Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
File:                     eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft (raw, json)
Hash identifier:          JzGQ+0QzV2HIArOkmdQTkQ/VkenYtiVvO79rnUrJxTY=
Subject key identifier:   8C:B1:57:11:E9:22:3A:BE:42:FF:B9:AB:A6:E3:87:03:0D:A9:4C:6F
Authority key identifier: 79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA
Certificate issuer:       /CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
Certificate serial:       019F1943C427A429E90780D109421231E2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
Manifest number:          191A
Signing time:             Tue 30 Jun 2026 16:01:39 +0000
Manifest this update:     Tue 30 Jun 2026 16:01:39 +0000
Manifest next update:     Wed 01 Jul 2026 16:01:39 +0000
Files and hashes:         1: 1-77MLKbMDtDiajP4cnfRaQ3miEM.roa (hash: uR4xAscZt2UY723RU9mF1OjyVpc+mJ5l3PG1PYSxgqc=)
                          2: eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl (hash: nEA83e7mY88prH/33nbQUJ0rVQwfVb6xEvQU4DnWw78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:43:c4:27:a4:29:e9:07:80:d1:09:42:12:31:e2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79bf086e2125068d99f5dc1fca4c60171759d1ba
        Validity
            Not Before: Jun 30 16:01:39 2026 GMT
            Not After : Jul  1 16:01:39 2026 GMT
        Subject: CN=8cb15711e9223abe42ffb9aba6e387030da94c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:fd:f4:f5:08:32:db:55:fc:b3:ac:f1:c0:
                    b9:68:e4:7a:9f:37:93:9e:e4:07:f7:27:32:59:c7:
                    a6:6b:30:14:96:9f:80:65:a8:c8:17:7a:57:40:47:
                    53:0d:26:3c:cc:9b:36:2e:40:18:af:b8:8a:a7:29:
                    38:4e:86:81:71:63:94:59:2a:5f:f7:92:1f:1f:ba:
                    63:35:8e:6b:3f:11:89:0b:8a:fd:6b:cf:98:59:a8:
                    37:34:44:97:43:28:b7:d6:f8:89:64:45:c4:e0:4a:
                    4c:f0:27:73:56:ea:fe:3e:32:51:df:14:dd:52:4d:
                    c7:dc:eb:5f:57:88:80:83:06:1c:9f:a1:fd:9c:f2:
                    45:15:94:f8:bc:33:7d:43:56:61:79:3c:0f:43:9b:
                    e3:47:9e:d7:7b:8d:ae:1c:9b:da:15:27:77:d4:b6:
                    bf:e1:b7:bb:0b:0d:70:eb:af:32:2c:8e:1b:34:b0:
                    6a:eb:2e:9d:a1:91:bb:3c:70:09:9b:59:98:ff:10:
                    86:fe:80:7f:7a:2b:f9:f4:a4:dc:00:23:a2:02:83:
                    d2:ca:48:80:ce:ad:e4:6b:e5:00:9a:2b:3f:d5:02:
                    69:68:d7:d0:b5:37:8a:72:ad:eb:1b:df:cd:a8:75:
                    ac:ed:48:c8:32:59:62:c1:4b:01:2f:68:f2:d2:67:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:B1:57:11:E9:22:3A:BE:42:FF:B9:AB:A6:E3:87:03:0D:A9:4C:6F
            X509v3 Authority Key Identifier:
                keyid:79:BF:08:6E:21:25:06:8D:99:F5:DC:1F:CA:4C:60:17:17:59:D1:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb8IbiElBo2Z9dwfykxgFxdZ0bo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0236d2-b00b-4640-93be-6bae3e9ea74b/1/eb8IbiElBo2Z9dwfykxgFxdZ0bo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:58:4c:0c:c5:7b:30:9c:6d:cb:96:0b:ed:e3:cc:1b:22:ce:
         c8:db:4b:e7:bc:92:7d:24:54:22:9c:b4:9d:88:fb:7e:d3:1f:
         7e:5f:2d:32:eb:be:8a:45:48:c6:e1:39:9d:7e:2a:15:97:0c:
         5b:94:b2:e7:cd:b0:06:46:ab:d2:19:5a:56:c1:f0:f8:29:8d:
         c2:e7:97:1a:6a:f3:ce:72:72:79:86:bd:64:a2:e2:76:be:9b:
         dd:51:04:bd:58:02:0e:22:1c:25:eb:38:a4:1f:dd:8c:ba:0f:
         d2:79:39:d2:86:41:a7:13:6b:8c:ac:de:05:7f:5a:81:59:6b:
         17:76:d6:41:ca:6d:8a:3d:a2:03:f3:8e:7d:39:76:34:d1:f4:
         c7:6e:42:53:a0:d4:2a:49:30:bc:4e:ff:87:7a:d2:04:9b:d4:
         75:85:60:39:1a:b6:d4:9e:13:fb:b5:40:c6:b1:47:90:19:e0:
         a4:e4:9d:bb:e5:0b:80:f6:44:75:36:aa:f7:b7:cc:fd:c2:db:
         c7:5c:e6:f8:0e:b1:71:0b:5b:00:7c:4b:79:66:ab:f8:22:0a:
         f8:2d:0f:85:22:d2:be:e7:45:bd:6a:6b:76:18:75:fc:ef:6c:
         a4:51:e6:7c:d8:0c:c6:bf:b9:fd:1a:4d:84:20:f0:f4:09:ec:
         62:b5:07:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:12 2026 by rpki-client