Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File:                     B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier:          JwT2zX3lwezG42bREE/4VQ4oMZCitCEDDy6C9ZeNTNo=
Subject key identifier:   D7:A5:5C:71:23:23:2E:2B:BA:4F:79:13:DB:F9:6E:86:4A:EC:16:81
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       019F12D3EE73ACC5970039554F05D91148E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number:          102C
Signing time:             Mon 29 Jun 2026 10:01:46 +0000
Manifest this update:     Mon 29 Jun 2026 10:01:46 +0000
Manifest next update:     Tue 30 Jun 2026 10:01:46 +0000
Files and hashes:         1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
                          2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: aOVSzoOaQAXe5nmMk7Wig/QLAoebnO7bh5Pq/gO+aFI=)
                          3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:d3:ee:73:ac:c5:97:00:39:55:4f:05:d9:11:48:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Jun 29 10:01:46 2026 GMT
            Not After : Jun 30 10:01:46 2026 GMT
        Subject: CN=d7a55c7123232e2bba4f7913dbf96e864aec1681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5d:09:6e:1f:04:d8:bc:83:8e:c2:2e:7b:f1:
                    8b:78:db:2d:c7:f1:84:b1:cc:11:0f:d7:11:e8:6b:
                    fe:66:29:50:4a:fa:d4:1f:6b:b6:ea:50:d1:5f:67:
                    a2:07:3d:f4:9d:8c:a3:41:1f:da:25:7f:a8:a9:11:
                    2d:16:be:e0:07:2c:e7:8a:f6:61:c7:c1:b4:43:5c:
                    2c:58:b3:d7:49:9b:6f:aa:0b:7a:01:c7:56:29:4e:
                    f2:02:38:ea:3e:30:48:ef:24:07:68:55:60:14:bf:
                    7b:a0:92:1d:4b:90:0f:fe:08:8f:07:9e:86:dd:04:
                    66:da:8d:8f:19:9c:7a:10:49:6c:4d:37:2b:84:0b:
                    f0:96:b4:3f:07:b3:d1:7b:f9:4c:73:b9:9e:6f:22:
                    9d:d7:29:20:60:7c:12:aa:a3:d1:83:f0:90:56:51:
                    14:cf:a6:0d:c8:d8:d4:f6:69:8c:8b:5e:df:95:0b:
                    76:1a:08:4e:2c:e5:b8:7e:07:16:82:0f:3e:7c:c9:
                    8a:64:57:6e:d4:7b:97:4d:85:68:47:93:3b:59:9a:
                    90:ed:87:a4:2a:4c:35:70:2f:bd:b3:15:bd:cc:d1:
                    c4:dd:6b:e9:8c:a4:e7:59:14:23:cf:ae:f0:ce:1d:
                    41:b2:51:7d:17:a2:f4:00:da:8c:a1:fa:77:34:05:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A5:5C:71:23:23:2E:2B:BA:4F:79:13:DB:F9:6E:86:4A:EC:16:81
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:5a:c1:4a:38:e1:c3:95:71:06:c9:75:9c:db:ac:2c:81:88:
         75:f5:5c:c2:90:0d:cc:ed:51:06:14:4a:55:18:2b:9d:3c:46:
         80:21:93:ce:96:f2:38:9a:c0:d0:a8:fb:de:a1:5e:7c:cf:03:
         99:49:b9:fe:2d:9e:b2:e7:31:e7:98:46:fd:ae:f3:54:8b:82:
         ed:b5:e0:1e:43:4a:3f:fe:af:ad:c7:5d:26:cb:56:1b:c6:40:
         12:7d:57:7f:a4:3e:6b:96:30:2b:91:5d:99:da:27:c5:39:b6:
         1d:fe:0e:7c:da:d9:3b:c3:ff:a7:50:bc:f8:87:2c:6f:a2:53:
         4d:82:0b:ac:a2:5b:43:3a:ae:71:eb:57:1d:8e:d7:79:a7:7b:
         8d:1a:39:d2:50:8c:30:f8:0d:ea:3b:f5:0c:01:eb:c9:fa:35:
         b6:3f:c4:d7:f3:57:50:58:d8:1f:b3:ab:7a:b7:ea:9d:3d:d4:
         bc:a6:3a:2c:48:dd:0a:ba:fc:7f:3b:f5:c4:67:56:ff:82:6f:
         7d:cc:64:75:7a:91:cb:aa:dc:7c:8a:60:39:ac:87:b1:bb:11:
         1f:42:81:f1:e3:40:fb:08:8e:b9:81:9f:57:81:22:64:12:47:
         0e:86:ed:92:a5:e1:df:df:39:1d:99:eb:80:a3:c0:8e:26:93:
         b1:1f:76:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:43:16 2026 by rpki-client