Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File:                     8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier:          tV/USV0rz0kortU4sQQoXC1XeyaBJIlgdIrJPRY1HuY=
Subject key identifier:   FD:62:3F:38:F2:2A:B9:BB:8E:F1:9C:30:A7:F4:35:A5:02:65:7A:AA
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer:       /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial:       019F84567AF5D94926AB15808962DA7C47D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number:          0188
Signing time:             Tue 21 Jul 2026 11:01:27 +0000
Manifest this update:     Tue 21 Jul 2026 11:01:27 +0000
Manifest next update:     Wed 22 Jul 2026 11:01:27 +0000
Files and hashes:         1: 8vDOKUXeXrXfB7FIVIEsoexlc_o.roa (hash: KSylCaUKpGQXa3joZ6jUjIIRkIXsAz2dCj4F/Ps3lIU=)
                          2: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: Foza7PaZzE4eHZR5PIvLXNFdHpNk1w7eI9VJ1lNQUbA=)
                          3: REeRVE2BHlUQOrHYK0avI7f1KsM.roa (hash: iIA7Y3pjdko5O7mah9jZC3yhvjhhU49aDz0nseqXqBs=)
                          4: igT8r97WV-3UNf1fba-MFt6vOdU.roa (hash: EbT+sEdtu5O1OCr4tXm7a0c8FNl3lVWvt297f2z5r0E=)
                          5: ojrMPx1-tQNbAF4hMIUgHuBaYeE.roa (hash: F2Akw9SRKWHNYtCBe57Z5/dMgA6NRuzoGi2Gdg4KMiM=)
                          6: rwXEiTUzr2cC_wcUrEu_AWGOTCQ.roa (hash: +rsAvEAL9D5NNcOL1/XKA5cCnpcH/4Mvf9lHJhe5Utw=)
                          7: vz24JIB0iwK_UVkxA_6qb3tRweE.roa (hash: PeJH8Li2K6OgNXao1ry554nMTXg3ZealgUvmB39ZI2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:56:7a:f5:d9:49:26:ab:15:80:89:62:da:7c:47:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
        Validity
            Not Before: Jul 21 11:01:27 2026 GMT
            Not After : Jul 22 11:01:27 2026 GMT
        Subject: CN=fd623f38f22ab9bb8ef19c30a7f435a502657aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:0f:e3:b9:d2:ba:9c:d4:09:18:e5:f0:9d:
                    a8:8d:3d:14:3f:8a:cb:82:81:3e:8a:71:82:be:d3:
                    4f:fa:83:64:d3:9f:b3:9d:36:97:95:dd:b4:13:9e:
                    01:78:2e:a5:86:8c:82:2b:43:bd:57:a7:d9:b1:ad:
                    0a:21:d8:90:b8:39:f9:16:24:a2:9e:cf:ae:ab:c3:
                    4b:07:1f:a0:37:37:b7:1d:e1:a2:3b:4e:b2:e6:7f:
                    e7:d9:6c:68:35:65:a5:40:95:9a:d3:93:e3:8f:f7:
                    19:dc:4a:54:8f:af:05:2f:b2:65:c4:42:85:ab:3e:
                    d7:bd:fb:47:c1:7d:8a:f8:71:d4:43:11:48:41:e6:
                    92:ae:89:fe:5f:a2:f2:64:c5:60:88:fc:d9:a1:bf:
                    ec:07:76:21:e3:13:0f:47:00:94:8f:12:57:fe:6e:
                    4e:58:38:4a:9b:dd:c2:39:e0:b1:5d:45:d2:47:28:
                    84:f8:a0:64:10:d4:7e:e4:10:07:ab:16:3b:03:08:
                    3f:e2:85:fa:c3:57:2b:91:7c:6c:b0:d1:0a:46:ff:
                    c8:b4:d4:75:a2:54:51:51:b1:5b:05:60:13:e0:6a:
                    4d:75:dd:20:59:19:bd:58:51:43:49:e4:47:16:27:
                    ec:71:fc:37:56:a2:a6:8f:dd:d6:46:54:ac:4b:78:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:62:3F:38:F2:2A:B9:BB:8E:F1:9C:30:A7:F4:35:A5:02:65:7A:AA
            X509v3 Authority Key Identifier:
                keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:86:a3:bf:65:7a:5a:9a:a2:a2:4f:69:12:73:4d:68:28:29:
         3a:f8:8d:26:ed:ff:79:05:57:2c:71:fa:c2:98:ea:42:63:79:
         40:e8:8b:ef:81:5d:4c:c6:aa:df:84:3d:bc:73:06:94:6b:ed:
         cf:ea:27:74:80:9e:0a:e7:08:30:af:42:2c:b4:57:9d:a0:78:
         88:9b:aa:95:8b:f2:6b:9d:79:0b:9f:3d:60:30:4a:1f:45:38:
         82:72:b3:a7:55:85:7a:e1:7d:33:5e:af:59:94:c3:52:ec:08:
         d8:0f:cc:0c:f1:a6:e3:b9:9a:f7:a5:a5:f9:38:6a:21:64:f7:
         71:98:a2:33:e1:2f:6b:b6:49:2a:97:09:69:06:40:c3:86:c2:
         89:34:43:24:88:4f:6d:77:67:ae:c1:33:c0:37:b3:38:09:ed:
         d0:9d:db:ea:3c:e5:54:43:16:62:6a:16:2b:41:0f:aa:f6:8f:
         5b:a8:6f:12:70:c9:8b:0d:b4:48:18:ee:dd:1f:89:86:eb:75:
         e1:cd:dc:55:0d:23:04:85:a0:6c:b7:ea:a8:85:f0:de:06:74:
         9f:1a:1b:75:bd:46:00:a0:45:52:48:93:58:ee:df:9f:87:38:
         f8:72:84:a7:69:19:74:5f:ea:af:49:12:14:a5:39:f5:74:51:
         0d:60:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:34:08 2026 by rpki-client