Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          0p3SZvPxt8hgWh0P37Cn+9OUFgCTP5YgmtZVb0WrNt4=
Subject key identifier:   81:CF:EA:4F:02:7A:6B:91:B6:08:36:4C:3D:DC:9C:FB:14:86:BE:09
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       019F90C8272E720A3372C62CF94F902BFD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 21:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:04 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: v8P45q/uO0/YtuHeTEcB9AotLgpOvGPw01tOE96TVAY=)
                          2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:27:2e:72:0a:33:72:c6:2c:f9:4f:90:2b:fd:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Jul 23 21:01:04 2026 GMT
            Not After : Jul 24 21:01:04 2026 GMT
        Subject: CN=81cfea4f027a6b91b608364c3ddc9cfb1486be09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c2:3e:23:a4:78:cb:f6:aa:96:29:e9:f2:b1:
                    80:e9:03:85:b6:4e:67:ee:e0:01:02:2d:b0:6d:9b:
                    75:88:a4:85:de:a2:4b:1e:a8:ae:aa:fe:c0:87:a2:
                    bf:05:55:af:de:bd:4f:23:f5:25:24:f4:83:ef:eb:
                    3f:5b:f4:09:cc:ea:cd:0b:57:67:60:67:52:b8:2f:
                    00:73:74:e9:10:ce:c9:59:da:e3:75:5c:a2:2e:7b:
                    e6:d0:59:ea:dd:85:14:81:4e:22:d1:c4:6b:99:0d:
                    e7:15:71:12:2f:b2:e6:cf:a2:b3:33:85:67:69:61:
                    48:01:5e:0b:ee:8a:22:4c:7b:8f:bc:4f:ab:8e:24:
                    41:d5:d5:3d:22:1f:bf:67:a8:d0:1e:e4:37:e9:a2:
                    14:3b:07:b4:d4:8d:a9:fd:5c:29:08:bc:6f:cf:a7:
                    9f:bd:f6:a2:dd:51:d1:9d:0c:41:4a:fd:b6:d2:3f:
                    48:63:54:cc:6f:1d:73:b3:53:3b:b3:7a:72:82:21:
                    db:aa:9f:b8:c1:08:63:ec:24:fc:fe:fc:5b:73:40:
                    20:0c:f7:4d:aa:3d:b8:b3:89:98:fc:b6:40:7f:c0:
                    a9:5a:de:c6:bd:b8:4d:fc:15:30:57:1d:f8:fb:31:
                    68:d1:b8:5c:2b:3e:fd:2a:99:3b:f7:69:77:66:25:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CF:EA:4F:02:7A:6B:91:B6:08:36:4C:3D:DC:9C:FB:14:86:BE:09
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ac:13:0e:2e:d4:0d:db:e7:82:13:5a:2f:79:22:52:47:ce:
         a9:41:d3:71:55:2f:9c:cc:42:d9:88:db:96:54:23:01:60:fd:
         be:5f:bf:de:d2:a1:58:64:68:ec:d3:89:27:10:f3:dd:6b:cd:
         71:64:5d:6e:15:75:73:b6:a9:00:eb:1a:a8:ec:55:37:4c:df:
         3e:b8:d7:61:e8:71:49:14:ab:41:f9:dc:0a:4d:f6:69:22:ed:
         62:71:c8:99:26:f6:6a:10:1d:14:25:9d:0b:da:66:f0:fc:5e:
         d7:bd:4e:8c:4f:ca:85:79:7c:72:72:6d:3a:4c:e3:f9:2a:0d:
         95:27:dc:20:c1:b9:4c:23:21:16:3a:16:e2:3c:8f:7f:5a:70:
         4e:39:42:2e:4b:ef:97:63:ef:65:07:52:05:cb:da:0a:be:72:
         eb:5a:64:7a:0c:16:d5:d5:b9:2e:45:dc:7b:f9:64:87:06:01:
         73:bd:0a:d5:bd:1e:8f:f9:f6:1e:82:1a:a8:75:0b:98:a0:ca:
         e1:3a:65:a2:96:ee:9c:9b:92:99:b1:52:d5:00:ff:9a:30:eb:
         bf:f2:e0:e2:41:fb:15:d3:2a:2b:a0:d6:ab:6b:4b:94:ac:4f:
         d0:dc:ac:31:cb:24:31:aa:f8:76:ae:f4:73:21:0e:97:76:26:
         5f:2e:fc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:45 2026 by rpki-client