Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
File:                     8KMtISmjhsmgr9u5FeDb8TC6cNU.mft (raw, json)
Hash identifier:          mpLShAbTG1p9jiEXyT3IX+VQ74GfGs1iqmq8+Qqyds0=
Subject key identifier:   0D:02:A2:8D:2A:5A:48:3F:B4:6C:F8:11:6A:1A:CC:F0:57:EB:96:6C
Authority key identifier: F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5
Certificate issuer:       /CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
Certificate serial:       019F1754D32889889BAD1F93598927173EB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
Manifest number:          0B87
Signing time:             Tue 30 Jun 2026 07:01:02 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:02 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:02 +0000
Files and hashes:         1: 8KMtISmjhsmgr9u5FeDb8TC6cNU.crl (hash: zCk/YoY78Bk8GOm0jkHsKxKvV1/L4yuAGHl8Y3nkyOU=)
                          2: UFBEpO4lAvQQYygzidhd3XdFxgI.roa (hash: UGxXMNFmL4JWlj/CB1VthyOKOfzl2mNWHFy1E8dwYXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:54:d3:28:89:88:9b:ad:1f:93:59:89:27:17:3e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a32d2129a386c9a0afdbb915e0dbf130ba70d5
        Validity
            Not Before: Jun 30 07:01:02 2026 GMT
            Not After : Jul  1 07:01:02 2026 GMT
        Subject: CN=0d02a28d2a5a483fb46cf8116a1accf057eb966c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:1f:c9:c8:f6:e5:96:64:56:30:13:b1:7f:
                    77:f9:36:be:c4:74:fa:29:64:21:82:8a:25:5f:a8:
                    f3:88:7e:ce:f0:99:3f:27:a8:91:96:67:43:b0:fd:
                    7e:fd:a4:92:46:22:48:50:b2:7e:f2:11:ef:ee:c5:
                    4e:93:d7:60:b8:d3:8d:38:45:bf:93:0d:60:87:16:
                    ad:5e:3b:69:75:b1:17:81:a4:99:4e:2c:da:1d:ec:
                    69:92:02:a8:bb:59:22:5c:6c:c0:8f:26:f0:89:61:
                    30:50:52:bf:26:1c:43:4d:5f:4a:3d:4b:73:25:65:
                    2c:5e:6d:95:38:22:86:81:41:79:62:ea:2d:41:fe:
                    1a:80:37:6e:5e:8a:8d:ed:69:6b:b0:0d:c5:ee:08:
                    02:cd:ab:1f:21:63:0b:21:e8:46:b8:fd:e0:63:7f:
                    04:bf:52:55:37:03:5d:59:35:c7:8c:72:cb:10:39:
                    be:f3:02:7c:99:a2:1d:0b:11:b5:ee:1d:d2:6a:fd:
                    ec:30:7c:03:11:a2:a3:45:8a:b2:46:88:4b:1e:93:
                    03:05:2a:c9:c3:c4:1a:ac:03:42:f5:d3:12:05:9a:
                    1a:c5:58:3f:51:f8:32:21:5f:dc:4f:88:da:a1:38:
                    0b:ea:2c:05:4c:68:f7:d6:d2:98:f7:8a:b9:0a:8c:
                    03:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:02:A2:8D:2A:5A:48:3F:B4:6C:F8:11:6A:1A:CC:F0:57:EB:96:6C
            X509v3 Authority Key Identifier:
                keyid:F0:A3:2D:21:29:A3:86:C9:A0:AF:DB:B9:15:E0:DB:F1:30:BA:70:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KMtISmjhsmgr9u5FeDb8TC6cNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/58b8e2-1215-4bb0-96df-2f08380ae6c7/1/8KMtISmjhsmgr9u5FeDb8TC6cNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:db:cc:2e:1b:b6:2b:82:6a:8f:dc:1b:45:81:8e:67:6f:
         da:7b:d0:ff:64:0a:86:9a:30:bc:b4:8f:13:e1:44:1e:60:c0:
         11:38:d9:72:7c:0e:7a:67:68:73:75:89:a7:1d:9e:ea:cc:2d:
         0a:a5:e7:9a:0b:5a:01:4b:a2:df:93:c2:b8:ac:f7:78:ac:5a:
         4e:da:8d:a2:e5:91:39:7d:6f:f0:f9:83:74:a1:83:b5:24:c3:
         c8:de:3d:33:1b:91:03:86:5c:ab:90:81:48:b9:cb:1b:7f:32:
         1b:dd:82:b1:7f:9e:9e:ca:2a:26:15:b3:df:40:c5:0e:a7:13:
         fe:78:61:89:08:8d:49:8e:d4:e9:38:ea:58:52:50:22:8a:fb:
         4c:89:41:b2:3c:35:e0:4b:ab:04:d9:c2:8c:ca:f1:0e:d3:d6:
         bc:e6:69:12:26:75:d9:ec:cf:9d:74:af:09:6f:dc:87:c2:dd:
         a2:56:4b:5c:7d:d7:e5:a9:31:1b:0b:d1:a6:f6:56:e2:66:6b:
         14:09:e6:c6:f1:95:ca:75:cf:42:73:db:50:73:4b:b3:c5:1e:
         04:bc:aa:80:a8:a3:70:fd:c5:9d:e7:96:aa:ac:04:c5:84:0e:
         11:c3:42:3a:83:ce:d6:6d:ff:91:68:a5:fa:0f:9e:ac:93:1f:
         ea:fb:f1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client