Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
File:                     0Mo8Cxlv3gunTBSHvcucX6BTZks.mft (raw, json)
Hash identifier:          Uu2F4WbVjPOzSR9UZ470dRGYaL2u/AkAkBKI49L4OyU=
Subject key identifier:   8E:AD:15:EA:AA:6D:73:C9:50:42:85:61:94:B4:82:87:C8:E5:08:31
Authority key identifier: D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B
Certificate issuer:       /CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
Certificate serial:       019F9135CAFC332173B1BAD5221959266E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 23:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:49 +0000
Files and hashes:         1: 0Mo8Cxlv3gunTBSHvcucX6BTZks.crl (hash: uFC3Sg3p2PjYrXL2/B9GkZKZYxXS5Sw1ylmSXd4eNDw=)
                          2: MZedXybYHwozV6I5FVF9kaQXqGw.roa (hash: 9GqJqyPbldCXpYPmuX8YAVKvtX3ZVzz/4Tffa0wjAiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:ca:fc:33:21:73:b1:ba:d5:22:19:59:26:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ca3c0b196fde0ba74c1487bdcb9c5fa053664b
        Validity
            Not Before: Jul 23 23:00:49 2026 GMT
            Not After : Jul 24 23:00:49 2026 GMT
        Subject: CN=8ead15eaaa6d73c95042856194b48287c8e50831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:1c:b4:0a:48:73:a1:75:58:86:4c:ea:d1:
                    22:be:bf:29:59:10:84:85:35:e8:16:37:ae:cb:93:
                    7b:c4:ba:da:33:7c:87:7e:dc:32:86:75:98:3d:f6:
                    4d:15:da:81:02:e9:6c:09:f7:f6:bd:c0:e2:a3:2d:
                    6c:d7:71:77:1d:3b:c3:48:c7:5b:39:39:7a:79:b3:
                    15:14:c1:23:18:da:1d:9a:5d:30:91:40:c5:0d:ec:
                    92:74:6c:9d:5d:5b:2f:fa:d1:91:eb:77:f8:19:4d:
                    db:d8:84:8f:3a:0f:df:ab:5a:41:94:07:92:51:44:
                    dc:10:30:ee:cb:8b:4c:0b:26:6b:6c:65:e6:6f:75:
                    90:27:e6:e7:80:76:2e:f1:76:5a:00:f1:3f:7c:fc:
                    74:9a:38:42:3d:a7:30:05:db:9c:db:e4:15:fa:03:
                    a8:d5:c5:fd:ec:cd:22:21:a2:28:0d:79:6b:02:67:
                    a8:fa:3a:e4:8e:1d:70:2d:9b:cd:d8:cf:c8:6b:dd:
                    23:a3:30:a2:b3:a3:4e:54:42:21:64:e3:87:40:4a:
                    8d:a2:cf:4a:2d:fa:56:9a:75:31:cc:db:f4:01:7f:
                    be:0d:0e:ea:50:ce:4a:b5:5b:21:23:83:29:7f:38:
                    ed:af:f8:31:19:9b:39:2a:99:47:a1:86:91:a6:98:
                    c6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AD:15:EA:AA:6D:73:C9:50:42:85:61:94:B4:82:87:C8:E5:08:31
            X509v3 Authority Key Identifier:
                keyid:D0:CA:3C:0B:19:6F:DE:0B:A7:4C:14:87:BD:CB:9C:5F:A0:53:66:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mo8Cxlv3gunTBSHvcucX6BTZks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/81024f-5171-47c4-b5ca-6b63331eff02/1/0Mo8Cxlv3gunTBSHvcucX6BTZks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:ca:b0:62:50:3a:c6:cc:10:80:62:54:fa:d7:ed:b8:58:
         d4:8a:a8:2c:36:2a:a4:86:1b:9c:d0:80:62:38:7e:26:88:7b:
         34:ad:51:60:b5:ef:62:2e:be:c5:18:50:07:c1:47:0e:bc:cd:
         70:e1:65:a1:4e:9d:5e:0b:7f:27:bc:f6:a5:91:6d:32:5b:4d:
         fd:18:3d:14:24:a5:ae:d3:fa:db:bf:4b:50:02:06:f7:95:f3:
         ac:65:41:a8:f2:32:33:93:e2:63:f1:86:61:be:c2:df:0a:ce:
         27:a3:66:03:ff:ff:4a:54:cf:c5:39:3d:2c:fb:cc:6f:11:8f:
         da:da:51:72:aa:ea:53:af:4d:40:ec:1c:7e:71:d7:b5:21:6e:
         06:79:53:1a:50:c4:e6:d9:92:f8:0a:3c:58:35:7f:81:d9:63:
         45:74:ec:39:5f:d6:f6:c4:06:e4:90:69:d4:06:fd:b3:a3:f1:
         6e:55:d9:28:ce:e3:e2:6a:5c:03:c5:06:53:c6:56:81:5f:e1:
         a1:f8:da:f2:b0:a2:4e:f0:4c:4e:70:c0:a8:b9:12:69:f6:e9:
         ef:35:4f:94:e0:7b:6c:f4:5b:24:3c:fe:00:40:72:17:80:f3:
         2b:29:72:c7:fe:a8:b1:f5:75:f8:e7:0b:cf:b8:9d:0c:96:f2:
         79:06:85:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:10 2026 by rpki-client