Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
File:                     c8_hHopwk73JW8AeINtDduIqpRY.mft (raw, json)
Hash identifier:          /bRWyTseFDsZ6rd5CREmd354RAgd9Ar68fVZKgNK78g=
Subject key identifier:   62:29:54:C4:84:C0:4E:88:3D:82:1D:F1:9C:45:3D:C4:D1:89:5C:AB
Authority key identifier: 73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16
Certificate issuer:       /CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
Certificate serial:       019F8343260A99D005715B75E8CEF71F0824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
Manifest number:          06D3
Signing time:             Tue 21 Jul 2026 06:00:43 +0000
Manifest this update:     Tue 21 Jul 2026 06:00:43 +0000
Manifest next update:     Wed 22 Jul 2026 06:00:43 +0000
Files and hashes:         1: NcnGkdErOmMk_0NOiHBMY1BqThA.roa (hash: PgvTT7EFBgrWeXVoNUr6zZBzW+dMw+OFLBnU00RhurU=)
                          2: c8_hHopwk73JW8AeINtDduIqpRY.crl (hash: Bl0rLjCgiCrItWKs5Ih3WnractZgxrG4e3Eh83h2ASs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:43:26:0a:99:d0:05:71:5b:75:e8:ce:f7:1f:08:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73cfe11e8a7093bdc95bc01e20db4376e22aa516
        Validity
            Not Before: Jul 21 06:00:43 2026 GMT
            Not After : Jul 22 06:00:43 2026 GMT
        Subject: CN=622954c484c04e883d821df19c453dc4d1895cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:e2:14:9c:4b:1a:86:c9:1d:0b:73:6e:d4:
                    aa:fd:cc:43:38:b4:c7:e6:87:e2:0d:46:82:df:df:
                    80:45:ff:1d:58:4c:04:ba:10:28:81:64:a4:d6:21:
                    38:f3:42:82:3d:83:36:7f:ba:03:8c:12:05:06:c2:
                    5a:f0:1b:49:8e:5b:c0:ab:c7:03:c1:c0:4e:ba:f0:
                    94:30:0f:73:90:c5:31:bb:cb:11:53:38:50:09:1b:
                    55:8c:a9:ca:2d:bb:a0:ff:39:1d:36:95:2e:28:83:
                    4f:bf:20:4e:45:8b:24:98:32:cd:cb:1d:c7:8e:ea:
                    0a:86:c6:f2:f1:5a:6c:21:7f:ae:c6:ff:81:72:a4:
                    37:a3:c5:17:2c:89:34:c2:1d:d5:88:76:12:52:a9:
                    0e:c5:0f:60:24:aa:93:ea:13:95:db:7e:15:31:de:
                    fa:58:57:95:8d:59:32:fb:2c:38:73:9e:48:a8:15:
                    3e:4a:15:ea:04:29:e5:91:f8:38:f3:77:4b:76:33:
                    02:dd:62:5d:8b:d3:95:67:43:c3:35:e2:3b:12:ae:
                    07:53:6b:a3:e2:cc:f9:b6:a5:1d:91:af:96:ca:f4:
                    fd:fa:78:e5:33:ce:4d:07:1f:f2:26:d2:dc:d1:e8:
                    f4:e7:23:7a:dc:de:d0:76:57:99:0d:72:b9:72:25:
                    60:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:54:C4:84:C0:4E:88:3D:82:1D:F1:9C:45:3D:C4:D1:89:5C:AB
            X509v3 Authority Key Identifier:
                keyid:73:CF:E1:1E:8A:70:93:BD:C9:5B:C0:1E:20:DB:43:76:E2:2A:A5:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8_hHopwk73JW8AeINtDduIqpRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf9f3-0e48-4c47-bc26-1b1100731448/1/c8_hHopwk73JW8AeINtDduIqpRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:fb:bc:83:34:4d:a7:c0:3e:62:71:cb:67:d9:d3:fd:65:e0:
         72:32:85:93:83:c6:77:08:8f:d7:ad:dc:5a:b0:1d:79:85:a9:
         85:55:97:90:70:31:3d:a3:f3:df:e9:9c:7f:b4:6f:ec:89:8b:
         6e:3a:26:42:c6:62:37:5d:4f:84:c7:af:38:5c:f0:eb:b0:ae:
         33:84:02:d4:8f:3e:3f:d8:6c:2e:ad:2a:6c:bd:fc:f6:29:3c:
         f2:0e:bd:51:02:3f:a4:3a:f4:bb:d1:e3:aa:86:a2:4e:da:ac:
         28:70:13:10:13:4e:b2:08:76:ef:62:1e:4e:91:1c:be:54:1e:
         16:01:e5:51:c4:66:ba:df:5e:65:9a:47:a6:de:7e:67:8e:dd:
         e0:50:a9:47:70:09:4e:9b:f1:c9:3d:94:77:1d:9d:1c:ef:a4:
         c3:64:92:09:13:4b:82:2d:f5:9d:9b:02:ec:6c:21:61:07:a5:
         f0:f5:4e:9b:f8:bf:84:9b:76:2e:98:51:a3:bb:fe:64:bc:6f:
         70:4b:81:93:66:c6:f6:f5:37:91:36:e6:86:0e:18:86:aa:2b:
         c7:aa:0b:45:d9:32:11:48:2e:e7:e1:1a:cc:37:b8:b4:7c:0c:
         15:47:a3:b2:dc:e3:6f:1e:25:73:c9:4c:93:c1:e7:12:b7:b0:
         70:5d:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:08:23 2026 by rpki-client