Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
File:                     8ppplYAYXWUQAV4dLKGe_0NkHtw.mft (raw, json)
Hash identifier:          M4iqFgiZiTYLfdnn9L7U8Yndv0GQLbV6pbWeXfXDOjQ=
Subject key identifier:   D6:28:2F:62:88:DF:D1:BF:21:E6:97:E9:14:F8:21:2D:A2:CE:6E:27
Authority key identifier: F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC
Certificate issuer:       /CN=f29a699580185d6510015e1d2ca19eff43641edc
Certificate serial:       019F18D68DFBC7AFCB230CDCC36600E1365F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
Manifest number:          0BC4
Signing time:             Tue 30 Jun 2026 14:02:22 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:22 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:22 +0000
Files and hashes:         1: 8ppplYAYXWUQAV4dLKGe_0NkHtw.crl (hash: Wdkhhei5Q1LDvJXYUk592JVP1S4oTVFgnhowlQHM1qE=)
                          2: Y3IZ9qCwUd5F2pR3sNX6lIyY6Pw.roa (hash: LV0AUIrFJfTCffSGhCZkNnJY82iWH8kCbOJwGo9wRiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:8d:fb:c7:af:cb:23:0c:dc:c3:66:00:e1:36:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29a699580185d6510015e1d2ca19eff43641edc
        Validity
            Not Before: Jun 30 14:02:22 2026 GMT
            Not After : Jul  1 14:02:22 2026 GMT
        Subject: CN=d6282f6288dfd1bf21e697e914f8212da2ce6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fe:a9:8f:aa:70:0f:c2:84:15:62:fb:9a:fa:
                    18:83:d0:f0:6e:29:37:bf:4b:fe:82:d8:ad:0d:08:
                    02:63:a6:c3:a7:df:e0:39:4b:e0:f1:24:cb:2c:ad:
                    b0:34:a3:09:fe:8f:87:45:cc:e9:b1:d2:aa:40:88:
                    90:65:26:a8:34:9e:3a:23:85:54:a3:96:8c:35:4c:
                    ee:19:8b:16:91:d8:89:8b:2f:db:74:20:11:4b:93:
                    7a:26:5f:ca:13:d3:3e:8e:44:9b:24:86:ae:43:28:
                    eb:49:91:47:be:48:24:4f:69:8b:03:d2:2f:eb:32:
                    35:b1:da:9a:05:33:59:2d:28:c4:92:19:45:15:9d:
                    b5:7b:d5:19:65:94:e1:da:e5:da:6e:b5:36:01:08:
                    b1:7b:fe:07:4a:63:98:39:05:cb:63:11:e9:2a:12:
                    8b:33:22:16:3f:4e:8d:72:c0:8b:72:20:eb:73:74:
                    0e:38:39:4c:46:ad:23:f0:d5:23:81:70:8d:00:55:
                    9a:9f:1b:57:87:c8:c0:a7:9d:5f:cf:e2:5c:14:1d:
                    83:36:fe:eb:f0:65:b9:6d:f2:b5:55:dd:4f:c7:4c:
                    6c:ab:e3:b7:ea:a5:78:f7:0b:b2:b9:94:99:04:f2:
                    4b:eb:d5:d6:13:9b:ad:e1:d7:9c:f6:43:8b:cb:f1:
                    6f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:28:2F:62:88:DF:D1:BF:21:E6:97:E9:14:F8:21:2D:A2:CE:6E:27
            X509v3 Authority Key Identifier:
                keyid:F2:9A:69:95:80:18:5D:65:10:01:5E:1D:2C:A1:9E:FF:43:64:1E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ppplYAYXWUQAV4dLKGe_0NkHtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e08e41-d609-41d8-86a2-8e6a295f806f/1/8ppplYAYXWUQAV4dLKGe_0NkHtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:aa:65:da:0d:43:4b:6c:cc:ff:5b:c6:7a:f5:48:bb:0a:
         17:69:61:56:f5:3f:ae:67:23:a0:95:1d:50:2b:0c:3c:41:2a:
         5c:32:53:92:d2:1b:e8:d2:ed:f2:a7:58:12:c6:37:d1:7a:db:
         a5:97:98:6e:5f:f7:20:67:3f:d9:c6:96:ed:91:fe:76:5c:bc:
         2a:6a:d1:75:e1:cd:48:11:e3:b8:3f:2f:8a:2b:b3:13:e2:e4:
         e2:14:57:29:c9:a4:6f:06:3f:10:66:47:0f:b5:d0:90:6f:2d:
         58:02:13:b4:36:fe:04:64:eb:ef:51:cb:fd:1a:78:1f:dc:a5:
         ff:57:7d:28:8e:67:24:c1:ee:63:10:c1:96:ae:ac:ca:01:9e:
         f7:2a:83:3b:20:4c:78:e8:47:06:6c:17:f9:99:39:86:80:61:
         0f:a8:fb:a2:ad:a6:a9:36:8f:61:83:59:d4:af:e3:14:ba:06:
         5e:1e:3c:44:37:b8:e5:94:f7:a3:2d:c6:17:17:fb:0f:19:36:
         ca:7e:f5:7f:73:9a:9e:0d:07:23:6e:ab:27:a1:a9:50:53:bf:
         4f:c5:7e:ed:0f:80:d3:7f:1e:40:a3:f6:73:65:ce:3f:63:86:
         d5:83:86:6f:a5:79:02:99:80:fd:72:6f:36:65:4f:fd:c8:a8:
         22:5a:de:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:29 2026 by rpki-client