Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
File:                     8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft (raw, json)
Hash identifier:          YsytaYGCFuVAwewSh/wk9SxbFnWkqgBEoDnv1C+eyZg=
Subject key identifier:   F9:43:2F:0B:09:64:4F:BF:A4:CA:E7:21:E9:EC:F5:67:D3:15:12:E7
Authority key identifier: F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D
Certificate issuer:       /CN=f23e21affc33677485a15a5e13121143b577ba9d
Certificate serial:       019F916DB97D44B6198128E75B999130DF6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
Manifest number:          018B
Signing time:             Fri 24 Jul 2026 00:01:54 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:54 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:54 +0000
Files and hashes:         1: 8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl (hash: TyG81M+GZr/2wpN0mOHXVAUsFpRy80hNZaE8ST9c1F8=)
                          2: wWZeumQT3MBgVyI61YutHcN7xBc.roa (hash: ZGw/nN7EzuhLxCNfPxU2KnJ6Yzzw3B7hzu5qe4dcGKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:b9:7d:44:b6:19:81:28:e7:5b:99:91:30:df:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23e21affc33677485a15a5e13121143b577ba9d
        Validity
            Not Before: Jul 24 00:01:54 2026 GMT
            Not After : Jul 25 00:01:54 2026 GMT
        Subject: CN=f9432f0b09644fbfa4cae721e9ecf567d31512e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2f:f3:ce:1e:94:88:a7:68:96:b2:d6:50:83:
                    34:55:33:03:f4:48:f3:57:1d:7b:c7:a3:e6:2d:3a:
                    24:db:46:92:3a:62:f8:06:1e:bd:b9:54:f8:0e:9e:
                    bc:64:58:f1:dd:68:0e:8f:be:a9:c4:8b:28:50:88:
                    d2:14:28:65:86:46:1b:80:b2:ac:e9:bb:07:94:a1:
                    26:7e:66:39:82:42:ac:c4:2b:c6:35:ad:24:2a:13:
                    30:d1:69:69:82:14:77:e4:3c:fb:4f:52:d3:96:57:
                    52:55:7e:4e:86:b5:9c:b0:de:72:0f:de:39:1c:b4:
                    68:79:e5:42:dd:54:df:d1:bc:aa:84:f0:a6:e3:9e:
                    51:a9:a7:e1:12:ca:82:43:ef:be:fa:9f:7c:19:a2:
                    ca:46:c0:b8:f6:6a:a9:39:e7:16:77:5e:9a:80:7a:
                    75:cb:9a:a5:d4:23:f9:d5:bc:88:7f:fb:6d:e1:ce:
                    af:5d:02:cd:72:04:c0:23:01:b5:02:67:08:d0:7c:
                    0f:69:69:e3:19:60:02:d8:8b:3d:d6:c2:e3:e6:2e:
                    a4:6a:a0:1a:7a:fa:89:4b:c8:df:a6:e3:0c:bd:04:
                    d5:f1:11:fa:f6:51:70:89:6d:46:c3:7e:ab:8d:b7:
                    1a:9e:bd:53:9e:0a:7f:a8:2b:c5:fa:6e:6a:05:0d:
                    38:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:43:2F:0B:09:64:4F:BF:A4:CA:E7:21:E9:EC:F5:67:D3:15:12:E7
            X509v3 Authority Key Identifier:
                keyid:F2:3E:21:AF:FC:33:67:74:85:A1:5A:5E:13:12:11:43:B5:77:BA:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8j4hr_wzZ3SFoVpeExIRQ7V3up0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d497f0-c0b2-4442-9d2d-e782a47bc857/1/8j4hr_wzZ3SFoVpeExIRQ7V3up0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:f4:7d:60:a3:e9:06:79:db:de:de:e9:03:57:36:1b:35:
         fa:28:82:93:91:88:95:35:81:97:21:58:7e:9d:0e:35:7f:65:
         0d:1c:b1:73:0c:9e:af:66:75:00:d3:b6:01:b8:98:ad:3a:21:
         e8:3d:57:6c:ed:94:3b:9f:fd:c4:0a:7b:f6:07:73:3b:b1:9c:
         62:03:60:fb:71:ba:5a:db:31:fb:aa:33:6c:9d:03:e3:64:a5:
         0a:e1:48:d5:76:c4:f0:40:31:1f:1c:e6:56:14:d4:4c:7e:4c:
         21:bc:90:4b:62:57:69:c7:3e:92:81:d6:b8:de:6e:83:95:62:
         96:e2:a1:a8:35:e5:5c:9f:81:ff:d5:21:b9:3b:3a:b3:eb:07:
         d6:0a:48:b1:d6:20:0d:2d:f4:dd:9f:f1:39:53:66:62:1d:87:
         70:76:ad:12:8b:cc:7f:ef:99:a0:74:dc:9b:21:71:d1:43:8f:
         d0:07:98:a4:ee:15:a4:22:a6:58:b5:88:72:62:2a:d4:bb:43:
         9c:82:d6:2b:48:bb:bf:e9:1f:1f:43:9b:29:b1:fd:0e:5c:8d:
         57:2c:09:05:5b:b5:96:8f:51:8f:10:b7:fd:b7:b3:ac:48:f6:
         75:a9:83:56:bb:3f:b9:32:24:17:a9:bc:e6:61:30:d3:64:69:
         96:a8:07:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:56 2026 by rpki-client