Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File:                     rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier:          BGThmTT2fUS63z3gY0q2BkW+vVp2XzIQVtcSpzXaGeY=
Subject key identifier:   B1:0D:F3:FC:46:BD:53:D5:A8:FA:F1:50:37:F4:26:BF:04:BA:C7:3B
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       019F40BF71AC6D058AC872EAEF06599A7A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number:          0AE8
Signing time:             Wed 08 Jul 2026 08:01:55 +0000
Manifest this update:     Wed 08 Jul 2026 08:01:55 +0000
Manifest next update:     Thu 09 Jul 2026 08:01:55 +0000
Files and hashes:         1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
                          2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
                          3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
                          4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: e2Ie6GOH8vQgeaBAjMbQOhRPdiy2Jo07LyP4qyqyF5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 08:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:40:bf:71:ac:6d:05:8a:c8:72:ea:ef:06:59:9a:7a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Jul  8 08:01:55 2026 GMT
            Not After : Jul  9 08:01:55 2026 GMT
        Subject: CN=b10df3fc46bd53d5a8faf15037f426bf04bac73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:a2:63:65:39:8d:c7:47:1f:5d:0b:2b:35:
                    81:80:ff:28:02:6b:e2:f1:35:04:21:b9:b0:88:a6:
                    66:93:3d:a0:fa:79:4d:36:06:d4:f4:15:1e:46:c4:
                    3b:2a:e3:ab:0e:6c:5d:0e:c7:a5:9c:bb:61:59:0f:
                    40:ea:41:59:3e:39:a8:5e:9d:5b:e5:23:a5:ef:39:
                    37:45:ef:50:09:de:fc:7f:e2:c9:84:09:ac:53:df:
                    9a:89:e6:08:b2:19:cd:e7:1c:3d:e6:5d:67:f5:dd:
                    69:ff:a4:7a:97:bd:4f:e2:ae:e3:8c:84:2b:43:13:
                    eb:c2:dc:aa:87:de:9e:3a:20:1c:de:43:2c:ec:78:
                    a0:02:eb:be:87:7e:b2:d7:c3:c1:06:28:07:7a:ce:
                    1a:e7:92:f7:1f:fd:61:00:88:0e:3e:01:36:a6:3b:
                    55:f1:80:f2:81:b7:76:b6:80:4c:94:36:12:8b:2d:
                    28:90:f8:51:38:32:83:90:50:39:6b:51:e8:b6:81:
                    24:eb:e7:f9:a3:6a:6a:ed:c5:57:ec:19:b9:5d:21:
                    7b:75:ea:cf:66:72:cf:93:1b:cf:ff:e5:4f:00:55:
                    94:e4:9a:23:f3:6b:ac:8a:3f:40:16:77:cb:be:6d:
                    f1:f3:c8:a9:bc:ae:7f:33:d4:9b:3b:5b:09:05:46:
                    1a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0D:F3:FC:46:BD:53:D5:A8:FA:F1:50:37:F4:26:BF:04:BA:C7:3B
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:02:f1:65:c7:ac:69:2a:b7:b3:19:56:c2:07:98:ca:b2:bc:
         8a:c1:52:13:bc:5c:4b:29:c3:09:10:b9:f2:d5:79:3d:31:ba:
         1f:03:e4:ca:16:f4:04:06:f8:f2:91:fa:4c:fa:b7:34:ae:4e:
         d4:eb:58:09:32:9e:2e:b9:64:dc:63:c7:63:d7:b8:8c:2e:45:
         f1:54:16:f0:0e:7f:24:c3:7b:3e:ae:2f:ed:2c:9e:78:62:bc:
         1d:4a:32:87:e2:45:b8:a3:47:2c:9c:42:ac:2a:55:34:3e:ab:
         85:38:9d:8b:ed:b2:4c:f8:d4:2d:46:01:2f:5e:dd:d9:7b:ae:
         f3:69:f7:43:90:37:aa:94:09:9e:d6:b4:9e:89:74:f7:dc:1f:
         9f:1a:f1:73:09:68:19:21:90:1d:97:b8:6a:b2:80:cd:9e:6f:
         14:34:29:37:0b:80:9a:8a:05:99:fe:fd:a0:f4:78:65:66:16:
         fb:0e:52:49:fa:94:4b:66:6e:c7:ae:06:1e:c6:f2:7c:e6:11:
         ad:32:60:6d:d0:a2:21:17:05:11:e7:24:c5:93:75:19:07:ab:
         2d:20:7c:38:58:95:1d:07:44:fe:3a:8e:b8:35:8b:9f:88:d8:
         cb:ac:77:b3:3d:47:71:3b:be:1b:05:64:08:4c:5e:5e:e7:51:
         fa:a8:e6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 16:39:51 2026 by rpki-client