Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
File:                     8v_48bgcLGFPw-lOsXy6CUAhGgE.mft (raw, json)
Hash identifier:          Od8tY2fca1UJ2VuDYZZz5kjDp6JPM8C3P3gxXwy9/l0=
Subject key identifier:   DA:24:E8:1E:95:CC:E4:89:1C:08:38:31:D2:BA:42:92:6E:82:4B:C5
Authority key identifier: F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01
Certificate issuer:       /CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
Certificate serial:       019F9090D231D94066D312349BD762E250C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 20:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:37 +0000
Files and hashes:         1: 8v_48bgcLGFPw-lOsXy6CUAhGgE.crl (hash: h1nznCgQeg908z93p3m4SYu98knPwthI/lJTKPlUMn0=)
                          2: jRpXU9eqysmsAJR80B3Aax6y_BQ.roa (hash: XRM8W3BWblehC6PY0lBpqApKx5419cv1D4/Jksn00jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:d2:31:d9:40:66:d3:12:34:9b:d7:62:e2:50:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fff8f1b81c2c614fc3e94eb17cba0940211a01
        Validity
            Not Before: Jul 23 20:00:37 2026 GMT
            Not After : Jul 24 20:00:37 2026 GMT
        Subject: CN=da24e81e95cce4891c083831d2ba42926e824bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:98:2c:5f:e7:14:fd:01:cb:8a:90:7c:6b:
                    8b:b6:ae:20:93:62:fc:32:6c:79:39:24:eb:a2:d4:
                    de:1a:09:c0:64:f5:3d:69:c9:91:01:ce:cf:eb:fb:
                    ad:7e:4f:19:ed:8e:9a:40:e1:24:c5:c9:31:24:e3:
                    80:ff:54:2b:f9:84:d6:77:c3:58:31:16:ef:ab:b7:
                    fc:aa:2c:47:bd:e2:de:cd:8d:de:8d:75:1e:15:ee:
                    9a:64:36:bc:4c:c3:26:b5:34:05:55:2c:00:6f:5c:
                    cc:5e:4b:a1:b7:ef:b5:c2:6e:d1:a3:41:81:e6:22:
                    d7:b7:25:98:0b:8b:4a:66:6a:a1:8e:36:cf:43:4e:
                    4b:6e:ee:a3:fd:83:28:c5:74:10:c4:c0:91:b1:95:
                    4a:f2:80:22:73:e1:aa:93:10:00:a2:4d:01:8e:ff:
                    7a:ac:e0:b5:56:34:bf:3a:42:01:2c:a7:39:5a:80:
                    7d:d7:8f:9a:a0:b1:91:7d:bb:67:65:0d:08:fd:41:
                    ba:0f:0e:51:25:e2:d1:8b:44:34:1e:26:a7:15:cd:
                    da:e4:7c:12:e9:05:32:5b:a7:ec:6b:a1:09:84:17:
                    aa:ad:cf:98:d7:c7:41:7a:fd:f6:69:ee:5d:1c:f9:
                    6e:7c:35:15:b6:c6:ef:3d:c8:9d:38:43:b1:f9:ea:
                    55:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:24:E8:1E:95:CC:E4:89:1C:08:38:31:D2:BA:42:92:6E:82:4B:C5
            X509v3 Authority Key Identifier:
                keyid:F2:FF:F8:F1:B8:1C:2C:61:4F:C3:E9:4E:B1:7C:BA:09:40:21:1A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v_48bgcLGFPw-lOsXy6CUAhGgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2002c4-eb0a-4700-9076-17441bfe56cf/1/8v_48bgcLGFPw-lOsXy6CUAhGgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cc:c0:36:5d:80:d8:57:3a:23:84:ff:f3:17:b8:53:41:72:
         db:51:94:76:69:b5:96:75:dc:88:23:22:42:8b:8a:0a:98:98:
         33:d1:20:83:cf:67:df:b3:b9:01:57:33:05:25:a2:d3:98:7b:
         c6:74:c3:0f:35:5c:fc:c1:76:a3:02:43:23:ef:38:7b:65:29:
         81:35:d1:bb:d5:52:04:81:a2:c4:b4:ed:09:9a:22:1e:31:cf:
         42:90:37:ca:4d:ff:cb:bb:2c:c3:56:c0:7f:53:5d:2f:53:7d:
         34:44:c2:cf:83:98:ee:26:62:05:19:3d:bb:70:64:35:0b:47:
         1b:72:0f:60:d3:18:e5:6a:6a:4a:d1:80:1b:6b:38:0a:89:e5:
         94:d3:f4:79:3f:d8:ac:3a:b8:71:e7:9f:76:fb:29:e1:d9:24:
         5d:52:27:d2:40:b8:b4:8f:f2:1b:8e:a2:4b:d9:df:4e:fe:d2:
         13:c8:a7:d0:87:74:18:07:eb:2b:8c:3f:d6:36:a0:94:f0:6b:
         18:69:61:76:bb:dc:d5:d9:7e:8e:f7:0d:16:a2:38:40:78:88:
         83:44:2a:a2:de:cc:60:03:0f:43:3f:11:b4:67:ed:94:b4:1d:
         9a:2f:25:c9:40:a2:25:70:fb:03:1d:b1:37:45:9f:fe:ba:61:
         0d:88:97:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:10 2026 by rpki-client