Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          1X3bmQT/b2Vw0lWT3f6FWyC46Zj+1zH5oxanBHpvlPs=
Subject key identifier:   8C:2E:26:A4:4B:75:4A:C6:28:86:0C:45:9D:73:F5:C1:4E:31:04:D5
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019F8F46E1811ED2BD3C8E754EB23CA46098
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0F8F
Signing time:             Thu 23 Jul 2026 14:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:14 +0000
Files and hashes:         1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: 4Gr+HdlULVDIOug2LjEhlboTlqAFi/x5ChmRHRluHQQ=)
                          2: gHzzrFjQIf1BnANrNt41xIyuTAI.roa (hash: gdosIj1Y84eNGwiRZ4XKtJBxF5aZNg2EDodOpabV+bc=)
                          3: qbcRyHpM1CjtLF8A8oEnsD79w1E.roa (hash: Z4p1smZj2qkNMUZ5G62ALv7SxS1dQGFfDFqEOgUC9rM=)
                          4: uV7OQJTuC4kYWor682k9f-C0_5I.roa (hash: q4UJtdgviUqdDZKlm/WdXXX7eWbJCWOwGJBJFpte8C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:e1:81:1e:d2:bd:3c:8e:75:4e:b2:3c:a4:60:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jul 23 14:00:14 2026 GMT
            Not After : Jul 24 14:00:14 2026 GMT
        Subject: CN=8c2e26a44b754ac628860c459d73f5c14e3104d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:7d:96:af:e0:9d:8a:01:b7:72:95:98:f1:
                    f7:26:ae:2a:f2:d5:87:60:78:5e:d3:09:40:52:51:
                    4e:12:1b:af:81:23:26:3f:05:74:f5:52:e0:3e:9f:
                    d6:ba:82:ff:51:7b:cc:4b:65:66:fa:80:59:32:33:
                    bc:4f:2a:5e:5d:69:24:2e:24:fa:6c:a6:ec:f2:d4:
                    7c:5b:3f:d5:c7:99:73:30:89:bf:c0:a0:d7:e9:43:
                    40:43:e1:33:8f:07:89:d0:b9:59:57:ec:41:2c:65:
                    6b:52:8a:00:c1:67:63:35:0e:aa:73:54:2e:d9:04:
                    a3:35:10:f2:4e:40:f5:b3:a0:48:ef:21:66:da:41:
                    b0:85:57:af:8f:b6:8e:52:d3:13:ed:a3:44:77:14:
                    ed:ae:46:00:ae:04:73:4e:2c:de:24:a3:1f:0b:e7:
                    e6:8b:94:8c:40:30:01:78:af:76:df:56:90:f0:48:
                    65:e1:c5:c6:55:48:f9:e7:be:03:4e:0a:85:55:84:
                    c5:51:e2:db:f6:a3:83:6c:0e:93:95:ec:d6:ce:d0:
                    86:89:5c:3e:9e:1e:1d:fb:e1:f8:a0:17:27:dd:26:
                    23:3e:82:23:ec:52:c1:b4:fc:8e:a3:c0:51:4b:f2:
                    7e:9e:54:c7:e9:dd:ee:4c:21:97:54:57:4f:50:16:
                    b8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2E:26:A4:4B:75:4A:C6:28:86:0C:45:9D:73:F5:C1:4E:31:04:D5
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:d7:ae:fe:84:96:03:ef:8e:7c:26:6a:70:e3:17:32:3a:
         d4:18:32:d0:8f:ff:3b:75:76:49:cb:a8:80:a9:38:6c:c4:a4:
         f8:fc:0b:6c:55:9f:9e:c1:69:ad:eb:c8:94:b9:60:84:3e:03:
         94:14:ef:05:17:03:ca:44:82:7b:47:2e:75:a8:25:c5:18:44:
         c2:02:4f:a1:5f:cd:7f:6f:72:cd:61:e6:21:8c:a3:15:4e:0b:
         82:df:17:7c:ca:db:9e:c8:c5:08:23:c1:3a:da:0a:26:fe:ce:
         85:a8:d8:95:e5:84:20:f2:b5:f2:4f:f5:af:6a:05:d1:51:17:
         90:49:c0:c5:7b:92:c3:d8:3c:df:02:43:9a:17:f5:77:87:3c:
         7d:68:2e:bd:83:c4:70:fc:7b:02:5e:03:aa:9a:14:8a:7d:66:
         76:e7:d9:f5:b0:f0:f7:41:2d:e9:9b:b3:2a:92:a5:52:41:7c:
         01:cf:4c:54:90:cd:28:36:6e:a1:5e:78:04:e9:75:ec:5f:76:
         12:95:d3:02:76:40:cc:1d:ef:5f:70:bc:ca:87:eb:5d:39:19:
         5f:06:fc:1a:79:69:cf:91:35:4f:6d:76:03:de:d1:08:cc:4f:
         77:b1:34:9b:2d:51:3c:5c:44:d8:f4:fb:0b:ba:a8:a7:3b:c9:
         7a:7c:95:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRuGBHtK9PI51TrI8pGCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMzA2NThmMTZkMmQ4OGQzNDE2NDU5MmZjZDRkZTEzMTMx
ZjE2OTUwHhcNMjYwNzIzMTQwMDE0WhcNMjYwNzI0MTQwMDE0WjAzMTEwLwYDVQQD
Eyg4YzJlMjZhNDRiNzU0YWM2Mjg4NjBjNDU5ZDczZjVjMTRlMzEwNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0B9lq/gnYoBt3KVmPH3Jq4q8tWH
YHhe0wlAUlFOEhuvgSMmPwV09VLgPp/WuoL/UXvMS2Vm+oBZMjO8TypeXWkkLiT6
bKbs8tR8Wz/Vx5lzMIm/wKDX6UNAQ+EzjweJ0LlZV+xBLGVrUooAwWdjNQ6qc1Qu
2QSjNRDyTkD1s6BI7yFm2kGwhVevj7aOUtMT7aNEdxTtrkYArgRzTizeJKMfC+fm
i5SMQDABeK9231aQ8Ehl4cXGVUj5574DTgqFVYTFUeLb9qODbA6TlezWztCGiVw+
nh4d++H4oBcn3SYjPoIj7FLBtPyOo8BRS/J+nlTH6d3uTCGXVFdPUBa4hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwuJqRLdUrGKIYMRZ1z9cFOMQTVMB8GA1UdIwQY
MBaAFPAwZY8W0tiNNBZFkvzU3hMTHxaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYt
ODk0ODA1Mjg5Y2MwLzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82NjkzZTMtODljYS00NGExLWE4YjYtODk0ODA1Mjg5Y2Mw
LzEvOERCbGp4YlMySTAwRmtXU19OVGVFeE1mRnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/XXrv6E
lgPvjnwmanDjFzI61Bgy0I//O3V2ScuogKk4bMSk+PwLbFWfnsFprevIlLlghD4D
lBTvBRcDykSCe0cudaglxRhEwgJPoV/Nf29yzWHmIYyjFU4Lgt8XfMrbnsjFCCPB
OtoKJv7OhajYleWEIPK18k/1r2oF0VEXkEnAxXuSw9g83wJDmhf1d4c8fWguvYPE
cPx7Al4DqpoUin1mdufZ9bDw90Et6ZuzKpKlUkF8Ac9MVJDNKDZuoV54BOl17F92
EpXTAnZAzB3vX3C8yofrXTkZXwb8Gnlpz5E1T212A97RCMxPd7E0my1RPFxE2PT7
C7qopzvJenyVhg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:24 2026 by rpki-client