Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
File:                     8j79S9kntM6jMSCiG09zFNy-oXk.mft (raw, json)
Hash identifier:          BldAQzM+kRXHdTHurGRD/VibZOJGn7SldiTiV5Q45hg=
Subject key identifier:   1A:3E:AC:FE:D2:5A:1C:95:EC:A3:BD:C9:30:79:5D:BE:27:0F:23:19
Authority key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Certificate issuer:       /CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Certificate serial:       019F8FECB7198445A4C7EF8B08719A978CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
Manifest number:          116A
Signing time:             Thu 23 Jul 2026 17:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:22 +0000
Files and hashes:         1: 8j79S9kntM6jMSCiG09zFNy-oXk.crl (hash: aSd/ujlliPijL+GqGh1DdSxK1v7McknBAMwXFteJ8uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:b7:19:84:45:a4:c7:ef:8b:08:71:9a:97:8c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
        Validity
            Not Before: Jul 23 17:01:22 2026 GMT
            Not After : Jul 24 17:01:22 2026 GMT
        Subject: CN=1a3eacfed25a1c95eca3bdc930795dbe270f2319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5b:88:f7:a8:35:12:03:08:5d:cb:2b:46:c8:
                    02:e1:d5:14:c2:80:5c:35:cd:52:0d:cd:0b:c5:20:
                    fb:af:e8:71:ec:4c:ab:fd:b5:86:d5:13:d4:0e:a4:
                    8a:e9:fa:79:1d:0d:b7:bc:20:a2:1f:f0:79:c6:8d:
                    6f:6b:b1:5e:2b:97:0b:75:de:9d:4d:bc:b5:4f:10:
                    a1:52:16:8f:5f:e7:1e:07:3c:ee:25:7a:40:96:da:
                    6d:17:07:51:8f:c8:03:17:4e:3d:0b:a8:42:c9:25:
                    3b:3c:34:70:20:9f:65:79:9a:8c:77:a4:fa:01:d4:
                    ee:cf:01:7d:09:df:49:68:95:c1:37:c9:90:e8:1d:
                    06:1f:4b:28:dc:d6:e3:48:78:d1:a9:70:73:c9:a0:
                    55:be:ce:9c:49:9f:6d:81:a9:18:f6:f5:a1:4e:c2:
                    4f:a3:2c:60:38:98:ff:f6:66:3d:c7:d4:d6:1c:c5:
                    f8:d2:9d:d1:62:e4:8a:4f:54:ec:15:e3:f2:9d:4a:
                    ae:be:67:a5:9b:8d:76:c1:ab:a9:ce:8e:5f:ce:0a:
                    24:12:74:1b:de:33:8b:21:8b:31:8a:93:2f:9f:5f:
                    68:f2:a3:39:41:92:86:84:44:1b:53:d7:9e:f4:3c:
                    c9:68:87:28:88:56:50:13:ab:b1:15:4c:c5:84:ef:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3E:AC:FE:D2:5A:1C:95:EC:A3:BD:C9:30:79:5D:BE:27:0F:23:19
            X509v3 Authority Key Identifier:
                keyid:F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:46:45:cc:dd:e5:31:af:94:b6:ed:21:ce:48:86:aa:64:d2:
         63:a5:a7:8c:f0:50:60:1f:d7:0d:03:08:23:e7:de:13:dd:04:
         3f:c5:85:b6:8a:ab:78:2f:ef:71:e0:67:c1:f9:c3:7a:63:78:
         fc:7a:94:6d:4a:25:25:f7:00:89:12:38:23:ee:bc:d8:0e:1d:
         16:56:d8:05:c7:d5:36:48:2f:1d:7e:d3:95:20:80:24:52:2b:
         22:e8:2e:99:a1:69:f6:fb:c7:0e:64:28:51:a1:b0:f7:9a:42:
         4b:02:eb:6c:bb:b4:7a:1f:af:90:ba:e0:f7:2c:33:94:c2:1e:
         bd:59:0b:15:a2:52:77:dc:07:f0:de:da:8c:ba:a9:ae:9f:c8:
         9f:8b:a6:42:b8:7f:06:6b:da:59:7c:f4:8f:b9:27:ba:9d:69:
         53:e0:07:98:82:d6:be:4f:94:bf:f2:fd:cd:d4:b5:82:1c:95:
         43:f6:8f:03:11:5a:0c:dd:d6:7d:c9:89:7d:ce:00:9a:de:5d:
         09:c2:b4:3a:61:82:d0:02:59:2c:65:e1:b3:9c:7a:9f:87:c9:
         f5:d1:de:15:64:c7:ce:92:5d:0f:5f:a1:6d:78:91:dd:05:ef:
         96:18:62:c5:3b:4e:e8:e3:08:2f:e9:9d:52:a9:25:b9:24:ed:
         9c:71:ce:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7LcZhEWkx++LCHGal4y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyM2VmZDRiZDkyN2I0Y2VhMzMxMjBhMjFiNGY3MzE0ZGNi
ZWExNzkwHhcNMjYwNzIzMTcwMTIyWhcNMjYwNzI0MTcwMTIyWjAzMTEwLwYDVQQD
EygxYTNlYWNmZWQyNWExYzk1ZWNhM2JkYzkzMDc5NWRiZTI3MGYyMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0luI96g1EgMIXcsrRsgC4dUUwoBc
Nc1SDc0LxSD7r+hx7Eyr/bWG1RPUDqSK6fp5HQ23vCCiH/B5xo1va7FeK5cLdd6d
Tby1TxChUhaPX+ceBzzuJXpAltptFwdRj8gDF049C6hCySU7PDRwIJ9leZqMd6T6
AdTuzwF9Cd9JaJXBN8mQ6B0GH0so3NbjSHjRqXBzyaBVvs6cSZ9tgakY9vWhTsJP
oyxgOJj/9mY9x9TWHMX40p3RYuSKT1TsFePynUquvmelm412waupzo5fzgokEnQb
3jOLIYsxipMvn19o8qM5QZKGhEQbU9ee9DzJaIcoiFZQE6uxFUzFhO+lNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo+rP7SWhyV7KO9yTB5Xb4nDyMZMB8GA1UdIwQY
MBaAFPI+/UvZJ7TOozEgohtPcxTcvqF5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTIt
ZDJjOGE2NWFhY2ZlLzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC83NzA0OTQtOWYxMy00YTE2LWIyZTItZDJjOGE2NWFhY2Zl
LzEvOGo3OVM5a250TTZqTVNDaUcwOXpGTnktb1hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUZFzN3l
Ma+Utu0hzkiGqmTSY6WnjPBQYB/XDQMII+feE90EP8WFtoqreC/vceBnwfnDemN4
/HqUbUolJfcAiRI4I+682A4dFlbYBcfVNkgvHX7TlSCAJFIrIugumaFp9vvHDmQo
UaGw95pCSwLrbLu0eh+vkLrg9ywzlMIevVkLFaJSd9wH8N7ajLqprp/In4umQrh/
BmvaWXz0j7knup1pU+AHmILWvk+Uv/L9zdS1ghyVQ/aPAxFaDN3WfcmJfc4Amt5d
CcK0OmGC0AJZLGXhs5x6n4fJ9dHeFWTHzpJdD1+hbXiR3QXvlhhixTtO6OMIL+md
UqkluSTtnHHOgQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:29 2026 by rpki-client