Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
File:                     8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft (raw, json)
Hash identifier:          uLGwHxP8IBuuEaDdcImmjkI0voGD2iM74TSe3jDIoY0=
Subject key identifier:   C7:37:1B:11:B0:1E:72:18:67:8F:46:7D:7D:55:87:03:06:9A:0B:FE
Authority key identifier: F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A
Certificate issuer:       /CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
Certificate serial:       019F8F7E28A2790E3ED4C9F0EF45BA192586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
Manifest number:          0744
Signing time:             Thu 23 Jul 2026 15:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:37 +0000
Files and hashes:         1: 8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl (hash: RysG4HX0DB8CQwi60+rK4HzZ103k37gi/C9aQHA81dQ=)
                          2: n70et20FpRZ0Oftj2S9UBmLkpLw.roa (hash: /VTb10e5Be/TJ6TGNlem6e21ZHMxwrWVWKFFEq6/U1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:28:a2:79:0e:3e:d4:c9:f0:ef:45:ba:19:25:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ec6ce24301db2e51dd536d5c0c15cf970c722a
        Validity
            Not Before: Jul 23 15:00:37 2026 GMT
            Not After : Jul 24 15:00:37 2026 GMT
        Subject: CN=c7371b11b01e7218678f467d7d558703069a0bfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:2c:7a:bb:e8:c2:e6:90:ed:3a:b4:f5:fb:
                    c0:e5:57:fe:be:64:ff:fa:ca:f9:a8:6e:54:20:38:
                    25:c1:22:7b:7b:52:c9:95:f7:fe:cd:51:da:68:0b:
                    42:1c:4a:24:14:1a:31:3a:81:6f:a4:0d:14:1c:b8:
                    b1:f4:30:36:ea:2d:48:04:c0:14:38:53:f3:00:d1:
                    d7:f1:79:c9:c9:3a:2a:1a:f3:b7:19:a2:3c:00:11:
                    42:1d:5b:31:a2:d1:04:68:5b:a6:7a:a6:49:fc:74:
                    34:5a:6e:7d:8e:67:64:eb:5c:86:12:61:ba:20:cd:
                    bf:15:0b:1b:25:b4:16:7c:e1:30:49:77:b0:46:1b:
                    80:1b:92:b1:07:a4:76:fd:ca:2d:bd:fd:17:b6:81:
                    1a:f1:35:3a:ac:fd:03:ed:b1:f4:14:f7:64:a8:97:
                    52:b0:e1:ff:2d:72:b6:18:57:d6:7c:32:6e:23:10:
                    bf:07:c4:42:38:15:b5:ce:f8:2f:58:25:32:0d:79:
                    ff:a7:b5:f3:09:cb:ee:44:37:bd:15:46:da:2d:f7:
                    83:a1:58:cc:62:99:6c:51:83:5c:6b:dc:06:10:88:
                    10:2c:34:11:15:5d:03:37:71:2a:00:38:7b:44:2b:
                    1e:34:c7:d5:29:72:08:5f:83:18:e4:39:db:56:50:
                    fb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:1B:11:B0:1E:72:18:67:8F:46:7D:7D:55:87:03:06:9A:0B:FE
            X509v3 Authority Key Identifier:
                keyid:F0:EC:6C:E2:43:01:DB:2E:51:DD:53:6D:5C:0C:15:CF:97:0C:72:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oxs4kMB2y5R3VNtXAwVz5cMcio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/a481e7-a777-4002-b882-65a294a1fbae/1/8Oxs4kMB2y5R3VNtXAwVz5cMcio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:82:af:7d:3d:62:43:f5:53:cc:d6:75:cc:6c:e5:17:be:b2:
         55:a3:af:96:8b:4b:68:c9:8d:58:70:54:ea:0a:65:47:e6:63:
         88:d2:d7:c6:ce:bf:ca:79:b4:42:73:4a:fd:e0:27:b2:b7:0b:
         07:b5:29:af:f0:f3:72:bf:61:3b:ca:b1:07:07:7b:27:14:2b:
         93:ce:18:fe:9f:bb:ae:0e:68:46:52:2e:fe:f2:53:ca:66:e5:
         6f:4c:ae:bd:c3:f3:9d:94:8c:02:38:ab:2d:21:d0:45:c6:8c:
         0f:e6:53:65:e2:a8:fc:38:68:11:a7:fd:a0:55:12:fc:7c:8f:
         17:46:6a:9e:73:16:53:52:b1:08:2a:93:d8:d1:c1:1c:75:12:
         8f:33:68:24:4b:67:ba:82:b5:25:c0:8c:2c:92:fc:d6:1e:6a:
         40:74:ab:c0:3d:75:52:35:cb:84:ac:ca:e5:37:09:79:6f:b1:
         4a:de:d9:fb:9c:d3:bc:4a:7c:41:88:a7:55:30:54:ca:b3:6a:
         fe:e6:52:79:86:3b:bd:bb:13:d0:34:cd:60:38:4e:15:79:cf:
         91:e8:fb:87:bb:ec:ee:b5:d7:be:85:83:28:db:8b:d8:db:81:
         68:b8:1c:b9:15:a4:d3:59:16:7b:64:41:2b:a7:95:e9:bb:8d:
         ea:34:9f:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfiiieQ4+1Mnw70W6GSWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZWM2Y2UyNDMwMWRiMmU1MWRkNTM2ZDVjMGMxNWNmOTcw
YzcyMmEwHhcNMjYwNzIzMTUwMDM3WhcNMjYwNzI0MTUwMDM3WjAzMTEwLwYDVQQD
EyhjNzM3MWIxMWIwMWU3MjE4Njc4ZjQ2N2Q3ZDU1ODcwMzA2OWEwYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcAservowuaQ7Tq09fvA5Vf+vmT/
+sr5qG5UIDglwSJ7e1LJlff+zVHaaAtCHEokFBoxOoFvpA0UHLix9DA26i1IBMAU
OFPzANHX8XnJyToqGvO3GaI8ABFCHVsxotEEaFumeqZJ/HQ0Wm59jmdk61yGEmG6
IM2/FQsbJbQWfOEwSXewRhuAG5KxB6R2/cotvf0XtoEa8TU6rP0D7bH0FPdkqJdS
sOH/LXK2GFfWfDJuIxC/B8RCOBW1zvgvWCUyDXn/p7XzCcvuRDe9FUbaLfeDoVjM
YplsUYNca9wGEIgQLDQRFV0DN3EqADh7RCseNMfVKXIIX4MY5DnbVlD7UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc3GxGwHnIYZ49GfX1VhwMGmgv+MB8GA1UdIwQY
MBaAFPDsbOJDAdsuUd1TbVwMFc+XDHIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODIt
NjVhMjk0YTFmYmFlLzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hNDgxZTctYTc3Ny00MDAyLWI4ODItNjVhMjk0YTFmYmFl
LzEvOE94czRrTUIyeTVSM1ZOdFhBd1Z6NWNNY2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4KvfT1i
Q/VTzNZ1zGzlF76yVaOvlotLaMmNWHBU6gplR+ZjiNLXxs6/ynm0QnNK/eAnsrcL
B7Upr/Dzcr9hO8qxBwd7JxQrk84Y/p+7rg5oRlIu/vJTymblb0yuvcPznZSMAjir
LSHQRcaMD+ZTZeKo/DhoEaf9oFUS/HyPF0ZqnnMWU1KxCCqT2NHBHHUSjzNoJEtn
uoK1JcCMLJL81h5qQHSrwD11UjXLhKzK5TcJeW+xSt7Z+5zTvEp8QYinVTBUyrNq
/uZSeYY7vbsT0DTNYDhOFXnPkej7h7vs7rXXvoWDKNuL2NuBaLgcuRWk01kWe2RB
K6eV6buN6jSflw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:51:29 2026 by rpki-client