmg=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:ee:8e:cd:cc:16:97:54:f7:15:1c:a0:3e:6c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Jul 23 19:00:40 2026 GMT
            Not After : Jul 24 19:00:40 2026 GMT
        Subject: CN=c4421a3a69161679e5985f3e38172e14adacb2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:4c:82:db:42:6a:b5:84:4c:a0:d4:f5:bf:
                    33:e0:bd:49:43:0e:44:83:6a:d9:2d:3e:88:84:16:
                    ec:f4:bf:76:5a:7d:fe:5a:94:56:e9:bd:d3:43:2f:
                    57:75:d6:10:d6:2b:5a:62:ac:f3:3e:c1:b9:51:45:
                    b7:c5:45:e4:a9:5c:f9:48:14:d9:94:ae:6e:f8:7e:
                    44:78:cf:1d:eb:02:f5:76:20:b5:2c:68:07:28:14:
                    a2:56:45:28:8d:3a:18:db:cd:de:a3:07:3e:e8:4c:
                    2d:da:c5:6f:50:6b:2f:04:60:95:8f:8a:19:11:9c:
                    7a:14:ef:39:43:c5:e7:4f:3a:b2:e4:2a:80:33:d7:
                    d6:e2:22:69:f4:93:64:bb:f1:01:b3:86:db:a4:cf:
                    e1:3a:2c:04:c9:2c:8e:a5:55:28:fb:ea:13:16:16:
                    76:33:03:f7:df:2f:1d:ba:c7:d4:66:4f:00:89:7d:
                    14:fe:52:84:03:ed:0a:7f:1e:65:b7:32:12:cc:b0:
                    2d:94:d8:80:ac:f6:f2:08:b7:73:22:fc:15:2e:9e:
                    fe:40:52:42:4e:ea:b0:15:75:3b:ae:87:27:b9:3e:
                    17:ab:71:ad:3b:ac:9e:d2:87:ef:fe:aa:5f:91:70:
                    82:86:13:ee:e3:92:83:ca:11:90:a7:53:64:8c:d8:
                    6c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:42:1A:3A:69:16:16:79:E5:98:5F:3E:38:17:2E:14:AD:AC:B2:E3
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d3:2e:bb:6c:e7:5d:76:f9:7c:67:92:ad:6d:6d:42:5e:09:
         1e:1e:44:17:fe:c0:33:88:8c:9f:35:88:ad:bf:c6:32:e5:b3:
         7d:ba:43:b3:9c:52:4f:34:3e:77:9b:4d:41:1b:e2:3c:0c:b6:
         1f:df:86:eb:a6:c2:1d:ee:69:72:33:1c:d2:19:50:d6:b7:23:
         0c:ae:98:d8:0f:73:90:38:7f:2e:9e:6a:d0:c3:02:88:6d:42:
         d5:01:00:0d:49:8a:e7:45:2c:89:44:b0:58:50:97:6b:7e:df:
         49:62:c0:90:d7:9c:ae:f3:43:70:be:0c:82:92:91:40:21:74:
         7e:91:dd:5d:4a:83:44:57:63:68:27:dc:e2:d6:37:79:f8:6e:
         03:31:93:14:45:10:3e:2f:14:e2:b3:86:d3:1f:f3:c9:ec:b7:
         33:83:8a:a9:06:36:80:35:c9:0c:34:ef:7d:ab:e1:d0:f3:b7:
         5a:68:6e:3c:0d:54:5b:56:12:c4:7d:03:9d:a4:27:66:d1:d9:
         3f:ad:c0:ec:08:20:62:db:1b:50:ef:c8:1e:c2:3d:a9:ce:0e:
         c8:4a:da:75:82:ab:5c:09:46:47:3a:58:0e:b3:0b:de:8e:22:
         6f:ca:20:ec:f4:a2:e5:9c:ed:43:dd:78:db:f4:2b:8a:94:b3:
         3a:f3:1b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:58:58 2026 by rpki-client