Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          f8MDO8O55IwFpkQb8l+6NGYtLl+OP5Z5dBNFOLLFoOE=
Subject key identifier:   AF:A8:D2:F0:82:CB:51:27:2A:7E:1E:60:8D:F5:AB:D0:97:65:0B:07
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       019F8FEC2DF71E0088DA19C3F43FCAC9DD9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          07C7
Signing time:             Thu 23 Jul 2026 17:00:47 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:47 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:47 +0000
Files and hashes:         1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
                          2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: qOq/Z8Dto4gTzO5PUYV6bLDRJixYTopiYibZqHHwPN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:2d:f7:1e:00:88:da:19:c3:f4:3f:ca:c9:dd:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: Jul 23 17:00:47 2026 GMT
            Not After : Jul 24 17:00:47 2026 GMT
        Subject: CN=afa8d2f082cb51272a7e1e608df5abd097650b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:fa:36:13:8b:5b:e9:f4:54:bf:e6:93:98:
                    3c:42:d9:83:5c:b8:65:75:41:9e:e3:8c:af:47:53:
                    29:5d:85:0b:66:a5:36:09:5e:39:1e:22:0c:8c:42:
                    c4:dc:95:77:60:7d:db:b1:f6:37:b2:8f:9f:e1:0b:
                    ef:02:03:a7:b4:e6:30:2b:b8:0e:f6:03:6f:05:0c:
                    a9:97:43:ab:ad:ab:cb:b7:96:69:5a:dc:1e:a9:36:
                    7c:56:bb:b0:56:e9:db:1b:d5:17:b2:70:75:db:53:
                    f0:83:4f:fc:7a:ef:3f:3d:be:0d:4e:da:a9:28:16:
                    60:06:c7:ff:82:fb:4e:74:70:2c:c6:d2:c3:99:06:
                    0e:d5:70:8e:92:53:96:04:db:8f:d1:58:64:ce:9d:
                    ef:0d:8b:ee:41:c3:70:77:5b:49:6b:d6:01:4e:7a:
                    30:41:18:94:03:f5:33:ea:2f:e8:a7:3b:7b:2c:a5:
                    c7:61:6a:ff:f4:d5:99:8a:9a:07:29:36:e0:db:f9:
                    7c:a4:7a:d9:ab:c6:fb:72:12:18:6b:10:4f:4e:b8:
                    c8:3e:48:31:09:30:6b:cc:7e:d5:4f:09:dd:b2:3a:
                    18:48:e4:04:63:7b:c2:1d:50:95:ab:a7:82:91:6a:
                    21:7f:71:2d:dc:e0:d0:71:3d:b9:bb:5e:f3:7c:37:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:D2:F0:82:CB:51:27:2A:7E:1E:60:8D:F5:AB:D0:97:65:0B:07
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:a7:0d:bb:a0:da:ad:dc:22:85:98:60:a5:80:d9:bc:37:
         38:a5:cb:3b:42:39:77:9d:5c:fe:6a:5d:ae:e0:95:6e:34:a8:
         e2:14:89:cf:fe:f6:d4:a4:64:b2:95:77:39:c3:5c:b6:8f:30:
         50:18:46:3e:53:fe:27:fd:45:41:4e:a2:2a:09:89:17:af:60:
         7e:03:f5:b1:bc:85:5b:53:47:63:54:15:03:f8:db:2f:8b:1e:
         6c:2b:b8:80:0b:9e:e3:7e:fc:a2:5b:4d:d3:87:65:8d:a0:dc:
         31:80:92:55:1e:a9:5b:bf:85:ed:70:52:5d:7d:e6:65:3e:9d:
         fe:5f:2c:a0:57:6f:53:3f:b5:4a:bb:e1:ff:49:d8:95:4f:04:
         e4:b4:63:6f:00:7a:97:2e:37:fd:c8:ec:eb:b3:f0:ca:81:07:
         82:2e:a0:b9:35:fd:eb:75:03:48:a9:8d:4e:d5:30:91:3d:e4:
         61:f3:97:6f:29:b8:59:75:a9:92:6e:cc:41:d9:2e:0a:47:b8:
         a9:57:03:ab:3e:93:27:48:8d:9b:70:01:da:fb:a2:fb:cc:5e:
         a2:a7:b4:93:e3:93:b1:5b:b8:14:51:68:86:36:f6:77:d9:0e:
         ca:98:19:a7:52:75:36:24:3e:d6:7f:f6:30:4c:95:b3:4d:ee:
         89:bc:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:32:40 2026 by rpki-client