Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          oxNZnqC9cSTPCFBoQYuCYJ0GrGlQ7vc6WVToyFSFH0s=
Subject key identifier:   71:49:4E:3F:00:DC:A8:66:A2:0C:DD:E4:DF:30:A8:6C:47:AB:59:AD
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       019F905990862F2A03D76DF841C359C477A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          0A23
Signing time:             Thu 23 Jul 2026 19:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:16 +0000
Files and hashes:         1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: U7y1Y9iqFZIb5o7xj3IEyzRNuwYUy4IYotHWnqVMGEE=)
                          2: cqVoU67CwExthfXQtnUzx-lv3-A.roa (hash: 5F5B0oJP8h6OFxnMOS4l6tglzKyriTHb6L1MzQyUoV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:90:86:2f:2a:03:d7:6d:f8:41:c3:59:c4:77:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Jul 23 19:00:16 2026 GMT
            Not After : Jul 24 19:00:16 2026 GMT
        Subject: CN=71494e3f00dca866a20cdde4df30a86c47ab59ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7e:a8:aa:a1:eb:f6:5b:43:d0:a6:67:97:2d:
                    bf:44:e1:a1:09:66:2d:5f:14:87:9b:0c:9e:e9:eb:
                    86:21:64:f7:72:1b:37:ff:40:12:aa:4f:72:95:a8:
                    8a:68:34:69:56:7b:56:82:62:13:6a:92:1d:94:7c:
                    cb:b2:ae:31:65:53:19:b1:0c:75:7b:b1:ee:1d:e8:
                    83:da:e5:6e:52:41:f4:f3:0a:bf:7e:db:79:44:b2:
                    b9:11:73:c4:ee:83:68:d7:d0:c3:ad:6b:cd:3a:69:
                    31:82:d9:56:25:d9:5c:d7:65:bc:66:15:ed:59:a4:
                    b4:da:c3:28:7b:21:90:24:e1:cf:df:77:50:43:c8:
                    48:29:8e:68:a4:0b:fa:2e:b3:47:44:60:e1:bc:7f:
                    54:70:59:79:56:49:86:5b:4b:0b:b5:f9:d5:16:c7:
                    f6:e1:c5:4d:25:d3:b6:fd:c3:4c:30:f3:20:e5:8b:
                    4d:06:7c:cd:4e:6c:81:b2:6a:6a:14:f5:5c:3d:0a:
                    ba:51:c5:c4:9c:b7:0c:f3:bd:16:c6:85:60:54:1a:
                    e5:83:f3:31:57:31:1a:fa:2b:3f:5f:db:85:06:c3:
                    95:87:6b:aa:0b:14:17:54:d7:5f:aa:67:cf:22:56:
                    63:91:bf:b2:b4:82:df:82:a7:16:bc:8f:55:1c:45:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:49:4E:3F:00:DC:A8:66:A2:0C:DD:E4:DF:30:A8:6C:47:AB:59:AD
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:64:93:37:3a:96:be:98:09:f3:9b:06:40:9d:d7:8e:4a:
         48:51:26:a3:b1:c6:af:1a:a7:e4:ad:08:a0:54:91:d8:1e:d6:
         62:96:45:98:f3:4a:59:b5:14:14:80:24:47:d5:bb:47:91:f8:
         84:53:ba:5d:17:5d:4f:62:5f:df:51:b8:d9:ca:98:5e:7d:c6:
         1d:44:10:05:57:3d:cf:51:2b:c5:96:a9:aa:4c:d0:18:d7:4a:
         7e:72:79:23:ba:da:20:35:94:b2:a8:7f:a9:3b:e1:4b:f3:6d:
         aa:b9:c0:94:d1:f3:b3:2a:6e:82:e4:d4:71:6c:78:f4:6c:34:
         c3:85:61:f2:d4:00:44:f1:9d:0e:5b:3c:c0:9f:10:88:83:ec:
         85:06:48:c6:28:44:75:b9:22:3f:e0:87:21:07:e7:25:81:0f:
         48:f9:76:65:70:39:6e:ba:3a:1b:7e:3a:bb:84:af:8a:51:07:
         d5:3e:be:5a:77:69:16:be:46:bd:4e:51:4e:42:87:f5:c9:4b:
         d9:0a:d2:fe:03:33:06:a1:27:be:71:67:30:16:97:b9:c5:14:
         96:48:a3:b4:84:c2:30:bd:32:26:cf:7c:7e:14:4f:67:95:6a:
         ea:a8:7b:9d:94:53:2c:2d:ec:ab:33:e9:fe:f1:76:cc:99:50:
         39:fa:4f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:53 2026 by rpki-client