Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          hcycpqjdzkNbKRi1jHJupbAjA2rKHEJ+V68w33ps3EE=
Subject key identifier:   EF:EC:07:93:E6:A4:15:F8:CD:BC:8F:4F:10:2F:09:B0:F3:80:80:DB
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       019F86B2810DFAE95B4135A2FB2D738E3581
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          1656
Signing time:             Tue 21 Jul 2026 22:01:13 +0000
Manifest this update:     Tue 21 Jul 2026 22:01:13 +0000
Manifest next update:     Wed 22 Jul 2026 22:01:13 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: mNnLUfMX0/7yH0Cu0sVp+wvdxaSFW6/hWoJx3n0fZxU=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:b2:81:0d:fa:e9:5b:41:35:a2:fb:2d:73:8e:35:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Jul 21 22:01:13 2026 GMT
            Not After : Jul 22 22:01:13 2026 GMT
        Subject: CN=efec0793e6a415f8cdbc8f4f102f09b0f38080db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:aa:d0:5a:99:4a:b6:b1:24:03:e3:34:6a:09:
                    b9:57:22:0a:b4:b7:c5:f6:1c:6f:17:4d:9d:24:48:
                    aa:e5:09:46:01:bc:b1:33:4f:93:2a:46:35:7f:76:
                    4c:b3:14:d7:5f:f8:1c:f2:4c:30:bb:77:a6:4f:13:
                    45:7c:8e:1a:56:38:0f:3a:86:15:2f:6f:d3:31:41:
                    51:a9:db:d6:61:e4:8a:57:45:21:0d:25:be:42:37:
                    82:a4:d9:58:6c:12:09:27:e8:04:8b:b2:12:d3:4f:
                    32:76:6f:4f:0e:1f:47:09:41:ba:20:ca:cb:12:07:
                    c3:a5:66:5f:e1:f9:27:d5:be:31:df:9e:47:42:ce:
                    85:53:74:b8:73:b3:99:d6:32:9e:e6:54:92:0a:6f:
                    7d:42:b9:5d:f4:b9:f2:6e:f1:d3:97:c6:14:95:ac:
                    ba:94:dd:e5:44:e5:18:39:3d:b9:0e:fd:19:ee:8b:
                    20:c9:34:08:04:2f:9a:b5:d8:7b:62:bd:e0:f5:d1:
                    25:a6:94:93:ab:0c:6f:bf:ae:84:20:99:4c:1e:af:
                    02:75:9e:f9:43:0a:7f:b6:16:09:28:4b:ed:33:ea:
                    e0:cb:21:3a:1d:85:6e:6f:22:d6:ab:af:ac:84:08:
                    d4:99:a5:3e:0b:5d:2d:4e:66:9f:ec:cc:8f:4c:f9:
                    46:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EC:07:93:E6:A4:15:F8:CD:BC:8F:4F:10:2F:09:B0:F3:80:80:DB
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:49:cb:dd:23:f5:03:65:98:3e:b4:bd:d6:c3:b4:5b:f2:df:
         5a:c2:cc:3c:b5:2d:68:7b:8a:5f:b5:00:be:da:22:fe:99:e6:
         49:a6:66:ed:46:91:fa:a3:19:f1:f8:db:bd:57:57:cb:1f:ed:
         1e:b5:1c:2d:31:c9:a7:12:6d:6c:0d:ae:0b:59:88:bd:99:e5:
         af:b6:7b:56:ba:e8:d3:a8:63:4d:3f:08:0e:14:c9:81:4c:66:
         8d:9c:a4:a0:3e:c6:0d:00:5c:23:b8:bc:34:9e:15:3c:d5:49:
         f4:3a:92:27:31:3b:d0:83:b2:5f:a0:24:c3:80:d7:04:5d:03:
         b5:10:b8:8c:51:13:57:f5:c6:52:9d:2a:b5:36:9a:18:15:18:
         36:1d:29:82:b0:07:4d:2c:d3:1c:bb:2c:62:45:a4:cc:c9:71:
         fa:c3:57:5f:da:d5:52:d1:12:1c:1d:12:93:e8:c2:50:f1:d2:
         e5:cb:f8:1b:4a:be:f1:16:5e:50:5a:9a:81:9c:b2:af:d4:55:
         7b:35:79:05:87:3f:99:ee:ff:03:42:f7:a7:53:12:04:ac:68:
         2b:d9:61:9f:b5:f4:72:01:7f:1e:b6:4c:81:0f:b4:ea:79:82:
         bd:cb:15:e4:c0:6e:e7:83:d1:72:de:90:ed:dd:9d:02:6c:8d:
         d0:b7:0c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:23:48 2026 by rpki-client