Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File:                     8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier:          QaBJMSFA9MufwsOtXz+iOPF6pRoYoP88Imzkeir8kd4=
Subject key identifier:   ED:B6:8B:8D:85:DF:17:05:C9:45:93:A2:E0:71:F7:1E:03:5E:3E:FA
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer:       /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial:       019F946D897FC397D8E520F44115CC6DED39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number:          0B60
Signing time:             Fri 24 Jul 2026 14:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:34 +0000
Files and hashes:         1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: hnytl1XLeLt6Hiz4Z9DnbRKqd/sqNTz158oo7ZoSAJo=)
                          2: HCLMfVSYMXhaXPDTQeNyUs3_km0.roa (hash: qS9rBLPDOBtr9IKEEF8WbooTuAl7SLlqT29bHOmlbUM=)
                          3: gBoNUQ_CTGnWgUM07GFr-rBWBjY.roa (hash: FSsCz3l2v0+0v9doEdJtlcnkPmunLIWLZEkaSuag6Ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:89:7f:c3:97:d8:e5:20:f4:41:15:cc:6d:ed:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
        Validity
            Not Before: Jul 24 14:00:34 2026 GMT
            Not After : Jul 25 14:00:34 2026 GMT
        Subject: CN=edb68b8d85df1705c94593a2e071f71e035e3efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:16:78:0e:42:ab:a5:de:eb:48:8b:14:46:96:
                    60:63:0f:26:1a:0b:1d:ea:60:f4:41:62:05:2e:bd:
                    e6:c7:c2:c5:9e:c3:b3:31:6a:cb:f4:da:17:aa:5d:
                    ec:a0:eb:fc:c4:3e:13:30:55:2f:39:d5:ae:97:1f:
                    cb:28:1c:e4:56:8e:d8:0b:df:79:c3:2a:a4:f1:9e:
                    af:bb:6c:d6:47:fa:9b:78:d4:c6:4e:4a:69:ec:50:
                    ed:4c:a5:99:a9:a6:08:47:ce:bd:33:a3:45:38:f1:
                    ab:e1:71:da:23:66:2e:0d:71:65:92:8e:df:bd:1c:
                    98:86:f8:73:6d:01:ac:6e:f3:5f:72:b2:6d:83:37:
                    b9:a4:23:69:e8:c8:eb:6a:8f:17:a9:87:a9:67:f9:
                    ac:53:83:97:38:77:3f:dd:dd:d0:d9:d4:c8:38:7d:
                    e0:94:71:9f:83:fc:89:61:52:08:47:2f:fa:b3:b1:
                    98:07:c0:ac:9e:6f:14:a5:55:b5:31:35:c9:1a:d8:
                    56:84:40:2e:93:f6:f2:37:ad:c0:2a:71:e0:e1:b4:
                    83:b2:08:32:a8:71:90:9f:9e:cd:29:34:cc:9b:e0:
                    d2:4f:74:54:8e:87:c7:3e:1f:20:49:7d:ac:a0:c1:
                    81:e0:72:18:e5:5f:f8:6d:67:96:c0:4e:fc:fd:a2:
                    ed:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B6:8B:8D:85:DF:17:05:C9:45:93:A2:E0:71:F7:1E:03:5E:3E:FA
            X509v3 Authority Key Identifier:
                keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:80:9b:e9:05:27:b0:87:79:ef:88:c0:fc:57:16:7a:ca:be:
         0a:d4:aa:9f:7e:fc:26:26:2c:00:a4:c2:45:17:b9:f7:77:81:
         68:2b:1d:82:be:90:eb:6a:e5:3d:a9:43:8b:bf:88:60:00:41:
         74:24:5a:6e:b8:d5:be:de:e7:01:58:3a:e9:9b:53:7b:aa:5c:
         79:16:3f:ed:d1:d3:a1:f9:f1:f7:d8:db:dc:3b:d6:36:6f:93:
         c2:92:6f:f9:57:b2:59:0f:e1:f8:94:c6:a9:d3:01:b7:ef:28:
         fb:1c:70:fa:90:98:3b:67:16:0f:99:36:af:34:19:de:05:78:
         fc:68:e5:af:a5:23:b2:a4:25:f9:c4:07:36:7e:0f:6f:72:49:
         dd:5b:15:58:1b:85:b5:37:21:ba:cd:6a:97:15:bb:3a:29:cc:
         f4:00:92:ce:d3:82:7b:fc:bc:cc:39:42:cf:71:13:41:90:7a:
         59:9f:c3:2b:23:74:98:26:4b:71:09:47:16:e3:38:4a:53:b2:
         7b:2f:a2:a4:83:92:c4:d0:d4:50:b3:23:29:19:6f:95:11:4c:
         c2:1e:1f:aa:06:07:a2:fd:04:98:2b:fa:e0:a0:fa:7a:eb:33:
         26:c0:e4:30:7d:09:0f:f0:8b:bb:18:81:59:95:55:ae:64:fa:
         b9:54:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:29:05 2026 by rpki-client