Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File:                     8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier:          //eByPuuqIcMUnu1DGaPvqJu58V4uPJpzW2yFJEHXPg=
Subject key identifier:   36:D0:DC:E4:C0:0F:EE:10:3E:66:F7:B6:E8:52:FC:BD:F4:6B:A3:BE
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer:       /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial:       019FA14E0ABB1F58E68594425F6C02CC5CBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number:          07D0
Signing time:             Mon 27 Jul 2026 02:01:13 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:13 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:13 +0000
Files and hashes:         1: 1-4VgmB7x2kPxjVo8rWB5bdGpwJg.roa (hash: tYA4HwMckxXKaEemAAzTny37cSzdXzplQtmU/0PMdkU=)
                          2: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: Jr/WsHHjK5GCafzbePP+dOYDVoT2S/CBolpH7NZRkyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:0a:bb:1f:58:e6:85:94:42:5f:6c:02:cc:5c:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
        Validity
            Not Before: Jul 27 02:01:13 2026 GMT
            Not After : Jul 28 02:01:13 2026 GMT
        Subject: CN=36d0dce4c00fee103e66f7b6e852fcbdf46ba3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ac:9f:89:fe:66:29:fd:40:8b:3c:2f:70:ae:
                    ef:93:b0:e5:8f:ea:f8:c1:47:74:fa:06:f1:2d:b3:
                    c9:af:6f:e1:45:91:6d:c0:0c:82:39:2c:e1:c6:93:
                    62:d6:38:4f:bb:58:b4:c7:47:23:df:e8:16:d9:83:
                    dc:7d:f8:cb:9a:20:60:b0:be:1a:e4:20:a4:44:06:
                    8e:f9:45:8d:9e:f1:c9:2a:1e:4b:67:79:96:21:b1:
                    2c:f9:2c:99:59:a9:f7:7a:ee:a3:d7:fd:25:2b:03:
                    f2:2b:34:79:ae:ae:a5:2e:db:6f:85:33:d5:14:55:
                    bb:30:4b:13:12:d4:27:59:07:5d:5f:71:55:c8:24:
                    5c:eb:55:f4:6b:4f:9f:ba:dd:a3:9b:7c:f3:3a:f4:
                    f3:59:21:77:41:df:d7:4c:52:28:e6:21:5a:0d:c0:
                    b1:89:f2:32:82:98:fd:b9:02:fc:74:19:5c:fc:c3:
                    72:bb:43:ad:78:76:0d:86:3a:f9:dc:3b:14:3f:83:
                    08:25:fc:4d:a5:dc:32:46:b7:1f:be:8b:d8:b4:fe:
                    e4:d7:3d:aa:ea:e8:9a:e8:60:f2:c7:b9:3f:1c:91:
                    e1:f7:ee:68:9c:9a:63:bb:b4:fe:5f:cb:33:2b:fe:
                    b3:aa:1e:43:79:54:bb:5d:75:a8:c5:88:d3:c2:33:
                    b7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D0:DC:E4:C0:0F:EE:10:3E:66:F7:B6:E8:52:FC:BD:F4:6B:A3:BE
            X509v3 Authority Key Identifier:
                keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:db:5b:10:a9:49:31:7d:8c:09:9a:44:04:08:ed:46:51:09:
         f9:b8:9a:b8:f9:35:a7:7c:3a:1b:e2:79:57:a3:7f:86:df:fb:
         3d:3b:2f:ea:42:17:78:a0:35:76:94:b1:d6:22:a1:8c:18:b1:
         19:35:a3:76:f7:3a:c1:fe:f1:2e:0a:29:53:f9:95:86:ac:0a:
         1a:6b:37:7c:e4:28:bc:3d:3f:04:1d:db:45:1e:d8:23:23:34:
         e1:d0:c7:f4:ec:8d:3c:ea:9d:2f:7e:a0:8d:60:8e:3a:63:f3:
         b9:4e:c9:c0:d3:ef:f3:dc:f6:e0:9a:f0:2e:05:75:c3:09:96:
         a1:42:71:94:98:40:ee:17:b7:dd:f4:84:c1:7e:3c:f6:c2:92:
         a7:ee:01:ba:21:4c:66:df:d0:3c:47:c3:3f:80:12:4b:c9:f8:
         c7:66:ef:b6:b7:30:c3:15:43:ed:bd:a3:d4:2f:4b:e4:db:5a:
         a4:20:e0:52:8b:eb:8c:d0:ae:95:b0:6f:2c:18:8b:29:f5:7a:
         db:f7:42:88:ed:cd:5c:d3:ab:5b:46:15:a3:f1:54:97:80:f8:
         3d:01:48:9d:6b:b5:94:57:d5:b9:51:2c:b3:fc:74:38:97:24:
         d2:f1:65:43:56:4a:53:7a:f5:3c:bc:f4:3a:d8:70:29:5e:64:
         7c:7d:f2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:47:42 2026 by rpki-client