Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
File:                     o082XngGS1jETUjPs5KR0_sdnhA.mft (raw, json)
Hash identifier:          F41dponZU+6+InnK4GbjSsuGbRK3jQ8TGnAwC69GxuY=
Subject key identifier:   87:14:DD:99:01:06:48:FD:9F:47:AC:F6:AA:40:E8:C6:8D:76:59:EC
Authority key identifier: A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10
Certificate issuer:       /CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
Certificate serial:       019F93FFB8BF1ED999BC1CC6A0D31B053884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
Manifest number:          190B
Signing time:             Fri 24 Jul 2026 12:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:37 +0000
Files and hashes:         1: o082XngGS1jETUjPs5KR0_sdnhA.crl (hash: oHrOQxKovs6llHaI2Q7LgZYkgUDCdGL4prwN4GA7Bcs=)
                          2: sWZCCJ9mYF4x-AZV9gqyKfwmtqw.roa (hash: ENzKV46vc1yAkS1qAwIAJTRoo8u9W0tkvlFZn62IWoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:b8:bf:1e:d9:99:bc:1c:c6:a0:d3:1b:05:38:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a34f365e78064b58c44d48cfb39291d3fb1d9e10
        Validity
            Not Before: Jul 24 12:00:37 2026 GMT
            Not After : Jul 25 12:00:37 2026 GMT
        Subject: CN=8714dd99010648fd9f47acf6aa40e8c68d7659ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:17:2b:c3:19:1b:ae:f4:da:e0:51:26:5b:
                    74:f9:77:e0:a7:c1:9d:28:42:72:76:93:a9:c3:93:
                    2f:c5:64:3c:27:08:9b:54:44:9c:88:3a:2e:40:be:
                    ea:1d:1a:8e:be:c9:12:4a:18:3b:59:9c:f5:52:d8:
                    bf:a1:d6:6f:91:16:85:6c:c2:2c:56:3a:78:09:11:
                    ad:cc:45:cf:c1:96:b1:f8:8b:12:26:03:e6:a4:1f:
                    0d:d0:26:c8:b6:1c:3e:17:c2:6a:9b:96:f8:09:f8:
                    d6:7f:83:61:54:d0:68:24:ec:81:5a:be:ca:77:63:
                    36:fb:76:20:02:69:49:ad:6f:e9:a6:9f:49:ab:fe:
                    3a:82:bb:64:62:67:89:d1:a1:5b:06:78:45:5e:d1:
                    2c:98:46:b6:01:e3:29:af:b7:04:e6:84:45:a6:4a:
                    cc:dd:de:3f:c3:72:a5:cf:77:7f:17:57:7c:c2:03:
                    6e:43:42:c4:2c:97:eb:02:21:39:8c:25:0c:fd:ca:
                    aa:47:8f:31:ef:8a:24:df:9d:43:a4:49:14:96:27:
                    27:e3:c3:4a:1c:0c:e2:b3:f4:aa:4e:5f:10:91:1f:
                    9f:ce:5b:87:44:c5:bf:b8:b7:3a:a3:f1:e9:26:31:
                    08:fb:aa:24:a4:00:95:0d:2f:fd:3c:7f:59:a1:0c:
                    94:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:14:DD:99:01:06:48:FD:9F:47:AC:F6:AA:40:E8:C6:8D:76:59:EC
            X509v3 Authority Key Identifier:
                keyid:A3:4F:36:5E:78:06:4B:58:C4:4D:48:CF:B3:92:91:D3:FB:1D:9E:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o082XngGS1jETUjPs5KR0_sdnhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3ee7c5-1264-47e9-8a12-041b78ada215/1/o082XngGS1jETUjPs5KR0_sdnhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:23:84:8e:c0:96:56:5f:2b:b4:8b:2b:40:4c:94:c5:6a:3c:
         4c:5f:91:80:0c:ae:40:f2:fb:57:d4:13:7e:56:a4:3e:38:58:
         7b:b6:37:b8:cf:e0:dd:09:9f:7c:10:6a:08:8f:2c:b2:2d:b2:
         45:6a:02:65:5c:98:05:26:48:17:87:36:09:c9:dd:5c:8b:ac:
         6c:5f:f0:f3:ec:14:b9:c1:a0:05:b1:fe:ed:fd:a7:4d:7b:82:
         2e:73:13:a3:10:7d:2a:f2:91:0c:b1:50:86:52:47:76:2d:a2:
         8f:db:0b:04:38:81:36:36:a5:c6:e0:4a:85:b9:66:90:92:2f:
         92:14:7e:a3:40:19:ea:13:64:4c:cd:62:56:46:f8:5c:d5:2a:
         10:2d:8a:c6:43:58:f1:c5:8f:f6:9a:8c:10:1e:45:d7:96:c6:
         45:4f:fb:bd:91:62:3e:09:49:32:12:7b:bc:b0:ac:94:64:bd:
         b6:a3:7d:0d:49:78:aa:02:c0:08:e8:d6:fc:dd:b2:b0:49:b7:
         0c:0a:76:e8:96:6e:cb:c3:dc:36:14:4f:d0:fc:f8:33:15:14:
         8f:90:8c:35:41:d0:88:b9:ff:94:6c:18:49:00:a3:0d:6b:2b:
         6a:05:89:aa:ee:75:8a:3d:ad:f6:f6:51:4f:eb:21:f9:7b:5b:
         da:85:1c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:23 2026 by rpki-client