Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
File:                     8TIZIhzAohMmzgBsQoJbrCvjHhc.mft (raw, json)
Hash identifier:          p1EGixdZQsnt+66MJ8bV89zl5vk6OIGpItrGjODenCU=
Subject key identifier:   95:04:D4:07:07:F6:D9:6A:AD:6C:4A:F1:53:84:4A:26:D5:F9:E2:74
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Certificate issuer:       /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial:       01A003CBD25579205A64C32F9D9856E55C5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
Manifest number:          1B29
Signing time:             Sat 15 Aug 2026 05:01:24 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:24 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:24 +0000
Files and hashes:         1: 8TIZIhzAohMmzgBsQoJbrCvjHhc.crl (hash: rRSDl7VahSnn4PFeewwQavzQKJpAaaYvTweVgiRhBY0=)
                          2: BY90jgROFhJJZ1NbH4-tElkR_GE.roa (hash: Y5QIyQBYfCYfbH1jDCElmPITA4Jk6lEfynUlV4MgKn0=)
                          3: FjdVngLDionqDh_18cFGQYsmeKM.roa (hash: Tr+Fqc+oiTydduMLlPL1oc/kxHz+RUGFOArR1+9AQpM=)
                          4: jOKUVjy0c9vId2Sgar1ALyHha2U.roa (hash: LYaq4K0uwHA/ENOgkf4QZP3JMqPWmSKEI1664spJ028=)
                          5: q38Vrr1-lrXh4gRVryv7KRjcsHU.roa (hash: GS4WkhgAvCrSjsSDa1MVGmMSwhXFRTBu+xrlewUGZtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:d2:55:79:20:5a:64:c3:2f:9d:98:56:e5:5c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
        Validity
            Not Before: Aug 15 05:01:24 2026 GMT
            Not After : Aug 16 05:01:24 2026 GMT
        Subject: CN=9504d40707f6d96aad6c4af153844a26d5f9e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:c0:55:ec:07:69:33:ec:b0:28:44:8b:85:
                    03:e3:c0:6d:1a:94:c6:8b:31:15:eb:55:b9:e9:0a:
                    d0:eb:b2:10:6e:ce:ef:2f:54:2f:81:99:b0:97:0d:
                    1f:84:38:ae:ad:3d:07:98:67:af:f6:07:6c:d8:c0:
                    a4:6b:80:85:87:6d:d1:89:d2:a6:a9:c9:3c:f3:5d:
                    81:99:5b:a3:74:8b:dc:88:98:66:56:f5:55:b2:5c:
                    32:da:bc:75:88:01:0d:dd:81:c9:81:62:37:f6:0a:
                    da:79:b5:2e:52:aa:61:df:f0:bd:57:26:0c:80:cb:
                    d4:76:ab:73:9e:0d:f7:6f:81:8a:01:d2:cc:f8:59:
                    4f:a6:f9:5b:0c:0c:47:f7:2e:b4:d1:58:6d:53:1f:
                    b5:d4:88:80:a6:e6:3a:48:75:b8:74:f1:51:b2:80:
                    81:53:d8:05:f9:b6:e6:e4:71:b5:51:0b:b7:dd:6f:
                    2c:68:b0:a2:e2:04:db:56:d0:73:14:88:d8:af:bb:
                    06:44:32:c2:95:02:db:66:33:a6:80:f3:92:f1:4c:
                    ca:4f:b7:be:2b:06:6e:36:15:ef:21:29:88:f4:28:
                    bd:d0:b7:0b:ac:f2:84:20:11:7c:e1:c2:96:b3:c6:
                    92:39:12:fa:d6:ff:eb:52:a5:0e:f6:34:99:a1:c6:
                    1b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:04:D4:07:07:F6:D9:6A:AD:6C:4A:F1:53:84:4A:26:D5:F9:E2:74
            X509v3 Authority Key Identifier:
                keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:3b:41:a0:57:6d:4b:7c:ec:e7:66:86:7b:14:f6:50:b3:8f:
         5e:8b:74:29:d9:7d:ef:2a:ef:5f:cc:0d:69:0b:63:00:7b:34:
         a3:29:b1:da:99:26:a5:d6:78:05:42:e1:e9:48:f5:f4:49:8d:
         96:25:9d:46:5b:17:77:01:d5:f1:dc:b1:d1:9c:c4:73:17:55:
         15:be:8d:71:5b:65:e4:0f:c3:76:56:7c:a2:bd:97:76:9b:63:
         17:e6:a1:56:e7:75:80:a4:50:ce:bb:13:87:be:f7:d2:8d:78:
         e7:ee:13:bd:c9:67:44:0b:d4:05:51:a6:1c:2d:da:86:0c:a2:
         07:08:ca:30:18:bf:f5:5a:9b:4c:0a:9a:a9:8c:63:4a:90:a1:
         56:e7:00:f5:a7:95:1b:2e:a0:01:c7:dd:14:22:69:94:8c:98:
         0d:5c:06:5a:96:59:f6:8e:2c:a2:d7:12:41:f1:90:92:d7:ef:
         8c:d2:17:46:6e:c5:0f:f9:8a:a0:07:78:e6:4a:a9:05:b4:f1:
         77:48:9c:da:35:d8:64:04:1b:ed:9a:0f:26:94:9d:3d:0f:38:
         cd:42:2a:a3:04:3b:54:39:0e:1b:e7:65:04:8d:60:fa:f1:f3:
         b5:b6:1a:b3:6c:1e:6a:ad:0f:3d:24:8f:26:a7:67:54:11:22:
         15:20:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:48:19 2026 by rpki-client