Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          hnHDHqLsgUGqaP5kJ/5RGabNPJilBm1ocI2fJGrTyy4=
Subject key identifier:   C7:70:D8:DB:4C:8A:35:DD:16:29:BC:1E:8D:6C:BC:52:1B:F7:03:02
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       019F94E4406795EECB344477F305EA838061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          0E8F
Signing time:             Fri 24 Jul 2026 16:10:14 +0000
Manifest this update:     Fri 24 Jul 2026 16:10:14 +0000
Manifest next update:     Sat 25 Jul 2026 16:10:14 +0000
Files and hashes:         1: SOiERy2FzpjBOJscmjZUT2oXCyo.asa (hash: I8iKKxNhfuhsMLpyqDcsPliv9eTPu4ZuRNf7dFDTu3k=)
                          2: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          3: qUSIcsACCg5zKU9pXsQPE6Igodo.roa (hash: 3BGQ0d60966Q4UG/4fZrWPCDT3PwhDAdjHeN505uU80=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: SwTH6cwEJ/ZbQjH3hHnTw/m29/7ne2zopLWgXz9yEl4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:e4:40:67:95:ee:cb:34:44:77:f3:05:ea:83:80:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Jul 24 16:10:14 2026 GMT
            Not After : Jul 25 16:10:14 2026 GMT
        Subject: CN=c770d8db4c8a35dd1629bc1e8d6cbc521bf70302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6d:18:ae:55:11:75:44:06:14:9d:fe:8c:ce:
                    08:df:9b:a8:c6:3b:42:13:26:92:36:f6:05:bf:24:
                    ce:4c:1c:a7:63:85:ca:17:66:d4:e8:88:39:ac:1b:
                    4f:3b:fe:3c:11:8f:a4:76:d9:4a:b4:b0:c7:a0:4f:
                    66:a1:d4:f3:f3:d7:fa:55:6c:d7:31:5d:bb:54:7a:
                    df:c4:32:29:92:cf:ba:e5:f8:d9:69:f7:fc:21:bd:
                    b4:52:1b:17:8f:a6:64:ad:70:2d:58:98:d8:92:4d:
                    0c:15:8f:af:f1:3e:89:f9:7d:bb:7f:ce:32:ee:c0:
                    23:45:00:fd:6c:10:7b:36:10:93:ba:38:e0:1b:25:
                    4e:a1:48:4e:77:a1:70:1a:92:87:e4:c7:7a:13:b3:
                    35:56:c1:33:7b:ec:1e:49:c9:1a:3f:3e:64:cb:40:
                    00:26:64:79:8e:6e:32:33:f6:cd:b2:8e:45:a2:bf:
                    5b:94:4e:10:c8:18:e4:b6:b1:9c:c2:1f:51:95:6a:
                    c0:39:9d:aa:c5:50:a3:80:b4:19:15:07:96:f7:ce:
                    1f:7d:5f:74:25:30:f8:78:dd:7f:3b:12:98:ad:ea:
                    04:2b:e0:c8:0e:c2:71:09:0e:07:3e:2a:a3:70:97:
                    ff:7c:52:03:90:46:90:7a:d4:c7:96:db:4c:5e:a9:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:70:D8:DB:4C:8A:35:DD:16:29:BC:1E:8D:6C:BC:52:1B:F7:03:02
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:eb:db:f0:df:04:c8:d7:97:cb:5d:e7:8f:b1:6b:fa:04:cd:
         a1:72:03:7f:c8:02:b6:c5:0a:c3:02:d4:09:43:b7:7c:8b:c4:
         da:ce:10:64:8d:d1:5c:a7:a1:d3:23:c5:86:60:c8:26:65:56:
         09:20:85:f3:e8:a5:da:a1:ba:34:8a:eb:84:58:fe:cf:2f:ff:
         98:65:eb:e1:f0:2e:d6:95:07:9b:04:45:c7:dc:92:8b:bb:53:
         90:41:a6:04:35:60:1f:1d:86:68:0a:38:d6:87:a1:de:09:88:
         b0:ee:8e:c7:86:f4:ba:77:f6:bf:ac:5b:b0:36:24:8b:15:37:
         76:51:16:71:e6:41:13:4d:eb:ce:8a:d9:ab:11:97:dd:7b:9a:
         c7:d2:f4:3f:91:6c:4e:2a:85:2a:00:c4:e0:1f:1a:c5:de:ca:
         ea:6d:20:af:d4:d9:fc:39:73:98:f6:4f:3d:a9:a0:93:81:c9:
         84:17:d7:c6:32:a9:81:98:50:6a:5f:01:17:b1:99:00:2c:e4:
         4c:99:c8:4f:37:ed:83:75:83:c4:20:12:00:78:8f:6d:12:d3:
         ba:ad:55:10:9d:a1:3c:8a:97:ac:b7:db:e5:4c:ed:6c:6d:39:
         49:44:eb:b5:43:4c:9e:fa:c8:ba:8c:44:a0:33:b3:0e:f4:59:
         25:29:46:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:10 2026 by rpki-client