Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
File:                     f8rYnfG_maNvKQzD7w8ee00CdTM.mft (raw, json)
Hash identifier:          0O6c6Y85yz8sfGPyYoj6QmTLw/SwYNMM5vxeeG3AYu8=
Subject key identifier:   7F:81:DA:4E:B1:F9:9A:F9:6B:4C:F3:E6:A5:BA:61:2C:2D:D8:37:59
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Certificate issuer:       /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial:       019F197A752BDA34CC4D63F0696AE014AFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
Manifest number:          1964
Signing time:             Tue 30 Jun 2026 17:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:23 +0000
Files and hashes:         1: 7bMPlZft64LLOc44WXpuvWHCxYI.roa (hash: ovhICafylNUsoU6ggOnBn0FV5ld7QtZ9TQT1cYD5STo=)
                          2: 8ogFWyeBf0vuQT5jhBzXspAf2rE.roa (hash: 8SLnbSVICCGBBETX/lH2EVbhNVK83HBy2quzoB78n6s=)
                          3: f8rYnfG_maNvKQzD7w8ee00CdTM.crl (hash: p/s/iwlTsxGwpdNn767yMA3TjtZwc/hgdMlLVdv9YKU=)
                          4: ggggHoWexQd_x29XdkxpzklvtBY.roa (hash: RItnLwTh1P5BCA6CWkDZt99HLo5gT+F8X2TYgXTwevA=)
                          5: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (hash: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:75:2b:da:34:cc:4d:63:f0:69:6a:e0:14:af:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
        Validity
            Not Before: Jun 30 17:01:23 2026 GMT
            Not After : Jul  1 17:01:23 2026 GMT
        Subject: CN=7f81da4eb1f99af96b4cf3e6a5ba612c2dd83759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:34:55:90:28:44:bb:6e:bb:98:c4:6b:7b:
                    db:77:40:9c:2d:bc:39:51:e8:b7:59:36:8b:ec:66:
                    59:51:a4:00:78:62:ab:82:21:5e:ae:6b:88:1d:23:
                    5f:e5:9f:4d:ee:48:5f:7a:d6:bf:cc:9e:db:7f:3f:
                    69:85:37:ea:96:b7:0f:73:29:54:96:e4:0c:0f:fe:
                    7c:69:90:05:49:3c:f2:00:a8:c2:41:4e:23:5a:92:
                    3a:b8:10:94:2d:59:12:bf:a1:c0:3f:0f:2a:d7:2e:
                    06:6a:bf:9c:97:64:60:88:64:00:a8:64:6b:a2:59:
                    be:8e:04:4e:d6:49:c6:de:cc:b0:95:30:68:7e:94:
                    0c:3f:63:a9:18:54:aa:3a:f5:c6:f6:83:ff:45:7b:
                    16:4e:fa:4f:6b:79:fa:c0:a5:40:94:8c:cf:19:c9:
                    60:f0:f1:46:e6:ff:f2:3f:bd:1d:4c:3a:64:f1:5b:
                    d2:ed:0b:e8:13:7c:02:c8:63:5b:3f:c6:bd:4a:43:
                    fa:f6:45:7b:86:62:c4:db:6a:a8:a4:53:7d:a2:0f:
                    cc:20:e4:2a:ae:81:ad:bd:c3:82:97:40:22:8f:d9:
                    ea:63:d5:d5:d0:f9:eb:0d:aa:34:af:4d:be:e2:d5:
                    c1:e0:83:f1:32:7a:bc:f2:e7:e3:32:ee:fa:d8:8c:
                    b1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:81:DA:4E:B1:F9:9A:F9:6B:4C:F3:E6:A5:BA:61:2C:2D:D8:37:59
            X509v3 Authority Key Identifier:
                keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c4:9c:1a:8e:1c:a2:f1:60:02:e3:0a:4a:22:a4:fd:99:3e:
         9d:99:f2:e9:47:4d:f1:7f:cd:27:18:7d:56:da:f7:1e:f1:d1:
         08:d5:30:8b:02:18:bf:7c:ab:1d:ee:30:db:71:dd:c9:b4:f4:
         7e:99:f2:8c:29:e6:27:09:66:56:f7:61:6e:ef:2a:53:bd:6f:
         fd:c1:36:ae:91:d7:81:83:49:bb:22:5c:54:2f:59:c8:aa:d4:
         e6:00:b5:fc:66:8d:41:46:53:22:c3:ba:f3:4e:8b:43:f0:4a:
         46:08:44:60:28:8c:6a:76:26:a3:af:40:d0:4a:9e:85:69:5e:
         26:46:f9:03:16:90:1a:ca:39:ef:92:15:0b:1d:88:7f:12:bb:
         8a:11:f3:30:6c:fd:bd:90:b0:74:21:af:76:23:12:e4:38:3a:
         bb:51:39:27:c0:65:b7:88:c6:ea:67:82:4c:da:d4:c3:2e:53:
         65:77:cc:5f:e9:78:de:49:0f:79:c0:de:4f:35:e8:86:fd:db:
         6b:1e:7f:39:df:02:7c:98:eb:fa:18:98:34:f5:0b:3f:5e:a8:
         a9:29:bc:8b:bc:36:82:e2:4b:ca:37:8f:c5:93:d9:47:04:18:
         50:a7:d1:f9:b3:dc:b0:45:52:cc:71:6f:c5:4a:6a:f0:1f:2c:
         54:71:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:39 2026 by rpki-client