Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File:                     c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier:          ulcN2h8XsPrPHgudHpOse2AkBM8sRC3mbNq0XHeuzlU=
Subject key identifier:   BC:16:68:1D:4D:8B:10:C9:BE:3B:0B:36:5D:DB:45:B5:B4:70:00:B4
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer:       /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial:       019F90C7A84DB8CAD6DBE2CF01915A53C0C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number:          06DA
Signing time:             Thu 23 Jul 2026 21:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:31 +0000
Files and hashes:         1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
                          2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: ZzCpqRc0g9fR6OKnJGeNwUVRCukVcFkuPJnbNY98pGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a8:4d:b8:ca:d6:db:e2:cf:01:91:5a:53:c0:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
        Validity
            Not Before: Jul 23 21:00:31 2026 GMT
            Not After : Jul 24 21:00:31 2026 GMT
        Subject: CN=bc16681d4d8b10c9be3b0b365ddb45b5b47000b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:02:61:57:a6:19:bb:d9:2b:85:06:64:ff:8b:
                    83:79:4a:46:64:bb:d9:91:3c:ca:7a:96:a0:66:dd:
                    4f:26:d5:4f:f4:cc:e6:41:11:cf:e6:2b:42:88:5e:
                    af:b5:fe:9f:5a:5a:70:5c:79:1f:e4:0c:02:e5:bc:
                    03:ed:43:ff:01:36:b1:dd:4b:c7:69:fe:a7:95:8c:
                    57:73:d4:a4:2a:3c:59:6e:ee:bc:28:ba:66:15:d8:
                    8c:24:50:4d:df:83:39:c6:8c:b7:e4:9c:e9:f4:3f:
                    ad:59:f7:69:c5:11:4a:86:f3:45:1c:5d:01:2e:48:
                    6e:49:fb:86:49:2f:1f:57:d7:3c:5f:b3:5c:fb:42:
                    94:2f:60:e4:e4:45:14:d5:03:0b:be:e5:bd:1c:41:
                    49:22:08:d6:e9:f8:08:5e:2b:b1:74:a5:78:41:b2:
                    3f:89:d0:63:b4:95:07:fb:8c:19:30:15:06:85:86:
                    02:a3:9d:77:10:6a:70:e3:8e:c1:5c:a8:59:8d:32:
                    74:b6:e3:2a:ed:b9:cc:5a:5c:54:3b:3d:a5:cc:65:
                    24:f7:a5:3f:e5:fa:71:db:f3:c8:c4:3b:71:3a:bd:
                    6f:90:ac:2f:b3:3a:98:73:37:41:3a:50:b6:08:5b:
                    80:1f:df:5b:2e:0d:0f:9e:d6:57:e1:fb:9b:51:88:
                    f8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:16:68:1D:4D:8B:10:C9:BE:3B:0B:36:5D:DB:45:B5:B4:70:00:B4
            X509v3 Authority Key Identifier:
                keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:be:98:4b:3e:31:0d:59:f5:b8:cc:a8:70:89:d3:b3:5e:2e:
         1d:db:6f:79:4e:bf:13:40:b8:5d:6b:7e:da:04:ef:79:76:2b:
         06:ea:51:d3:f4:c3:4b:98:1c:87:92:ff:ab:1b:10:b7:39:fc:
         7c:0d:10:22:15:30:9a:4b:c4:ac:33:e6:a3:ea:b0:c5:bf:e2:
         7d:cd:c0:a4:36:39:80:b1:c4:d0:f5:81:7d:8e:cf:19:d0:bb:
         b2:6c:9c:49:83:5d:36:f0:26:e2:95:d1:b3:ef:57:f8:41:4a:
         df:51:2d:31:b3:54:c9:dc:ee:d7:86:27:ab:1d:b0:6a:ca:e8:
         93:3d:f3:94:74:f9:93:83:11:be:56:fa:e1:92:10:27:fb:a4:
         30:55:68:b6:18:9b:2a:47:ef:32:d0:86:83:20:8f:98:59:b9:
         16:42:bc:37:04:c1:99:1c:07:92:45:4f:0b:2d:7d:a6:44:4c:
         ee:5f:0f:02:73:40:15:92:09:c0:46:1b:7e:22:45:eb:7d:f7:
         47:4d:15:5b:39:16:32:80:f4:b7:42:1b:16:49:00:e6:59:30:
         72:c1:2c:d6:37:00:2e:e7:86:1e:6c:51:ea:8b:42:81:d9:61:
         a4:fa:3d:55:5f:98:a0:91:fc:85:92:e2:51:9c:2e:da:b3:1c:
         9a:6a:6e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx6hNuMrW2+LPAZFaU8DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczY2ZlMTFlOGE3MDkzYmRjOTViYzAxZTIwZGI0Mzc2ZTIy
YWE1MTYwHhcNMjYwNzIzMjEwMDMxWhcNMjYwNzI0MjEwMDMxWjAzMTEwLwYDVQQD
EyhiYzE2NjgxZDRkOGIxMGM5YmUzYjBiMzY1ZGRiNDViNWI0NzAwMGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wJhV6YZu9krhQZk/4uDeUpGZLvZ
kTzKepagZt1PJtVP9MzmQRHP5itCiF6vtf6fWlpwXHkf5AwC5bwD7UP/ATax3UvH
af6nlYxXc9SkKjxZbu68KLpmFdiMJFBN34M5xoy35Jzp9D+tWfdpxRFKhvNFHF0B
LkhuSfuGSS8fV9c8X7Nc+0KUL2Dk5EUU1QMLvuW9HEFJIgjW6fgIXiuxdKV4QbI/
idBjtJUH+4wZMBUGhYYCo513EGpw447BXKhZjTJ0tuMq7bnMWlxUOz2lzGUk96U/
5fpx2/PIxDtxOr1vkKwvszqYczdBOlC2CFuAH99bLg0PntZX4fubUYj4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwWaB1NixDJvjsLNl3bRbW0cAC0MB8GA1UdIwQY
MBaAFHPP4R6KcJO9yVvAHiDbQ3biKqUWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYt
MWIxMTAwNzMxNDQ4LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYWY5ZjMtMGU0OC00YzQ3LWJjMjYtMWIxMTAwNzMxNDQ4
LzEvYzhfaEhvcHdrNzNKVzhBZUlOdERkdUlxcFJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXb6YSz4x
DVn1uMyocInTs14uHdtveU6/E0C4XWt+2gTveXYrBupR0/TDS5gch5L/qxsQtzn8
fA0QIhUwmkvErDPmo+qwxb/ifc3ApDY5gLHE0PWBfY7PGdC7smycSYNdNvAm4pXR
s+9X+EFK31EtMbNUydzu14Ynqx2wasrokz3zlHT5k4MRvlb64ZIQJ/ukMFVothib
KkfvMtCGgyCPmFm5FkK8NwTBmRwHkkVPCy19pkRM7l8PAnNAFZIJwEYbfiJF6333
R00VWzkWMoD0t0IbFkkA5lkwcsEs1jcALueGHmxR6otCgdlhpPo9VV+YoJH8hZLi
UZwu2rMcmmpucg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:25 2026 by rpki-client