Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
File:                     CMD4JPxpxHv1_teUYxbN_-P6BFs.mft (raw, json)
Hash identifier:          EJcn9nbMxzfPm8WJFNE6J0EgZNwc93cyT+Bqa3JUbhk=
Subject key identifier:   ED:A2:0B:64:7A:19:A9:33:26:95:09:D2:1F:6F:A2:EA:F0:AD:C1:11
Authority key identifier: 08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B
Certificate issuer:       /CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
Certificate serial:       019FA0A907F8FE64B025BAB2F3F48A854713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
Manifest number:          8E
Signing time:             Sun 26 Jul 2026 23:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:59 +0000
Files and hashes:         1: CMD4JPxpxHv1_teUYxbN_-P6BFs.crl (hash: HjbVQDHHKYu7uCsVYGoF/K6tr2QBDh/l0g0UxUqSJF8=)
                          2: EcOiKWkfENOhpUFqCuAv__VHhnw.roa (hash: Dg3pxaRe1cEkDH8sGf4s69+1RouBE83t1FQSJNv9iHw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a9:07:f8:fe:64:b0:25:ba:b2:f3:f4:8a:85:47:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08c0f824fc69c47bf5fed7946316cdffe3fa045b
        Validity
            Not Before: Jul 26 23:00:59 2026 GMT
            Not After : Jul 27 23:00:59 2026 GMT
        Subject: CN=eda20b647a19a933269509d21f6fa2eaf0adc111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:f1:4f:82:f2:aa:35:db:fe:35:d1:6d:31:
                    bf:66:47:62:a6:44:f6:d6:26:ec:dc:05:a7:21:2d:
                    68:fa:06:b2:63:bb:56:9f:7f:36:a2:42:41:08:b2:
                    ca:18:2f:32:b3:dc:a0:e7:7c:ac:a6:3e:6d:f9:68:
                    91:bc:38:4b:45:06:c2:db:54:78:d2:d2:ce:d3:4c:
                    09:2e:4e:38:d9:2e:12:4b:21:fa:0a:b2:23:91:a9:
                    03:06:6f:c2:b0:ad:90:83:e5:c9:b5:8c:42:87:0d:
                    e3:a2:94:9d:44:63:8f:2c:6a:15:d5:a7:bb:0c:8d:
                    90:ea:52:ac:52:f7:3e:da:9f:1e:57:53:aa:75:d2:
                    52:f6:1d:1b:bc:11:02:8e:01:27:6b:fe:08:82:9e:
                    20:9c:8b:8a:8e:45:3c:5a:45:f4:20:15:24:29:da:
                    fa:ea:ae:b6:d3:29:d0:58:31:5c:b2:d8:36:4e:20:
                    2a:d8:f3:4d:ba:b6:45:5b:20:7d:0c:4f:9a:72:92:
                    77:fa:46:96:74:1d:21:ee:ef:8f:04:bb:d7:7f:15:
                    c8:8d:4b:78:12:c4:9a:bb:61:4d:04:2b:0e:60:14:
                    81:f1:07:72:2d:83:97:ff:82:88:61:a2:fe:da:35:
                    66:0b:fe:f5:a4:a3:79:80:49:9c:ad:a6:ae:90:36:
                    65:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A2:0B:64:7A:19:A9:33:26:95:09:D2:1F:6F:A2:EA:F0:AD:C1:11
            X509v3 Authority Key Identifier:
                keyid:08:C0:F8:24:FC:69:C4:7B:F5:FE:D7:94:63:16:CD:FF:E3:FA:04:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CMD4JPxpxHv1_teUYxbN_-P6BFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/349aa4-3149-454b-958c-6280f2fef0e5/1/CMD4JPxpxHv1_teUYxbN_-P6BFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:02:4b:99:c0:b8:89:7b:72:31:48:76:66:fd:95:0b:40:af:
         33:c1:a0:76:ab:57:3b:6e:32:50:5d:25:ed:05:6d:78:d2:8c:
         98:69:44:dc:0a:b2:60:ef:b1:c8:a3:4c:76:3f:5a:79:e9:04:
         3f:67:be:bf:fa:0a:34:c5:6f:28:de:59:86:be:e3:b7:f2:58:
         58:d0:de:85:c2:9c:87:39:4a:70:2d:10:28:a1:5c:ce:be:b3:
         52:d4:1c:51:18:20:20:31:cd:c2:e4:0b:3c:9d:c0:20:a5:2d:
         26:14:83:78:35:de:6e:87:1d:12:64:ae:44:16:30:38:02:77:
         f3:e9:dc:4f:f5:6e:bc:b0:4a:c2:c4:6b:d4:51:8c:96:69:e3:
         18:55:d4:75:64:65:a7:13:fb:7a:a8:e0:c2:77:24:d2:c5:16:
         a1:88:07:3c:f7:e6:06:ca:14:f1:b6:2c:ec:ef:70:0a:4a:42:
         0f:63:70:7e:31:fc:63:64:da:a7:ba:b1:2e:d8:b9:f0:2e:e5:
         bf:4f:80:05:9a:cb:60:5e:8f:bf:c0:c4:be:a1:47:7c:d3:ed:
         37:15:36:cb:0b:54:17:d0:05:12:f2:33:e1:35:fb:99:3b:8f:
         52:1a:84:a1:0a:cc:09:3a:2a:f3:63:a9:a5:bd:8f:5b:c4:a3:
         4e:e0:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:24:37 2026 by rpki-client