Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File:                     n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier:          iytk+ZRHf6HGovIYkVnDgz8284ArZtLW0FZeimAB3kI=
Subject key identifier:   F6:61:AB:DA:58:8E:3C:8A:13:96:6E:4E:E5:C5:66:FF:8B:DE:1C:F5
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer:       /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial:       019F837A0D8338C17BF71B16583EE0E290B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number:          04E8
Signing time:             Tue 21 Jul 2026 07:00:41 +0000
Manifest this update:     Tue 21 Jul 2026 07:00:41 +0000
Manifest next update:     Wed 22 Jul 2026 07:00:41 +0000
Files and hashes:         1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: 78NKw8p7CX0apjIXtsGduc7u2My7fSofFVAetamT0c4=)
                          2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:7a:0d:83:38:c1:7b:f7:1b:16:58:3e:e0:e2:90:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
        Validity
            Not Before: Jul 21 07:00:41 2026 GMT
            Not After : Jul 22 07:00:41 2026 GMT
        Subject: CN=f661abda588e3c8a13966e4ee5c566ff8bde1cf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:9c:70:9f:39:4b:cf:f0:4b:27:e4:bc:c0:
                    b1:80:7c:37:80:57:23:b2:66:53:9c:8d:f2:a3:7b:
                    d6:2f:3c:20:8e:ff:40:b3:1f:39:4e:5b:47:56:b5:
                    d1:76:d6:64:fd:98:fc:f9:1e:45:83:9b:5e:42:07:
                    4e:c6:a0:b4:e6:06:83:8b:1f:6d:f8:51:18:ca:58:
                    52:5d:9e:2a:22:cc:2e:10:53:96:e2:2a:a1:56:31:
                    97:59:1f:e4:88:e8:e9:5f:1d:c2:e3:9c:1f:0f:ed:
                    52:7c:8a:65:74:b0:e3:0f:16:15:69:2a:18:b9:36:
                    fa:0b:6d:33:76:72:14:ec:69:32:72:87:34:d1:d2:
                    50:3c:73:9c:10:86:3b:c5:bf:c2:57:db:6e:1d:c6:
                    4a:d8:c4:57:8e:00:0c:a6:18:e7:42:2b:21:90:66:
                    56:c4:d3:ed:10:46:30:08:8c:1a:66:3d:ea:b7:e6:
                    86:38:20:93:e6:af:a5:15:84:ab:3d:51:69:72:79:
                    44:6c:ad:35:f1:a1:76:1d:f0:17:39:5e:93:56:3e:
                    40:7f:73:32:0a:3a:08:04:75:08:42:e8:2a:75:4d:
                    32:a4:ff:d0:dd:fb:5f:fb:62:c0:95:08:70:23:b9:
                    84:c8:c8:cb:07:be:b9:05:37:6d:1c:52:07:ac:90:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:61:AB:DA:58:8E:3C:8A:13:96:6E:4E:E5:C5:66:FF:8B:DE:1C:F5
            X509v3 Authority Key Identifier:
                keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:59:a4:a2:4a:92:d0:ed:86:97:5c:32:64:d2:87:4e:ff:2e:
         2b:bf:9b:7f:c6:e4:4b:e1:6a:50:0e:46:eb:48:09:51:93:64:
         9f:f8:e5:15:b2:b6:d2:5a:4a:8e:bf:0f:2b:af:e1:32:37:03:
         e2:cf:0e:f2:92:2d:df:fd:77:6c:b7:7c:de:2c:fc:66:b1:5c:
         c2:8b:56:8b:51:21:74:39:c3:72:64:57:ee:b4:92:8c:c6:51:
         bc:3d:a8:01:8b:e6:93:8d:e5:35:de:db:55:a1:32:d5:b8:da:
         a8:98:f4:69:c0:10:a5:32:ca:83:98:bf:17:bc:3b:2b:df:46:
         71:47:63:c4:f8:7e:fb:1b:82:4b:bb:0e:31:36:cb:d4:ca:f7:
         6d:3c:20:02:71:7e:09:a5:01:05:35:8f:5d:ff:40:ce:0e:ab:
         1b:ae:57:27:dc:47:4e:96:45:b8:09:ab:5b:46:5d:fd:d1:00:
         b9:78:aa:2d:f7:09:11:69:0a:5a:02:12:ed:2b:b7:92:c0:8e:
         af:3f:4b:b6:14:1f:f2:01:a2:31:fb:96:3c:c7:18:d3:8b:c7:
         f3:52:42:ba:df:a3:9f:6d:f0:31:4c:9f:90:5f:30:1a:d3:db:
         f5:1c:b5:cf:d2:ef:78:02:25:e1:86:67:66:8e:eb:98:41:e4:
         4b:b7:01:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:40:55 2026 by rpki-client