Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
File:                     8l2dskSP6XudF6RL5dZEhI-gGOE.mft (raw, json)
Hash identifier:          m9vbsy9nPEAquxT5yBaQ9OKWROPUDFOPg8OddjWxnt4=
Subject key identifier:   1E:89:EA:9E:23:72:DF:D5:27:7E:09:2F:47:4E:C4:90:B2:1C:75:98
Authority key identifier: F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1
Certificate issuer:       /CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
Certificate serial:       019F90C7C46C903A92CCC3B2BF0FE86C7FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 21:00:38 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:38 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:38 +0000
Files and hashes:         1: 8l2dskSP6XudF6RL5dZEhI-gGOE.crl (hash: 69hjDBZemGXy/SnXCUz8rslXFj3VlOauy/LyN7VKyZo=)
                          2: SmR3reVpg9Oftt2wG6VeqB7WbmE.roa (hash: 0SJZoaTugeFDErq1aPzr3jWd7TCUqCyvEDw1XhqHPJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:c4:6c:90:3a:92:cc:c3:b2:bf:0f:e8:6c:7f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f25d9db2448fe97b9d17a44be5d644848fa018e1
        Validity
            Not Before: Jul 23 21:00:38 2026 GMT
            Not After : Jul 24 21:00:38 2026 GMT
        Subject: CN=1e89ea9e2372dfd5277e092f474ec490b21c7598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:40:73:7d:f0:59:40:3e:86:fc:a2:78:4f:
                    d6:a0:9c:d8:df:65:93:ba:38:77:ad:c5:82:dd:63:
                    b6:ff:4c:f8:4a:c3:19:f3:e9:6a:23:4c:47:c5:fe:
                    53:e0:f7:35:df:1f:e6:73:88:53:36:67:6a:c3:54:
                    7d:7b:e1:36:54:7a:27:a2:d7:89:70:2b:b5:56:5b:
                    e8:3f:f8:8f:73:64:81:f8:36:ba:7a:f3:59:47:29:
                    4e:02:8e:c2:60:29:0a:3a:96:b7:f8:a5:94:ed:8b:
                    c7:b5:f3:fb:ee:a6:12:b4:4e:2b:3f:40:f7:e9:b9:
                    70:15:cc:fe:9a:07:a3:5d:ea:76:e4:d4:fb:0f:61:
                    4a:46:85:2b:2f:ca:0b:77:33:60:5e:ac:9a:9e:26:
                    2a:93:ce:f7:00:ae:bd:29:ba:80:01:c0:7b:31:68:
                    93:2e:50:82:5e:43:e9:82:3b:9c:0a:87:13:5d:30:
                    65:e9:d4:1d:c4:a0:c8:53:79:b6:b8:52:56:f6:9e:
                    56:96:24:c7:0a:17:80:56:e0:46:43:91:7e:88:da:
                    84:4d:63:e4:d2:60:44:ea:40:a1:66:42:1e:d6:54:
                    87:33:96:87:84:53:d6:20:07:90:a6:a2:0c:df:17:
                    9c:fd:e1:ba:80:14:cf:68:98:b1:42:14:08:2d:38:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:89:EA:9E:23:72:DF:D5:27:7E:09:2F:47:4E:C4:90:B2:1C:75:98
            X509v3 Authority Key Identifier:
                keyid:F2:5D:9D:B2:44:8F:E9:7B:9D:17:A4:4B:E5:D6:44:84:8F:A0:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l2dskSP6XudF6RL5dZEhI-gGOE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/51608f-fd4b-4268-a6e3-5ecb21fcfa75/1/8l2dskSP6XudF6RL5dZEhI-gGOE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:75:de:d5:ab:29:72:72:00:bd:89:3d:57:cc:10:90:1f:a1:
         78:4f:f6:7c:07:bf:9c:96:4d:ab:12:74:66:4a:16:1a:3f:0f:
         ac:d5:36:53:2f:bc:52:37:cc:72:a2:f8:4f:19:d7:4e:36:3f:
         5b:29:46:65:24:34:ae:8c:94:06:ba:f6:fa:fe:fe:14:ed:8f:
         6b:88:02:14:ce:a2:d7:cb:35:78:f3:5d:b3:16:a2:0b:de:e0:
         40:a2:df:6a:d3:ad:27:4b:7f:b0:20:85:73:67:70:fe:18:97:
         2b:f2:78:c8:33:39:eb:8c:68:38:7f:52:10:7d:bb:7d:90:bd:
         00:15:dc:ec:be:cc:a8:dd:69:f8:4d:35:89:22:eb:f7:5e:13:
         64:06:c9:3a:b2:6b:14:3f:e7:b6:0a:f7:9a:d3:32:4c:a5:1e:
         93:5b:ae:60:09:21:2b:e4:ff:02:ce:d7:8d:21:d3:c1:f4:01:
         94:8f:6b:9f:99:f1:f7:0a:43:38:de:47:4a:8d:ef:66:b2:c6:
         61:79:0e:cb:72:a1:f3:95:08:a1:c8:75:f4:52:ab:c7:02:d6:
         43:c7:cc:f2:18:d3:d0:0d:3a:fe:4f:2b:f0:6b:89:65:06:0e:
         c5:79:5f:7a:ad:8c:7e:bc:91:61:b5:0b:55:cb:23:4d:25:fa:
         04:ae:0c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx8RskDqSzMOyvw/obH/PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWQ5ZGIyNDQ4ZmU5N2I5ZDE3YTQ0YmU1ZDY0NDg0OGZh
MDE4ZTEwHhcNMjYwNzIzMjEwMDM4WhcNMjYwNzI0MjEwMDM4WjAzMTEwLwYDVQQD
EygxZTg5ZWE5ZTIzNzJkZmQ1Mjc3ZTA5MmY0NzRlYzQ5MGIyMWM3NTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh1Ac33wWUA+hvyieE/WoJzY32WT
ujh3rcWC3WO2/0z4SsMZ8+lqI0xHxf5T4Pc13x/mc4hTNmdqw1R9e+E2VHonoteJ
cCu1VlvoP/iPc2SB+Da6evNZRylOAo7CYCkKOpa3+KWU7YvHtfP77qYStE4rP0D3
6blwFcz+mgejXep25NT7D2FKRoUrL8oLdzNgXqyaniYqk873AK69KbqAAcB7MWiT
LlCCXkPpgjucCocTXTBl6dQdxKDIU3m2uFJW9p5WliTHCheAVuBGQ5F+iNqETWPk
0mBE6kChZkIe1lSHM5aHhFPWIAeQpqIM3xec/eG6gBTPaJixQhQILTiCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6J6p4jct/VJ34JL0dOxJCyHHWYMB8GA1UdIwQY
MBaAFPJdnbJEj+l7nRekS+XWRISPoBjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMt
NWVjYjIxZmNmYTc1LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81MTYwOGYtZmQ0Yi00MjY4LWE2ZTMtNWVjYjIxZmNmYTc1
LzEvOGwyZHNrU1A2WHVkRjZSTDVkWkVoSS1nR09FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXXe1asp
cnIAvYk9V8wQkB+heE/2fAe/nJZNqxJ0ZkoWGj8PrNU2Uy+8UjfMcqL4TxnXTjY/
WylGZSQ0royUBrr2+v7+FO2Pa4gCFM6i18s1ePNdsxaiC97gQKLfatOtJ0t/sCCF
c2dw/hiXK/J4yDM564xoOH9SEH27fZC9ABXc7L7MqN1p+E01iSLr914TZAbJOrJr
FD/ntgr3mtMyTKUek1uuYAkhK+T/As7XjSHTwfQBlI9rn5nx9wpDON5HSo3vZrLG
YXkOy3Kh85UIoch19FKrxwLWQ8fM8hjT0A06/k8r8GuJZQYOxXlfeq2MfryRYbUL
VcsjTSX6BK4MOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:43 2026 by rpki-client