Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File:                     8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier:          M9/LSPktEqCb3py1og16NNz1wL/5GGTkmg3dAWeHRCo=
Subject key identifier:   78:F1:0C:C7:D6:93:E0:F3:D0:C4:61:DA:FC:D3:96:31:21:76:44:42
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer:       /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial:       019F8FEBF8D51753739E8AED841BA3A561BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 17:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:34 +0000
Files and hashes:         1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: gocn9xGQRltUEO1pJSDL2lyPNRa3HSShZqE+AbT7iPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:f8:d5:17:53:73:9e:8a:ed:84:1b:a3:a5:61:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
        Validity
            Not Before: Jul 23 17:00:34 2026 GMT
            Not After : Jul 24 17:00:34 2026 GMT
        Subject: CN=78f10cc7d693e0f3d0c461dafcd3963121764442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:33:c5:30:8e:29:f4:4c:c5:46:44:da:8e:
                    15:4b:d5:fa:9c:75:3e:5b:ac:59:4d:e5:06:f8:8f:
                    d0:31:e7:27:5e:be:88:af:06:34:a4:4e:86:f8:e8:
                    dd:fe:98:5c:50:30:47:77:82:55:58:40:b8:f1:74:
                    0c:8c:4d:2e:bf:93:cc:43:f7:30:3f:3e:8f:d4:d0:
                    9c:cf:c2:04:ac:78:5c:fd:48:9f:e3:9f:ca:80:09:
                    21:f8:ad:0e:17:0f:91:1e:20:84:58:33:7c:93:66:
                    57:4d:08:07:e6:38:30:bd:22:a3:3d:c8:04:7e:e7:
                    79:ba:e5:c7:7d:b8:ba:56:b1:be:70:a1:ef:c5:c5:
                    4e:f1:6e:d5:5f:0d:b9:1b:fb:a2:9b:d4:f0:d6:3c:
                    7a:cc:c4:f9:bc:2f:4e:6d:ec:3f:f7:25:13:06:b7:
                    56:bc:f6:19:5d:32:f5:fc:6f:79:d9:73:86:9a:4c:
                    ac:95:cb:4c:f6:6c:4e:48:67:8e:f5:87:0c:d0:ec:
                    38:a9:ea:a5:6a:05:ca:c3:ef:ad:f9:e4:1e:1a:4a:
                    f2:91:53:60:e7:ef:de:9f:dc:ca:8e:28:cf:9f:6f:
                    14:33:db:3c:ac:fb:92:73:ab:0a:73:43:9d:11:9f:
                    d5:df:f3:5b:a6:58:d2:67:91:77:4f:fb:b9:63:b7:
                    a1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:F1:0C:C7:D6:93:E0:F3:D0:C4:61:DA:FC:D3:96:31:21:76:44:42
            X509v3 Authority Key Identifier:
                keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:3a:8a:d9:e4:4e:86:f2:28:6c:d0:dc:d6:7d:9e:f3:a9:
         9b:6e:e4:ce:ef:49:99:c8:66:3f:83:ef:76:7d:eb:98:da:47:
         fe:0b:f8:73:96:bf:63:23:5b:cb:5e:3a:00:9e:3c:26:97:e8:
         dc:dd:ad:5a:bf:fb:dc:cf:2d:a3:24:6f:50:22:d9:58:51:ab:
         81:4d:f1:cc:c7:f8:b6:2a:af:65:0d:ff:89:16:b4:fd:80:0f:
         43:3d:c3:04:62:c7:6b:29:fe:a6:1e:cb:0e:63:0c:06:db:f8:
         62:c6:40:42:dc:cf:7a:1f:48:73:ff:61:fa:b9:9d:04:4c:46:
         9d:b4:09:60:eb:80:d8:26:aa:17:76:98:d1:c8:64:d8:03:3f:
         d8:5a:e1:4c:fa:c4:14:ce:50:66:79:94:f8:94:c1:1d:09:b7:
         af:0b:ac:3b:c2:88:c3:60:77:2f:f4:a4:75:60:c9:c5:c7:8a:
         bc:4d:d9:86:c6:dc:83:77:f1:0d:08:87:b4:8c:4e:f9:4d:95:
         8f:46:6d:2b:c9:55:ef:58:45:f7:58:91:ee:a0:ae:07:9b:c1:
         ea:4d:3a:0f:7e:cf:06:d1:2d:5e:42:2b:7a:41:5f:9f:ae:e2:
         02:25:dc:45:19:a5:16:cf:3b:c6:01:06:08:23:29:a0:3e:7e:
         f8:33:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----