Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
File:                     EX-dVYJrQkht_ITTXBpjpc6HUHw.mft (raw, json)
Hash identifier:          wO2uYaI3lRtahXHpv8rxPMFPAqKxR8/HQT1w7QazkIg=
Subject key identifier:   2A:1C:A2:3A:3E:D6:03:E1:9E:56:45:D0:68:CF:F9:9C:EB:E0:C1:72
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Certificate issuer:       /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial:       019F90FF633716257CEC9C9E71828829C31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
Manifest number:          0C8A
Signing time:             Thu 23 Jul 2026 22:01:23 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:23 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:23 +0000
Files and hashes:         1: 1dHlyfa-zj_4XJRf53IIawmZB2g.roa (hash: 7Gsd4l0mgerJ9lacPTBOjZNbYITadUNBw4vyVFstkgY=)
                          2: 4lXhdtO-8jtqiWXl5xe-u2WhA1w.roa (hash: fL5awUnSOk/QoGPF4GHt+L9d0fyEYoOrVsP3Ctb1ZMM=)
                          3: 89u9unREIWHzHaE6spWcBTF1lJo.roa (hash: 8xhdQpe85q4z4HC4KzOm7n7h5SGt2CLfQ4BpETrnUNI=)
                          4: A7H1tgL8F0JNM-wT3DtOlJr42CQ.roa (hash: +lATpBJei82aRdaABJ/OsdQoCTQWkmUoS+oR2diqRMc=)
                          5: EX-dVYJrQkht_ITTXBpjpc6HUHw.crl (hash: RPz2w8BF+SPv7ghqPx35HFQ6wgOzR3QLm4ooWuSL2GY=)
                          6: ErsrCwdDScf57G3hDhna67MJPUw.roa (hash: 72mtPCX+KOfzMtWG3pvpgIptwDcdu1zlnoRoI/7dlf8=)
                          7: aNRzxkkEVZdbPxBdyV26hwFZ67o.roa (hash: 6j268G3+t6+8A9cd0OyjRSmrucclZF9lasSoOH1XzhU=)
                          8: iYs6otweT346LHVOYHzhPWvIhMs.roa (hash: zrCOc/ookzjTFAmPkuf91TVAeL6hEkpEfk5tUgwqn4c=)
                          9: lp7TuPVRF-mPwwrD06P2UcgTS9Y.roa (hash: thXqVKJCv0dwyR4fySHBU+41cxVjEfkkhPGQskSjzgY=)
                          10: n8I8ZajfLynBL8q5AYFlpnwrE94.roa (hash: uTv+A652cRdlBfX8QK5YnMVpGclO8HSAfxLw9WkkXIY=)
                          11: rJwkYVnH8Yu6a1OrbAUUM5uV5fM.roa (hash: X9DQQvspORnAB5bGQARX+ElPIyKFjk6Aj8xdeJW2w6E=)
                          12: v_z54US9Vmz52vw7_c20ggObm9I.roa (hash: tUdF74bDSAZc0TUS9t0KZ7bOC/c/n0wIxweAiJZQRqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:63:37:16:25:7c:ec:9c:9e:71:82:88:29:c3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
        Validity
            Not Before: Jul 23 22:01:23 2026 GMT
            Not After : Jul 24 22:01:23 2026 GMT
        Subject: CN=2a1ca23a3ed603e19e5645d068cff99cebe0c172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:48:8f:c7:0c:42:70:f6:5a:eb:97:92:b5:
                    30:28:7f:39:80:71:1e:ef:59:67:c9:eb:ee:35:d8:
                    ef:8d:7d:f0:a2:0c:33:b8:8a:80:94:02:fc:9d:8f:
                    fc:4d:6f:e4:89:61:76:6e:68:8a:54:d7:65:da:e6:
                    33:f1:5a:e9:97:68:de:2f:5d:27:f2:73:f9:00:a1:
                    b4:33:5b:46:73:62:4a:ba:3d:46:22:d3:72:75:be:
                    34:e1:f8:7b:75:b8:4c:42:2e:a1:aa:de:8e:f8:8f:
                    f4:1a:8e:6a:4b:81:9d:38:bd:c3:17:10:2f:b8:5e:
                    35:b6:f3:74:be:ed:52:9a:41:9a:29:d8:7f:cf:55:
                    71:2f:52:0e:83:80:f2:e4:bc:31:b5:84:31:a9:27:
                    93:8c:84:e0:b0:eb:95:46:f8:ff:2b:d4:a3:94:07:
                    30:67:62:07:e9:a6:c5:d3:d8:40:f2:ad:3a:07:eb:
                    a3:4c:8d:96:ac:01:f0:0a:62:f3:72:d0:a3:00:e8:
                    df:e9:e9:20:3c:6b:df:22:fe:f7:34:e6:99:07:54:
                    e4:36:bf:dd:a7:05:03:8e:11:e3:7f:ca:6a:ab:d0:
                    e2:82:42:e1:85:a7:3a:cc:3e:c0:41:7a:b4:ab:78:
                    9c:75:40:b4:3e:5a:b0:f6:12:2c:66:bd:1a:39:5a:
                    fe:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1C:A2:3A:3E:D6:03:E1:9E:56:45:D0:68:CF:F9:9C:EB:E0:C1:72
            X509v3 Authority Key Identifier:
                keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:2f:54:49:7b:03:41:57:d2:da:6a:c7:40:ca:79:4c:5c:d1:
         9e:5d:d6:79:04:00:43:c6:42:91:6a:d2:00:03:b1:29:ec:f4:
         f6:44:bb:6f:85:95:93:fa:9d:ac:06:4e:9d:f7:4a:48:bf:ec:
         d9:d2:1e:8f:5a:66:8b:e4:65:b4:06:a7:c6:6e:15:d6:8a:be:
         58:6c:cb:8c:df:95:c9:27:fb:11:b1:99:5c:ea:42:93:17:c4:
         61:eb:6f:f4:50:08:5b:cb:41:d1:6a:03:7a:62:5e:65:d9:85:
         0a:03:9f:20:b1:d8:7f:a2:c2:f2:1a:d1:01:eb:22:c4:2f:0a:
         5e:4c:2b:21:d1:2e:50:3c:14:7f:a2:9a:49:d7:34:9f:dc:1b:
         36:e0:0c:54:17:0f:01:02:47:53:63:76:d2:2a:0e:a7:5f:01:
         80:fb:33:44:01:2b:8a:a5:ce:1f:87:8e:aa:f1:59:ee:e2:10:
         bb:9c:1a:a1:e1:2c:9b:96:14:21:74:cc:63:35:0e:c7:67:a5:
         70:a1:75:c5:19:e2:b5:87:81:ce:ca:4d:f7:cb:de:a5:93:34:
         88:d9:86:a8:76:63:8b:4a:18:7a:98:b8:23:bd:f6:16:23:46:
         6e:93:e2:d7:20:3f:97:5f:71:0e:6d:e8:ae:ff:da:d7:a0:40:
         9b:25:84:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:37:26 2026 by rpki-client