Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
File:                     8FeESpdTnPV_g8yXTVju0ofv2as.mft (raw, json)
Hash identifier:          Qat94V7ljcUG4I2UuYYrremtZN5TGtNYJN+pKBOMvYU=
Subject key identifier:   8C:3B:60:F3:72:5E:29:03:00:84:F9:4F:F8:89:7C:22:79:4D:0E:D7
Authority key identifier: F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB
Certificate issuer:       /CN=f057844a97539cf57f83cc974d58eed287efd9ab
Certificate serial:       019F8F7EB97F6E6D269F593C2673E2EA662B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:14 +0000
Files and hashes:         1: 8FeESpdTnPV_g8yXTVju0ofv2as.crl (hash: p41EEp5YArRJu29bN6l2eBGWqwmM+ZZHRsNkKANDBcU=)
                          2: YAe6av1IQX5FoLA2_JIjBhAIgMk.roa (hash: ThkHx60LVftccna25b9+M7mqoqOKfrX7xC9VLS13eM8=)
                          3: pZ9V2IY1voGm3J0lqTj6JXZy-jc.roa (hash: ftUTgUhlmUu/y5OQmNNSk095RdRMaTOBMZx0Ohtho2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:b9:7f:6e:6d:26:9f:59:3c:26:73:e2:ea:66:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f057844a97539cf57f83cc974d58eed287efd9ab
        Validity
            Not Before: Jul 23 15:01:14 2026 GMT
            Not After : Jul 24 15:01:14 2026 GMT
        Subject: CN=8c3b60f3725e29030084f94ff8897c22794d0ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:a7:2f:26:83:b5:a9:b5:0a:c9:bd:b0:6f:
                    dd:f4:59:a8:0f:78:6c:14:12:fe:5c:9b:8f:39:fb:
                    a8:71:35:54:af:81:0b:df:5b:72:a5:4d:66:90:64:
                    72:80:76:85:0f:02:68:39:10:29:d0:29:23:c6:fa:
                    0b:17:0a:60:6a:95:ef:53:d3:ec:75:bf:2f:a5:95:
                    0f:fb:44:14:fa:ac:af:61:a8:de:67:2f:43:c9:df:
                    ee:d2:60:4a:90:38:e1:44:70:2d:39:bd:76:3d:4f:
                    40:f7:53:41:66:60:c7:1e:a4:85:28:7c:14:e4:15:
                    d2:b2:20:1e:85:71:64:e0:4a:51:af:81:36:95:b3:
                    bb:33:f5:94:53:9b:8a:ed:73:2f:4d:78:e7:da:d4:
                    0b:55:23:c7:e3:de:c1:b7:0b:0e:31:22:da:3d:0a:
                    42:b7:8c:ee:c6:66:a9:28:a9:3d:c8:06:9f:bb:35:
                    c2:d5:fd:89:32:e7:f7:9c:00:a8:87:6b:22:40:9d:
                    8c:95:6a:eb:49:57:2d:9a:32:1e:84:c0:72:8a:8b:
                    ca:25:94:7d:b8:f5:1e:9c:ab:63:97:08:81:8b:07:
                    ae:6d:47:b1:89:20:f7:97:b1:ee:f4:72:f6:d7:4b:
                    cd:c8:75:ac:09:46:2e:03:11:d9:06:53:b7:54:93:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:60:F3:72:5E:29:03:00:84:F9:4F:F8:89:7C:22:79:4D:0E:D7
            X509v3 Authority Key Identifier:
                keyid:F0:57:84:4A:97:53:9C:F5:7F:83:CC:97:4D:58:EE:D2:87:EF:D9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FeESpdTnPV_g8yXTVju0ofv2as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/92831e-b0fd-4312-a46b-24a0d82cea9e/1/8FeESpdTnPV_g8yXTVju0ofv2as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:2b:32:46:78:b4:2c:32:db:3a:fe:5f:d0:58:e8:fb:65:04:
         d5:52:40:3b:f5:35:30:b6:d6:c8:83:d3:eb:8b:89:c7:de:04:
         17:77:66:01:04:e8:b9:02:ab:5d:84:67:49:71:73:a1:64:e7:
         e5:f5:41:7f:7e:1f:62:c4:99:f9:49:57:c9:5b:dd:9c:07:8a:
         04:53:1b:07:c6:9d:2d:dc:b9:ef:e2:d2:31:86:42:bb:29:05:
         5c:41:61:86:9f:b7:03:c6:18:49:25:cd:eb:8b:63:b9:cf:6b:
         d7:0e:ab:a3:fa:0a:2d:1a:fc:89:f5:fd:1f:e8:76:f3:c8:2a:
         3a:19:cd:52:29:72:33:e1:27:ac:05:c2:ca:bb:2e:ee:c3:5e:
         29:bb:6e:30:3c:c9:c3:38:0b:9e:2a:51:a5:e1:fb:9f:86:83:
         cf:79:47:80:80:4d:ab:89:7d:a9:23:e3:ac:d1:94:f4:7b:f1:
         17:24:f5:e3:dd:57:8f:53:84:9f:ea:f1:43:e2:10:6f:c9:64:
         3d:f1:df:ff:07:fc:ec:02:50:bd:af:0c:dd:70:10:dd:57:a5:
         49:14:1a:03:95:59:e1:2a:77:55:c4:e9:55:ff:6f:c7:5d:c9:
         1e:7f:dc:00:bb:61:36:80:70:e8:c9:35:97:3e:d7:a4:2c:3f:
         69:a3:54:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfrl/bm0mn1k8JnPi6mYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNTc4NDRhOTc1MzljZjU3ZjgzY2M5NzRkNThlZWQyODdl
ZmQ5YWIwHhcNMjYwNzIzMTUwMTE0WhcNMjYwNzI0MTUwMTE0WjAzMTEwLwYDVQQD
Eyg4YzNiNjBmMzcyNWUyOTAzMDA4NGY5NGZmODg5N2MyMjc5NGQwZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rinLyaDtam1Csm9sG/d9FmoD3hs
FBL+XJuPOfuocTVUr4EL31typU1mkGRygHaFDwJoORAp0CkjxvoLFwpgapXvU9Ps
db8vpZUP+0QU+qyvYajeZy9Dyd/u0mBKkDjhRHAtOb12PU9A91NBZmDHHqSFKHwU
5BXSsiAehXFk4EpRr4E2lbO7M/WUU5uK7XMvTXjn2tQLVSPH497BtwsOMSLaPQpC
t4zuxmapKKk9yAafuzXC1f2JMuf3nACoh2siQJ2MlWrrSVctmjIehMByiovKJZR9
uPUenKtjlwiBiweubUexiSD3l7Hu9HL210vNyHWsCUYuAxHZBlO3VJMMhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw7YPNyXikDAIT5T/iJfCJ5TQ7XMB8GA1UdIwQY
MBaAFPBXhEqXU5z1f4PMl01Y7tKH79mrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmIt
MjRhMGQ4MmNlYTllLzEvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85MjgzMWUtYjBmZC00MzEyLWE0NmItMjRhMGQ4MmNlYTll
LzEvOEZlRVNwZFRuUFZfZzh5WFRWanUwb2Z2MmFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArisyRni0
LDLbOv5f0Fjo+2UE1VJAO/U1MLbWyIPT64uJx94EF3dmAQTouQKrXYRnSXFzoWTn
5fVBf34fYsSZ+UlXyVvdnAeKBFMbB8adLdy57+LSMYZCuykFXEFhhp+3A8YYSSXN
64tjuc9r1w6ro/oKLRr8ifX9H+h288gqOhnNUilyM+EnrAXCyrsu7sNeKbtuMDzJ
wzgLnipRpeH7n4aDz3lHgIBNq4l9qSPjrNGU9HvxFyT1491Xj1OEn+rxQ+IQb8lk
PfHf/wf87AJQva8M3XAQ3VelSRQaA5VZ4Sp3VcTpVf9vx13JHn/cALthNoBw6Mk1
lz7XpCw/aaNUOw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:18 2026 by rpki-client