Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File:                     8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier:          dcSNlon5f1FKgZzZjqHu5bwAKB961DJYoEnFq0gnR/c=
Subject key identifier:   A3:23:E6:F0:91:7A:F4:53:CE:1E:14:BA:39:B2:CC:EE:B3:B5:30:B2
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer:       /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial:       019F8FB4C7854A88C796CD5C12813F752D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 16:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:16 +0000
Files and hashes:         1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: topHo34eGZovCcV43eTW4Z5xUu0cs4oWvY4Ee6m2JWU=)
                          2: G0gRp1hMj3IVrRMDtVlrM5GgoMQ.roa (hash: sfK58h/s6Lw9x7/XNuXAh6Lj4orMmzdUBf2OZPGupM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:c7:85:4a:88:c7:96:cd:5c:12:81:3f:75:2d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
        Validity
            Not Before: Jul 23 16:00:16 2026 GMT
            Not After : Jul 24 16:00:16 2026 GMT
        Subject: CN=a323e6f0917af453ce1e14ba39b2cceeb3b530b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:3f:e0:bd:14:03:df:3e:2b:6a:93:4f:20:
                    2a:76:9e:55:a0:d1:de:83:60:92:3e:ef:5a:ba:f1:
                    99:db:bb:9c:e2:cf:c0:36:1c:d3:3d:8c:fd:ce:43:
                    68:16:f7:d8:fe:86:07:df:36:d8:3a:78:a6:68:47:
                    5e:68:fa:a0:d6:ed:b6:98:47:89:59:08:2a:94:4a:
                    04:14:54:d6:3d:4a:66:a1:d4:94:c1:ad:f0:3e:be:
                    22:e6:da:95:a4:d4:dd:05:27:e7:59:fc:24:37:c7:
                    71:d3:41:b8:9a:5a:fc:78:06:d6:42:37:28:e9:8c:
                    94:ef:c7:54:35:84:b9:5b:0e:8d:5a:96:ca:b0:d5:
                    02:5d:60:0c:7a:c9:cf:02:be:e6:06:ac:90:fe:8c:
                    1e:23:81:98:8d:51:37:24:5b:56:64:f0:d8:08:1f:
                    c2:e1:bc:9d:71:ae:db:97:03:c4:14:35:a4:de:4a:
                    4f:4e:65:4b:11:12:1a:0c:31:66:0e:2e:79:62:df:
                    a9:2d:ef:33:00:1a:8f:a6:f7:24:ca:b0:e6:9a:f7:
                    fa:2e:58:a9:46:e2:e4:ac:8f:df:5f:57:c3:ba:64:
                    37:e0:05:32:20:cf:9f:d7:40:a8:9e:6f:c3:f9:69:
                    53:1f:db:98:dd:b1:a7:cc:50:f1:e8:ba:0e:70:b0:
                    e8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:23:E6:F0:91:7A:F4:53:CE:1E:14:BA:39:B2:CC:EE:B3:B5:30:B2
            X509v3 Authority Key Identifier:
                keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:57:d7:11:2d:72:6d:f5:55:3d:43:61:b2:09:9e:e4:b4:91:
         b8:12:4a:4d:07:b8:c4:a7:ed:39:87:4f:eb:ea:6f:5a:52:68:
         73:de:cb:ea:6b:e8:23:ba:ec:4d:8c:ab:bb:5d:23:e7:a5:29:
         99:6d:54:da:ef:cf:96:9f:14:d6:eb:8c:8c:55:86:74:02:5c:
         b3:92:59:1b:66:e6:31:b3:85:b6:b6:b0:93:d7:11:fb:c5:de:
         06:fc:69:46:dd:7b:c0:61:c5:d0:54:c1:01:77:c1:75:f3:4c:
         5e:c8:32:f3:09:4e:d2:65:f8:60:0d:d7:96:5a:2c:c9:cf:f9:
         8f:0f:b4:73:5b:6c:4a:ee:af:18:ca:8f:46:7f:18:8d:26:e9:
         9a:c2:f9:0c:29:01:c5:1d:a2:09:55:7a:c2:08:b0:19:ec:9c:
         28:f9:c5:a7:d0:0d:bf:b0:9b:ba:9e:87:16:8a:8a:33:d9:7c:
         fb:fe:0f:14:97:1a:4f:58:4b:03:2c:3e:19:cd:dc:e2:46:c3:
         11:d7:ef:d4:ae:4f:ca:c4:96:6d:27:4b:bd:3f:59:e8:17:c4:
         bd:36:05:aa:2e:ed:81:9d:f9:05:ab:4d:b0:0a:ae:4c:49:83:
         85:3d:42:43:00:89:04:7e:29:3e:0d:35:e2:c1:77:c4:de:0c:
         22:45:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:45 2026 by rpki-client