Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
File:                     8oS7eVhYemBZneFztOhaDJSRoaQ.mft (raw, json)
Hash identifier:          rRevT3hDrwoMIb29ELh+Dz2PRYxr8LVIkcPncIhItTw=
Subject key identifier:   A5:CE:9E:15:8B:FB:A6:B6:98:E6:0D:1F:CF:AF:26:C2:51:60:B5:AA
Authority key identifier: F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4
Certificate issuer:       /CN=f284bb7958587a60599de173b4e85a0c9491a1a4
Certificate serial:       019FF9B700282B14A67F509273FE34F4B49C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
Manifest number:          76
Signing time:             Thu 13 Aug 2026 06:02:27 +0000
Manifest this update:     Thu 13 Aug 2026 06:02:27 +0000
Manifest next update:     Fri 14 Aug 2026 06:02:27 +0000
Files and hashes:         1: 8oS7eVhYemBZneFztOhaDJSRoaQ.crl (hash: U2jaTpoP+DNF8Hq5DmlCTnfht0L9cZUraGSPMmizlYU=)
                          2: IVY6iWcM0h4WNsuJ0C_dYZMPbEY.asa (hash: vJRxB/YA0VSs2+csKGJpplBLmMHFGaBIIWUMdGp+a7U=)
                          3: t3aKyQAZqp0JpNY9WkTBO5wmV88.roa (hash: 2JKrAMaSBOfAdSssyHnAfVhbKUiXcGPrBZgPHZSrc8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b7:00:28:2b:14:a6:7f:50:92:73:fe:34:f4:b4:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f284bb7958587a60599de173b4e85a0c9491a1a4
        Validity
            Not Before: Aug 13 06:02:27 2026 GMT
            Not After : Aug 14 06:02:27 2026 GMT
        Subject: CN=a5ce9e158bfba6b698e60d1fcfaf26c25160b5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:28:fe:c4:0c:78:2e:27:db:8f:a9:36:10:
                    cd:5d:95:b2:fd:a7:92:cb:13:7c:40:42:73:14:82:
                    dc:ee:28:ad:31:9a:97:0a:4a:62:ce:3b:53:73:37:
                    14:8a:a2:7c:02:be:2f:37:dd:95:7b:dc:57:f6:b1:
                    15:f6:14:d4:76:ae:a0:66:86:b7:10:77:bf:56:6d:
                    07:fa:04:74:c8:a6:5f:cc:ed:48:25:d6:64:b3:24:
                    64:1b:20:0a:a2:b0:9c:8a:55:86:a0:dc:9d:80:ac:
                    88:f5:6c:ce:90:4f:ae:82:71:98:83:57:bb:50:d9:
                    87:1a:ae:d1:97:29:04:d3:82:31:ea:08:3c:fa:da:
                    43:50:d6:ed:74:5e:dc:84:ec:da:8a:6c:2d:61:03:
                    0f:7b:50:43:d3:d3:11:c7:e0:51:d5:17:46:e4:73:
                    1f:d0:8e:fc:50:d8:69:d7:01:dc:ea:31:52:41:8b:
                    b3:4b:bb:0f:b1:21:57:1b:db:63:89:8b:39:28:a2:
                    84:cd:49:ab:7d:ae:33:e1:4f:66:45:54:47:69:f5:
                    e4:56:ca:b9:9e:51:60:3d:0f:72:6c:17:ea:ad:10:
                    70:84:48:d0:09:8c:e5:d5:0d:19:e5:c2:3b:00:01:
                    d7:97:24:15:10:09:c0:d8:5c:bf:87:29:e6:55:69:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:CE:9E:15:8B:FB:A6:B6:98:E6:0D:1F:CF:AF:26:C2:51:60:B5:AA
            X509v3 Authority Key Identifier:
                keyid:F2:84:BB:79:58:58:7A:60:59:9D:E1:73:B4:E8:5A:0C:94:91:A1:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oS7eVhYemBZneFztOhaDJSRoaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/8oS7eVhYemBZneFztOhaDJSRoaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:68:b7:de:19:dc:d3:35:5c:6b:42:a3:81:d9:8a:40:c7:7f:
         8b:cc:5e:3a:c3:c6:df:7c:d1:cf:77:be:93:6a:13:62:8d:8e:
         3d:33:6f:b8:30:35:bd:e7:54:d9:fb:5b:cb:be:bc:61:46:7e:
         15:d5:83:35:04:30:2c:1d:78:92:c8:ac:fd:4d:3d:77:97:21:
         21:02:f9:d1:cc:07:cb:32:ff:13:76:93:c1:a2:36:4d:b8:05:
         d5:fd:cc:f0:17:c4:ab:d0:59:ed:9d:91:e2:07:e8:55:aa:f4:
         6b:ec:60:99:83:13:a8:a2:2d:9b:18:e2:c0:a8:a4:ed:ac:5f:
         b4:c9:aa:fa:87:dc:e5:87:b9:44:40:88:7f:67:a7:6e:c6:50:
         9a:5b:b7:ac:9d:df:aa:25:b3:27:94:82:bb:f3:24:19:40:dc:
         b7:2c:2a:4d:bf:ab:00:df:57:79:fe:e8:ba:bc:1c:d6:f6:b1:
         cc:14:d1:8a:69:05:ce:77:73:78:e3:53:ae:f3:45:99:36:44:
         0e:d4:92:71:4b:d7:8d:b4:7c:c2:66:4d:fa:d7:b1:57:ff:97:
         24:86:e4:15:5f:0c:8b:4e:1b:54:a0:06:76:42:19:aa:a3:68:
         dd:0a:c4:8b:fc:7b:71:3d:65:27:c5:8a:fe:be:04:99:d1:30:
         d9:59:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:57:28 2026 by rpki-client