Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
File:                     8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft (raw, json)
Hash identifier:          wh/Xv66UBBxUVwFt6m2qffV0SJTrqyRRka4lV1q41M8=
Subject key identifier:   0F:E8:29:D7:F9:5F:FE:82:A2:28:B0:2F:F1:33:12:68:B8:A2:BF:97
Authority key identifier: F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54
Certificate issuer:       /CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
Certificate serial:       019F91DA8130700C111CF50CB7D2B8854A4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
Manifest number:          13FF
Signing time:             Fri 24 Jul 2026 02:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:43 +0000
Files and hashes:         1: 3f7sN_W1BMqH2bAJDrYmekJsJtY.roa (hash: 1cW9ojab+mnjJYb+u24Z5r0k3W5TZOEjLnBbQc0hNSE=)
                          2: 8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl (hash: nf+9DJnD3KVVvupqMH7K5hWeSiaYytvbx1/cD/ONll0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:81:30:70:0c:11:1c:f5:0c:b7:d2:b8:85:4a:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0eccc48200cef0216c2ce53869fd192b4a23f54
        Validity
            Not Before: Jul 24 02:00:43 2026 GMT
            Not After : Jul 25 02:00:43 2026 GMT
        Subject: CN=0fe829d7f95ffe82a228b02ff1331268b8a2bf97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:84:ac:2f:80:96:60:30:11:45:16:52:df:39:
                    5b:00:71:8c:c0:56:e1:dd:dc:01:a8:9a:5f:88:c4:
                    cd:39:d1:f4:cd:9c:ae:59:01:21:c5:81:1c:80:f6:
                    4e:42:63:b7:f8:70:f3:3f:11:f5:1b:2b:6c:04:c7:
                    d9:40:60:78:af:5d:85:b1:6a:fd:52:e3:d4:00:7f:
                    b7:5f:e0:36:d9:2c:30:a2:59:e0:09:cd:be:b5:bd:
                    ec:d6:ed:1c:69:d1:a9:24:78:64:e1:48:48:d1:04:
                    42:48:98:db:4e:6c:6a:88:3b:48:db:df:36:82:e8:
                    78:5a:0b:cb:ab:f7:fa:a1:ca:42:c6:2e:b7:b3:6c:
                    03:0e:da:31:4a:4b:e9:f0:f6:62:d8:1c:ab:98:2f:
                    b2:df:ca:9f:6f:4e:64:77:11:e0:83:ff:19:ff:2c:
                    8a:53:16:04:c5:9e:92:d6:aa:59:25:15:65:ea:bc:
                    ad:be:53:c6:e8:33:cb:63:8e:06:85:68:8a:81:72:
                    f9:4c:fd:7b:b8:e9:96:b9:f4:b6:49:52:1d:87:39:
                    e5:ea:51:54:0c:90:8d:62:a3:ab:44:36:18:26:3c:
                    31:de:88:46:4b:86:93:f5:ed:6f:61:91:55:e2:b9:
                    41:ad:ed:a2:51:ee:9c:f5:23:f4:5c:6e:ec:29:10:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E8:29:D7:F9:5F:FE:82:A2:28:B0:2F:F1:33:12:68:B8:A2:BF:97
            X509v3 Authority Key Identifier:
                keyid:F0:EC:CC:48:20:0C:EF:02:16:C2:CE:53:86:9F:D1:92:B4:A2:3F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8OzMSCAM7wIWws5Thp_RkrSiP1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdb809-d1d4-4557-b430-bb65c5900f75/1/8OzMSCAM7wIWws5Thp_RkrSiP1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:f4:a2:ef:9b:63:a8:4e:18:54:c3:a3:27:ea:c9:e0:61:90:
         2a:35:4f:ce:b1:ea:c3:5f:a1:fa:70:81:63:be:7c:ac:07:34:
         02:af:bb:ff:88:e2:3b:a4:b5:59:36:83:6d:ff:1e:4b:5b:4b:
         eb:86:cb:c5:d7:1b:38:7d:3f:bd:a3:54:06:01:ee:26:dc:24:
         e7:10:70:9a:0a:41:61:86:c8:15:3c:7d:54:5d:26:50:a1:96:
         a9:09:57:f8:a9:80:77:e8:1f:ce:53:9d:db:9e:5d:de:ce:79:
         7e:02:0b:69:b7:3a:8b:69:6a:c3:fc:49:9f:8e:b5:c3:e7:ac:
         75:66:cf:99:35:77:fa:8b:72:86:91:bd:d8:a7:4a:e7:88:ac:
         97:40:de:fd:ca:94:2a:b9:b6:63:67:a4:f1:8a:63:dc:93:67:
         29:b9:c1:54:22:5b:c3:5c:30:73:d1:ee:76:4c:eb:4a:ba:0a:
         f2:78:bd:58:6f:89:60:f3:99:20:97:5a:15:70:1d:ad:78:52:
         e5:51:8e:94:2a:89:60:77:26:65:10:88:46:9a:98:44:16:5d:
         9d:2e:fa:d7:0e:48:2f:e4:26:f4:0a:9b:4c:a0:d5:2a:65:3d:
         03:35:35:b6:70:82:ce:49:09:6e:24:89:de:7f:ee:5c:81:51:
         b3:51:d2:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2oEwcAwRHPUMt9K4hUpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWNjYzQ4MjAwY2VmMDIxNmMyY2U1Mzg2OWZkMTkyYjRh
MjNmNTQwHhcNMjYwNzI0MDIwMDQzWhcNMjYwNzI1MDIwMDQzWjAzMTEwLwYDVQQD
EygwZmU4MjlkN2Y5NWZmZTgyYTIyOGIwMmZmMTMzMTI2OGI4YTJiZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkISsL4CWYDARRRZS3zlbAHGMwFbh
3dwBqJpfiMTNOdH0zZyuWQEhxYEcgPZOQmO3+HDzPxH1GytsBMfZQGB4r12FsWr9
UuPUAH+3X+A22SwwolngCc2+tb3s1u0cadGpJHhk4UhI0QRCSJjbTmxqiDtI2982
guh4WgvLq/f6ocpCxi63s2wDDtoxSkvp8PZi2ByrmC+y38qfb05kdxHgg/8Z/yyK
UxYExZ6S1qpZJRVl6rytvlPG6DPLY44GhWiKgXL5TP17uOmWufS2SVIdhznl6lFU
DJCNYqOrRDYYJjwx3ohGS4aT9e1vYZFV4rlBre2iUe6c9SP0XG7sKRDA2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/oKdf5X/6CoiiwL/EzEmi4or+XMB8GA1UdIwQY
MBaAFPDszEggDO8CFsLOU4af0ZK0oj9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAt
YmI2NWM1OTAwZjc1LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jZGI4MDktZDFkNC00NTU3LWI0MzAtYmI2NWM1OTAwZjc1
LzEvOE96TVNDQU03d0lXd3M1VGhwX1JrclNpUDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfSi75tj
qE4YVMOjJ+rJ4GGQKjVPzrHqw1+h+nCBY758rAc0Aq+7/4jiO6S1WTaDbf8eS1tL
64bLxdcbOH0/vaNUBgHuJtwk5xBwmgpBYYbIFTx9VF0mUKGWqQlX+KmAd+gfzlOd
255d3s55fgILabc6i2lqw/xJn461w+esdWbPmTV3+otyhpG92KdK54isl0De/cqU
Krm2Y2ek8Ypj3JNnKbnBVCJbw1wwc9HudkzrSroK8ni9WG+JYPOZIJdaFXAdrXhS
5VGOlCqJYHcmZRCIRpqYRBZdnS761w5IL+Qm9AqbTKDVKmU9AzU1tnCCzkkJbiSJ
3n/uXIFRs1HS/A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:36 2026 by rpki-client