Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
File:                     rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft (raw, json)
Hash identifier:          8mQsyg9cy2zs39V2E0OsKJ9/VOCFzYOsG+dJfs7gMj8=
Subject key identifier:   1E:D8:E7:DD:69:F1:92:02:65:61:91:5B:06:FF:80:AB:5A:A4:DA:BB
Authority key identifier: AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70
Certificate issuer:       /CN=ac7862c299d6088718760a96168272fccbfda970
Certificate serial:       019FA003936BB51E7743939007911E45B3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
Manifest number:          080F
Signing time:             Sun 26 Jul 2026 20:00:16 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:16 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:16 +0000
Files and hashes:         1: rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl (hash: 0fXKaH8Jrvnkjh1W5avxA+8C510mbjI/+cAczCsH2fo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:93:6b:b5:1e:77:43:93:90:07:91:1e:45:b3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7862c299d6088718760a96168272fccbfda970
        Validity
            Not Before: Jul 26 20:00:16 2026 GMT
            Not After : Jul 27 20:00:16 2026 GMT
        Subject: CN=1ed8e7dd69f192026561915b06ff80ab5aa4dabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:a4:b4:7e:b4:26:18:41:69:2c:4d:62:05:
                    cc:a3:71:eb:fd:e6:39:14:5d:98:f2:2b:11:e4:7d:
                    b0:16:c9:52:db:c9:75:a7:c6:42:94:fd:b6:9c:6e:
                    d2:1c:24:09:6d:d6:54:02:71:54:34:b5:39:de:cb:
                    9e:92:86:8f:e0:5f:ee:ab:6e:b9:bd:4e:2b:fb:da:
                    4c:51:b1:7d:b7:e0:08:64:c3:4a:dc:b4:77:77:63:
                    44:7d:17:e7:dd:ce:3d:72:24:23:21:c7:d4:84:d9:
                    c6:a0:5d:ab:95:29:af:fd:d3:e9:7a:42:b2:b7:c3:
                    dc:7e:6b:fe:aa:16:2f:d1:b7:7a:fa:1c:2e:9e:ee:
                    04:74:46:f0:7d:3d:87:60:87:47:ce:7c:66:e8:86:
                    7c:5e:b8:69:f3:f5:ab:fe:db:5d:d4:7e:b1:39:f8:
                    05:5a:fe:00:35:06:94:0e:96:5c:cf:e6:ae:a2:51:
                    9c:8d:3c:3a:f6:c2:8e:f3:61:42:c8:a3:90:22:16:
                    cb:8f:19:f9:02:18:2c:03:43:26:6e:19:83:68:83:
                    b9:13:9b:04:b8:de:39:d6:02:22:8d:d8:5e:91:52:
                    c3:94:04:7f:4c:1c:b9:a8:20:c3:d7:c1:16:43:41:
                    30:3d:a7:4c:f2:7b:61:93:ee:1d:00:d6:f8:77:30:
                    ce:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D8:E7:DD:69:F1:92:02:65:61:91:5B:06:FF:80:AB:5A:A4:DA:BB
            X509v3 Authority Key Identifier:
                keyid:AC:78:62:C2:99:D6:08:87:18:76:0A:96:16:82:72:FC:CB:FD:A9:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e94fbf-7748-4183-84d0-fa2fadeb0281/1/rHhiwpnWCIcYdgqWFoJy_Mv9qXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:8c:da:1d:67:0f:02:90:19:72:37:08:ad:27:02:72:d4:
         c3:32:c4:38:dc:ca:04:dc:4a:15:04:c5:bc:56:3c:ef:a9:ca:
         d5:b1:43:bc:a1:58:7b:04:c1:1f:05:aa:3a:2a:b6:7e:e2:09:
         36:cc:8a:17:2c:13:20:39:44:26:d6:bc:e1:91:83:86:16:66:
         f9:4d:40:86:bc:f7:b2:48:81:72:63:ed:69:c3:c8:e6:05:eb:
         f6:6f:29:ea:a0:9d:e2:5a:c3:94:23:c1:e8:e1:02:ba:01:1f:
         10:2d:8a:a4:f8:d9:d8:26:2f:95:7e:7c:14:1c:77:c1:bd:6e:
         19:1a:41:69:b4:2b:66:f2:3f:fb:4e:d1:28:9b:63:e6:e8:65:
         04:24:51:78:4a:c9:0b:7f:b9:71:bf:89:d9:01:47:a1:54:a7:
         b2:fa:f3:35:4e:65:64:a5:8f:6b:48:3d:f2:d9:59:ea:36:5d:
         79:28:8e:d2:da:8e:89:70:72:5c:6a:c4:b8:7e:4e:9a:97:23:
         24:b9:c9:0b:97:82:96:4d:6b:57:6a:3c:4f:c8:e1:78:d1:a4:
         39:94:23:99:67:04:bc:37:8c:f5:7e:74:d7:0f:bf:51:95:5d:
         d6:2f:7c:74:88:51:41:dd:97:0a:91:53:31:79:93:51:e1:e7:
         0d:e3:db:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gA5NrtR53Q5OQB5EeRbPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzg2MmMyOTlkNjA4ODcxODc2MGE5NjE2ODI3MmZjY2Jm
ZGE5NzAwHhcNMjYwNzI2MjAwMDE2WhcNMjYwNzI3MjAwMDE2WjAzMTEwLwYDVQQD
EygxZWQ4ZTdkZDY5ZjE5MjAyNjU2MTkxNWIwNmZmODBhYjVhYTRkYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIKktH60JhhBaSxNYgXMo3Hr/eY5
FF2Y8isR5H2wFslS28l1p8ZClP22nG7SHCQJbdZUAnFUNLU53suekoaP4F/uq265
vU4r+9pMUbF9t+AIZMNK3LR3d2NEfRfn3c49ciQjIcfUhNnGoF2rlSmv/dPpekKy
t8Pcfmv+qhYv0bd6+hwunu4EdEbwfT2HYIdHznxm6IZ8Xrhp8/Wr/ttd1H6xOfgF
Wv4ANQaUDpZcz+auolGcjTw69sKO82FCyKOQIhbLjxn5AhgsA0MmbhmDaIO5E5sE
uN451gIijdhekVLDlAR/TBy5qCDD18EWQ0EwPadM8nthk+4dANb4dzDOAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7Y591p8ZICZWGRWwb/gKtapNq7MB8GA1UdIwQY
MBaAFKx4YsKZ1giHGHYKlhaCcvzL/alwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAt
ZmEyZmFkZWIwMjgxLzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lOTRmYmYtNzc0OC00MTgzLTg0ZDAtZmEyZmFkZWIwMjgx
LzEvckhoaXdwbldDSWNZZGdxV0ZvSnlfTXY5cVhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIdaM2h1n
DwKQGXI3CK0nAnLUwzLEONzKBNxKFQTFvFY876nK1bFDvKFYewTBHwWqOiq2fuIJ
NsyKFywTIDlEJta84ZGDhhZm+U1Ahrz3skiBcmPtacPI5gXr9m8p6qCd4lrDlCPB
6OECugEfEC2KpPjZ2CYvlX58FBx3wb1uGRpBabQrZvI/+07RKJtj5uhlBCRReErJ
C3+5cb+J2QFHoVSnsvrzNU5lZKWPa0g98tlZ6jZdeSiO0tqOiXByXGrEuH5Ompcj
JLnJC5eClk1rV2o8T8jheNGkOZQjmWcEvDeM9X501w+/UZVd1i98dIhRQd2XCpFT
MXmTUeHnDePbsA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:36:26 2026 by rpki-client