Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File:                     8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier:          e6SUtt4ytnEnNlqZoXeTEA2l/MiV5LSDHYloCAStvGg=
Subject key identifier:   0E:D3:F2:16:BF:94:80:12:50:94:3E:76:47:05:31:0F:CB:35:F6:46
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer:       /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial:       019F92ECD043A1293837EFB8951A7BEFFB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number:          0AC8
Signing time:             Fri 24 Jul 2026 07:00:21 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:21 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:21 +0000
Files and hashes:         1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: VGoPwTvmsH+FUUUPm/4g3mVm9DWZ1XSdMscTkzlhSzs=)
                          2: GueQ_mhDztm052O4uyOCzydd4Hs.roa (hash: epijumWayC3hiz/5d4RYWJuCrfwASsOYBSEL2afKyYw=)
                          3: UEtK2s9ZvqqGCPFs3MJ1YFHeSL0.roa (hash: xgK5dHExfmkfjOi2PqzjV2F80ioIPm+SIscsQO2bVck=)
                          4: o8bBYWpde5zB25G3op0chPWF1KA.roa (hash: 0RPyFNyYu7Qe34unEDC/iTRz2G6+VT+jFUVRlVn3fYw=)
                          5: wQOSAw7jJ1TAs5XBH4hj3XxrGvM.roa (hash: rw2xIPWw6m4cXi1grWMT/sHatYGUNfGWHacbMATZykM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:d0:43:a1:29:38:37:ef:b8:95:1a:7b:ef:fb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
        Validity
            Not Before: Jul 24 07:00:21 2026 GMT
            Not After : Jul 25 07:00:21 2026 GMT
        Subject: CN=0ed3f216bf94801250943e764705310fcb35f646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:7b:e4:29:28:fd:45:39:47:c1:c5:f8:ff:
                    27:20:2c:ea:94:26:f1:09:74:2e:72:f2:0c:e2:ed:
                    c4:3f:19:39:cb:b5:3a:36:5b:d4:44:2e:52:b2:41:
                    a2:02:1f:65:f2:e2:49:10:09:f0:b7:85:05:f8:c8:
                    9a:f0:9c:fe:32:dc:31:c2:ff:ac:5b:01:f0:1a:dc:
                    ab:82:4b:c0:a9:87:38:b9:37:eb:c8:2b:94:d0:0c:
                    67:be:45:ca:27:1d:36:5c:90:0c:ae:d5:68:d9:23:
                    d8:b9:df:00:89:62:ab:33:69:93:05:bd:46:b9:5c:
                    72:7f:89:c0:7f:66:d1:27:1b:ad:bd:8f:d8:49:17:
                    77:e9:5b:12:ae:1f:5f:1c:41:55:75:22:ef:4c:da:
                    de:8e:84:22:b6:d7:b0:38:9f:89:9e:33:2b:df:fa:
                    de:34:70:f1:7f:d7:f4:86:42:e7:e4:85:a2:cc:20:
                    1c:af:b7:a6:d9:e6:69:6a:ba:93:ce:db:82:94:fd:
                    55:39:b0:0b:b0:b0:45:d7:ba:de:f5:f8:95:68:91:
                    8b:69:c1:0f:61:be:04:06:e9:f9:87:05:7e:98:fd:
                    38:23:7a:50:36:f7:27:f7:a2:e3:93:cd:d6:5a:80:
                    df:d6:e7:ae:91:9d:be:69:d1:45:f9:8f:2e:db:30:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D3:F2:16:BF:94:80:12:50:94:3E:76:47:05:31:0F:CB:35:F6:46
            X509v3 Authority Key Identifier:
                keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fd:18:1c:f0:9d:08:84:a7:b7:5b:01:d2:4e:56:52:57:0b:
         ae:98:d6:13:27:dd:41:e1:6f:a3:39:7d:e9:07:73:62:67:36:
         f1:56:cf:10:20:a8:4c:77:3e:9f:bc:cc:54:c6:b7:01:aa:b8:
         28:27:11:a2:bb:f8:a5:a5:8c:8a:64:77:1c:e3:ff:ad:a7:1d:
         e8:be:67:ae:9b:1b:59:42:73:80:dc:62:d0:d7:e2:6b:df:2e:
         ce:d2:16:02:b5:16:af:c7:15:2c:7b:8a:dc:a1:f0:1a:11:de:
         55:f1:28:ed:f8:a7:14:05:86:2f:60:3a:a3:a7:c0:ca:4c:8e:
         d2:77:6f:5b:24:6d:0b:a9:7c:23:bf:d3:a9:b0:56:db:8e:9a:
         25:8f:78:b1:2a:9e:df:27:61:99:ed:bf:1a:74:34:8e:6d:d4:
         89:bf:75:67:85:93:81:10:c2:da:49:ae:35:9d:30:84:9e:06:
         5c:77:4e:ed:d6:c6:3b:6c:48:28:2a:6f:c6:4c:8e:84:ad:a4:
         8a:9e:4a:98:52:7d:f0:40:93:8a:3f:16:40:ac:df:52:d3:90:
         da:3d:3f:76:31:8d:4b:c0:95:5d:f5:04:8b:ca:4e:28:8d:cd:
         39:49:89:68:d9:93:f1:c9:c8:87:5b:ec:aa:ba:0c:01:a9:95:
         24:22:c5:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7NBDoSk4N++4lRp77/s1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWVkN2IxZjYzYjUxYWE1MTZhOWZmY2IwMzVhM2EwZDY5
ZTY1YTEwHhcNMjYwNzI0MDcwMDIxWhcNMjYwNzI1MDcwMDIxWjAzMTEwLwYDVQQD
EygwZWQzZjIxNmJmOTQ4MDEyNTA5NDNlNzY0NzA1MzEwZmNiMzVmNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyld75Cko/UU5R8HF+P8nICzqlCbx
CXQucvIM4u3EPxk5y7U6NlvURC5SskGiAh9l8uJJEAnwt4UF+Mia8Jz+Mtwxwv+s
WwHwGtyrgkvAqYc4uTfryCuU0AxnvkXKJx02XJAMrtVo2SPYud8AiWKrM2mTBb1G
uVxyf4nAf2bRJxutvY/YSRd36VsSrh9fHEFVdSLvTNrejoQittewOJ+JnjMr3/re
NHDxf9f0hkLn5IWizCAcr7em2eZparqTztuClP1VObALsLBF17re9fiVaJGLacEP
Yb4EBun5hwV+mP04I3pQNvcn96Ljk83WWoDf1ueukZ2+adFF+Y8u2zDuJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7T8ha/lIASUJQ+dkcFMQ/LNfZGMB8GA1UdIwQY
MBaAFPMe17H2O1GqUWqf/LA1o6DWnmWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDct
YmQyYjNhYmFlMTIxLzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85OWVkMDYtZTQ0NS00Y2EyLWI2NDctYmQyYjNhYmFlMTIx
LzEvOHg3WHNmWTdVYXBSYXBfOHNEV2pvTmFlWmFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF/0YHPCd
CISnt1sB0k5WUlcLrpjWEyfdQeFvozl96QdzYmc28VbPECCoTHc+n7zMVMa3Aaq4
KCcRorv4paWMimR3HOP/racd6L5nrpsbWUJzgNxi0Nfia98uztIWArUWr8cVLHuK
3KHwGhHeVfEo7finFAWGL2A6o6fAykyO0ndvWyRtC6l8I7/TqbBW246aJY94sSqe
3ydhme2/GnQ0jm3Uib91Z4WTgRDC2kmuNZ0whJ4GXHdO7dbGO2xIKCpvxkyOhK2k
ip5KmFJ98ECTij8WQKzfUtOQ2j0/djGNS8CVXfUEi8pOKI3NOUmJaNmT8cnIh1vs
qroMAamVJCLFnA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:47 2026 by rpki-client