Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File:                     8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier:          3kcKrnIxiHvaamZh9DSwcfYLjvLUzNVUG6IuDoCg/Hk=
Subject key identifier:   EA:CB:0E:9B:6A:D0:60:1B:5A:FE:D7:24:5B:0D:F9:49:6C:31:A8:78
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer:       /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial:       019F905A83A94A6174B550F1160BECB23EE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number:          0462
Signing time:             Thu 23 Jul 2026 19:01:18 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:18 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:18 +0000
Files and hashes:         1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: vl8UYrBFR56PzZ2cfmMFBfHmOa9cOqTmX723YZSHQDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:83:a9:4a:61:74:b5:50:f1:16:0b:ec:b2:3e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
        Validity
            Not Before: Jul 23 19:01:18 2026 GMT
            Not After : Jul 24 19:01:18 2026 GMT
        Subject: CN=eacb0e9b6ad0601b5afed7245b0df9496c31a878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7e:0a:f0:ab:4f:9e:23:0b:04:17:c0:30:f4:
                    24:24:a2:d9:c2:db:9a:f0:22:70:43:b2:64:82:07:
                    25:7b:f9:bc:05:d3:4b:19:a5:24:18:89:78:05:a3:
                    6a:a5:48:43:69:8d:6e:cb:33:5e:b4:4e:fa:e1:d2:
                    aa:37:11:83:d8:55:d2:e5:6b:0e:d2:e3:e9:ef:46:
                    a5:33:1b:77:9a:3b:d5:20:fe:3b:f6:07:0f:06:d9:
                    57:79:3c:8d:0c:07:a2:ce:af:43:d6:03:5d:2c:80:
                    03:83:7a:61:64:b5:a9:c8:3b:7d:35:59:3e:9a:e4:
                    bf:fd:d1:a3:5a:78:0f:eb:a0:14:0d:85:0b:86:7c:
                    ae:97:a9:85:e7:c6:78:74:db:be:70:54:52:5a:60:
                    cd:d5:8f:84:5d:4e:a6:07:eb:49:e1:d1:72:b6:6f:
                    ea:ab:38:db:5c:43:45:3a:29:51:44:b9:a2:e7:e0:
                    f5:75:16:2e:60:7d:95:0d:48:75:e6:0d:25:89:bb:
                    99:70:e3:e8:92:59:7d:51:4e:59:87:61:8e:e2:dc:
                    b1:1c:64:d5:05:93:3b:17:2d:86:b1:2b:5b:3d:cc:
                    50:5c:89:02:3a:dd:4c:88:28:08:0d:b2:db:89:6f:
                    b0:c0:0f:64:9e:aa:57:17:6f:86:b5:bd:9d:f1:85:
                    3d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:0E:9B:6A:D0:60:1B:5A:FE:D7:24:5B:0D:F9:49:6C:31:A8:78
            X509v3 Authority Key Identifier:
                keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:92:89:99:c2:f4:a5:df:45:fe:36:fd:14:67:6d:a0:6c:
         6b:bc:02:bb:a4:a1:ba:88:1c:b0:5d:d4:c3:0d:37:00:d0:c7:
         c1:87:7e:2f:79:fe:0c:98:3f:62:d4:5b:ce:a4:f4:99:4c:ae:
         2b:69:a9:f9:05:db:3d:68:11:80:10:4b:93:81:27:de:cc:e2:
         be:65:38:a2:91:63:87:74:5d:55:de:84:16:a6:27:c0:3b:1a:
         97:b0:96:ab:b6:a1:58:25:72:a3:31:a5:df:ed:8e:4e:aa:e6:
         ad:de:51:7c:c8:97:2d:ed:c4:f9:37:08:7c:e6:96:23:e1:51:
         4a:03:4c:68:bb:1b:4c:6c:f7:68:24:f0:0e:f4:b5:d1:94:7f:
         eb:7a:ee:8d:f4:99:1f:a0:c0:e1:d2:26:04:d4:af:bb:02:49:
         9e:f7:b0:b4:c8:26:70:d7:93:a2:9a:10:88:df:25:64:92:fe:
         73:8d:18:fd:f0:92:f9:80:d2:1f:a7:49:ef:2e:26:40:82:55:
         97:05:d6:49:14:ba:d0:75:15:05:48:9b:f4:e2:a8:fa:b8:5e:
         ec:10:af:bc:ad:46:77:45:97:eb:28:cc:93:16:14:d0:97:02:
         53:30:59:0c:66:06:b0:1a:5b:6c:ec:06:24:5e:1f:b1:46:da:
         f3:1a:63:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:53:52 2026 by rpki-client