Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File:                     8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier:          ZBg/ck7xhOR7s7m1polG1VIyFks+g8KCV7pznjxOk+w=
Subject key identifier:   16:4C:37:06:49:22:8F:53:1A:8D:8D:DE:ED:A0:15:0F:CA:D8:FC:FF
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       019F1867AD0214B40DD068E3DB09CECC4795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number:          0D32
Signing time:             Tue 30 Jun 2026 12:01:15 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:15 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:15 +0000
Files and hashes:         1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: +tqaz3UDZv/8LulwrnJFU8fcDLWlykAQYw0TqHFotQY=)
                          2: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (hash: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:ad:02:14:b4:0d:d0:68:e3:db:09:ce:cc:47:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Jun 30 12:01:15 2026 GMT
            Not After : Jul  1 12:01:15 2026 GMT
        Subject: CN=164c370649228f531a8d8ddeeda0150fcad8fcff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bb:46:8c:8d:c7:9a:c3:b7:67:8e:27:da:04:
                    15:7f:93:cc:12:24:93:51:9d:00:3b:7a:d0:7a:c2:
                    cb:42:1b:fe:83:96:11:21:24:b9:f9:8b:9d:c1:40:
                    12:9b:27:37:e6:5e:f7:06:f8:6c:56:79:b8:98:2e:
                    fa:30:40:8a:c2:6e:b1:e0:74:a2:fa:06:ae:fd:66:
                    89:dd:0a:e2:84:f1:e1:19:bb:e0:b3:7f:2c:69:11:
                    8a:ca:ee:dc:70:81:cb:da:73:fc:0d:d0:cd:49:18:
                    f2:cf:29:5d:87:60:dd:0b:cc:e9:68:ce:23:4d:c3:
                    a5:e7:92:ff:a6:47:cb:fd:46:b1:76:f4:8c:7d:e8:
                    ff:8c:cb:68:b4:04:40:d6:b0:bd:a6:22:1a:28:b8:
                    16:e2:e2:33:64:7b:24:07:c4:7a:ed:81:13:1f:8b:
                    3b:da:e5:b7:ad:04:e0:af:46:e5:6e:ac:50:77:6a:
                    bb:34:05:37:2c:4f:d5:00:1e:69:0b:e9:27:f5:ae:
                    69:5c:4e:f3:1e:16:6a:d7:d1:e7:85:9f:20:fc:e2:
                    c0:ea:ec:80:da:17:4e:8e:fc:ad:f4:65:b4:71:7b:
                    97:1a:4e:ea:12:64:6d:39:cb:5e:be:03:a3:6c:b6:
                    40:68:81:fb:56:57:f9:a1:0f:cb:c5:f6:74:1a:1e:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4C:37:06:49:22:8F:53:1A:8D:8D:DE:ED:A0:15:0F:CA:D8:FC:FF
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:de:ed:7e:bc:23:91:ad:18:15:31:0b:ff:db:b3:71:57:
         95:29:36:02:cb:e1:4a:c1:cd:06:fa:77:04:f7:df:59:e4:cd:
         1c:0d:4c:d3:79:cc:37:f8:be:b9:97:be:37:e7:f6:29:58:bc:
         bc:5c:b7:b6:8c:0c:c6:f0:9e:d1:66:0c:fd:3b:b4:d0:d6:72:
         ec:d4:2d:50:af:4d:9c:d5:cf:1e:2f:8f:d9:0d:10:04:70:7b:
         87:29:93:d0:2d:3d:94:11:6a:9a:cc:48:64:e9:1d:15:96:a4:
         62:9e:17:d0:81:70:f7:b3:1c:93:d1:df:ef:45:2e:dd:d3:6d:
         cd:66:ad:7c:13:18:e3:15:e5:af:e8:83:9e:a1:66:2e:c7:13:
         93:83:0b:d7:ef:7c:da:62:d6:e4:e2:ef:91:98:5e:63:b6:52:
         7e:90:88:d3:fe:f4:ac:e8:c8:e5:24:99:0e:4a:51:d5:e3:0a:
         56:b1:26:c5:2c:ed:cb:10:e0:70:49:f4:c6:67:e6:d5:b4:a8:
         a5:72:e3:53:e7:e2:54:a6:85:be:16:5e:4b:71:0e:6d:a8:e0:
         b0:1f:a0:01:5a:0f:52:75:6e:08:c0:5b:ef:f6:ba:04:b4:83:
         eb:1f:3b:02:38:66:ce:bb:b5:49:7b:ca:8a:3a:57:f3:1b:a0:
         b2:49:c3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:35:46 2026 by rpki-client