Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          8EFAmn/LbKk8slhtFmptNS6VpwZuGSzgfYPnSZ6NsFc=
Subject key identifier:   04:DD:B2:5A:86:3D:3C:7A:DD:E4:B8:63:63:48:A6:41:39:6E:B7:9D
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       019F8F46E5DA30CBAB6E770F654985ECA4EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          19D8
Signing time:             Thu 23 Jul 2026 14:00:15 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:15 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:15 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: MEIR6c+S2o85itBO1eB8EVUJucTo012d9Wn7JYhO91k=)
                          2: O39MJv57TWbmh-043GG_Y3SPcR0.roa (hash: 8nJD+DxVo3QJVLDsiX2c2YfhjphmaMQZAM0s+wFgUgA=)
                          3: OJRfagybnKNPJgB2VgQCHXK6_wA.roa (hash: +CkaUNxuBjvbD77nG/V3XHJG2xGpZ2YKXMRrO/6Sytc=)
                          4: ZJtFdEDxmsbcX4jDsw2u8r-Xj7k.asa (hash: cTM4PiZVFZLUAQhA+MhDIodHuslGKdYGZeWEgzK7nsA=)
                          5: ihmrebXRZJfViRX4wxqlQD4yY5w.roa (hash: zbtiR4hVHidDupnjoUs6IoiKzo0tQZSkjWxtKWEtK+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:e5:da:30:cb:ab:6e:77:0f:65:49:85:ec:a4:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Jul 23 14:00:15 2026 GMT
            Not After : Jul 24 14:00:15 2026 GMT
        Subject: CN=04ddb25a863d3c7adde4b8636348a641396eb79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:25:58:73:ad:7f:8d:f4:c0:a1:a8:2d:5a:
                    a8:a1:af:8a:f0:90:de:69:0b:65:57:e2:32:45:c5:
                    2e:24:f6:e6:5f:d1:98:1e:dd:1a:1b:9b:49:44:96:
                    53:1b:e2:b7:7f:f1:02:40:b9:39:e6:cb:4a:58:d8:
                    db:cd:e8:27:7d:c9:d3:f7:51:87:7a:55:47:ee:bb:
                    07:3d:ec:38:a6:4a:ed:7e:1b:e9:e2:d8:3e:7e:f0:
                    ec:a8:3a:4d:99:88:71:01:e6:f6:0d:1b:c1:26:98:
                    62:7c:b7:96:fb:4a:61:f8:de:32:9b:8c:45:a5:69:
                    45:a0:25:40:ca:ed:14:d1:ee:ec:2d:80:01:1e:4d:
                    07:f8:af:0b:bd:c1:a2:eb:bb:3d:02:ff:5b:d3:f8:
                    78:07:d2:1a:b2:9a:82:88:f3:be:58:ca:60:d1:5c:
                    36:88:2e:52:e6:b7:1e:ae:bd:4e:59:b6:9d:26:c9:
                    44:3e:fe:48:bd:f2:14:56:c3:78:d1:d5:31:cf:91:
                    68:8b:a8:f4:cd:03:f1:28:da:e3:0f:33:72:58:56:
                    b6:13:24:a1:c2:b6:7c:e7:5d:e3:42:00:ae:9d:f7:
                    c9:54:cc:ad:42:a5:22:3e:a9:3e:4e:59:f8:8b:9c:
                    4a:2b:8f:b1:8d:2f:83:12:05:3b:2d:6c:7a:35:f8:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:B2:5A:86:3D:3C:7A:DD:E4:B8:63:63:48:A6:41:39:6E:B7:9D
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:76:e0:94:3b:70:19:8f:1b:e3:d8:e8:8f:92:65:bd:1c:35:
         3e:99:41:dd:a4:22:fb:41:1f:09:2a:ee:77:2b:9d:26:e1:c5:
         6d:5b:6e:76:b6:8d:19:a8:8b:bc:8f:46:d1:0f:98:5c:6a:de:
         e2:1a:e7:1e:93:9c:d9:62:35:08:ef:5e:fa:e9:95:fb:f8:dc:
         40:6a:43:73:17:fd:5c:d5:6f:b3:52:cb:4b:db:56:9f:83:49:
         21:c4:d9:ff:d4:61:90:60:ea:15:d2:4e:8b:0c:c3:9f:3c:5a:
         ba:55:c1:43:01:b0:73:04:98:4c:61:b9:89:71:4a:06:80:3c:
         c2:e1:81:8b:97:c1:c9:a1:1d:85:c8:37:07:15:2d:ee:88:01:
         93:0f:1b:d3:80:0f:16:63:fb:98:b0:70:c5:98:15:a1:fe:9a:
         e5:14:ee:b1:7b:6a:f6:07:20:ca:08:19:b7:37:67:8e:60:f5:
         e2:00:7b:11:23:ad:9b:77:a3:01:e2:8d:96:2c:16:84:1a:82:
         36:31:a7:7c:6f:6c:20:d3:be:f8:de:bd:c4:ed:eb:eb:e8:78:
         50:21:74:14:66:12:6e:05:0e:f0:62:f3:95:49:50:fe:c6:8d:
         d8:f8:65:c1:d9:2d:44:39:fe:95:d3:0d:0e:3a:d3:4f:39:d0:
         2c:9a:b0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:39 2026 by rpki-client