Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File:                     8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier:          3h7ja1ZMMqkXMJx9fiNocG/XGXud9LkmM9PQFiEEpMs=
Subject key identifier:   4C:0A:68:06:3E:BE:FA:59:BC:11:20:A7:54:D4:8F:89:0B:2F:E6:F5
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer:       /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial:       019F916D045BA27B7483A2839F8C85BD63EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number:          0822
Signing time:             Fri 24 Jul 2026 00:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:08 +0000
Files and hashes:         1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: bjQpFacmBEScRlCALtbBo3lVV7ehT7TS7ME/wYhQmHY=)
                          2: l17vdHF4x4HHoIdKAxBn3NY8F0c.roa (hash: RAFi309N00rxNtnf9we0njxeYbrg65eo2Zw5ZnR4sRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:04:5b:a2:7b:74:83:a2:83:9f:8c:85:bd:63:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
        Validity
            Not Before: Jul 24 00:01:08 2026 GMT
            Not After : Jul 25 00:01:08 2026 GMT
        Subject: CN=4c0a68063ebefa59bc1120a754d48f890b2fe6f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e1:b6:25:24:f1:9c:f7:81:d3:07:ae:4e:98:
                    73:1c:fb:f7:d5:af:91:90:61:51:2e:16:6d:e3:a7:
                    8f:90:e1:2b:68:d7:d1:47:92:2f:9c:41:1f:16:d2:
                    c2:94:13:4c:86:4b:c1:8d:64:e2:87:f3:5c:97:9e:
                    52:d2:38:69:dc:4e:6d:16:27:f7:32:32:bf:03:1a:
                    96:28:9b:21:58:02:25:5e:4a:43:d6:a7:fc:6f:87:
                    71:22:4c:19:0c:51:7d:c7:11:f9:4e:0f:22:f4:56:
                    76:f2:ed:e0:e3:f7:12:ce:37:96:5a:0f:05:de:95:
                    e3:02:32:89:fb:94:2e:de:74:c3:80:b1:5b:1f:f0:
                    78:d1:83:54:21:37:7c:18:ee:81:67:83:fd:03:69:
                    51:1a:73:23:a5:b2:67:a7:3f:43:2c:86:79:2c:8e:
                    72:52:eb:4f:e1:f0:5d:16:e3:5c:71:99:ac:c6:2e:
                    ae:9e:72:73:c2:94:88:03:3a:c4:69:f3:c7:6a:fd:
                    96:82:ff:2f:0d:e6:d8:21:3a:8e:53:38:8d:a9:6b:
                    0d:74:40:b7:fb:6d:2d:e1:37:ea:28:21:f6:89:8d:
                    b7:90:f6:ef:dc:75:48:0a:20:e3:21:a5:b2:24:fd:
                    88:d3:f3:6d:5d:3f:43:48:ae:11:09:60:7a:b2:9c:
                    cd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0A:68:06:3E:BE:FA:59:BC:11:20:A7:54:D4:8F:89:0B:2F:E6:F5
            X509v3 Authority Key Identifier:
                keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c9:1e:5c:98:87:23:f9:d0:64:bf:e0:ff:47:7c:4c:61:7d:
         2d:d4:ac:2f:e7:c5:c1:cb:c3:01:3e:cb:4a:02:88:a7:33:91:
         b3:d6:bc:ff:8d:e8:28:55:69:ef:4f:b5:2e:50:57:4a:ce:80:
         ce:dc:62:0d:70:13:c5:04:4f:da:57:ea:77:ab:48:8e:3d:62:
         ec:11:02:27:55:9e:82:7f:7a:c4:86:c4:ee:20:56:46:44:ba:
         36:46:79:5c:07:00:b9:bc:6b:7d:7f:eb:8c:b2:be:9e:7b:73:
         87:9f:f3:b4:b1:9c:72:9a:77:3a:33:ba:b3:e9:e7:90:10:79:
         b7:0d:e9:f5:d0:f1:2a:85:8f:9b:b1:61:9c:d1:2a:ec:c8:5d:
         59:72:a1:82:8c:e3:66:b4:8c:69:f3:f7:a1:94:62:50:a0:b9:
         fc:09:b6:8c:a8:35:5e:d1:f1:58:ad:20:01:a2:a2:bd:b1:7c:
         74:67:68:ee:ae:45:bc:e9:85:c9:05:dd:34:ef:f5:ff:2d:c9:
         4f:8c:e0:8b:8d:88:b1:2d:c1:6a:90:b7:db:0d:f3:2d:8a:92:
         89:f2:25:51:c1:ad:4e:73:66:84:c1:d6:78:3d:7f:5b:f9:55:
         ec:26:6f:02:09:2e:ee:fd:82:8d:81:2a:8b:28:72:c1:a4:5d:
         6b:9d:ce:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:30 2026 by rpki-client