Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
File:                     g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft (raw, json)
Hash identifier:          vvr/LttaSWWZXVKe0/mMaHe3xqodiE9WnCemq086Vvw=
Subject key identifier:   D0:CA:89:65:F0:C3:A7:50:0B:B7:64:52:9D:7A:5D:AC:81:2B:27:2A
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Certificate issuer:       /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial:       019FA2CE975381BF9A34EC9631E75FB859AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
Manifest number:          16E9
Signing time:             Mon 27 Jul 2026 09:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:15 +0000
Files and hashes:         1: INXHJDHDB1ukzYRaA3EidD_0aQ4.roa (hash: Z2x4wj/CdGVnD9ySadsV++WZwVQOZWizFudROy88bRQ=)
                          2: KJMJ77kQuoG9cpUlP7ImSAxxrC8.roa (hash: K2EGS70mhDKfj9roByjDWB46Ks+HmqgyJLsqPE6aR0s=)
                          3: KKPvuphxl-jCXx-t6E5TKLh7ouE.roa (hash: ghQPL+5j3H9Pp1Ju//l14r1R97GRHHIGE3fwtOKGTjA=)
                          4: Lyc7L5ENNnNmeFFiP13mgBm-teQ.roa (hash: gtEddttCg6evm5ZoDlDkaU8NOuk0QknemDaWTdJCohQ=)
                          5: PIctaaq8hYam_9VAPrVCYf9AqiI.roa (hash: M1/1hfWtMFwKSAcTSdndXFN4Ntl5XmVjhTvpw61hDG0=)
                          6: diWdBr8Lw6nPV-tMvOf0Cna3ipc.roa (hash: iWodsL01tWCHUx+C3pbxQzDdBQEdtQ4RhYGFNEL8TgE=)
                          7: g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl (hash: iyz2CPzQ41ql4gQ5GJknS5KXysUF+Fiekc7bOtSH3eY=)
                          8: kDHc3reVMJPLgu58itw4ZupB-4Q.roa (hash: QwLu7BES2xuFPZdD76Beo2u1lAJTYierBEEu5vEPTTo=)
                          9: o-lwE03BQjuSCoHPvrungn8RW5E.roa (hash: 6jhTwsjRV3a0rHOssSDB/4JB3N1eJdRGn/9ePaST8TM=)
                          10: polvb4mWJFtYlmCnCQgjC3KNjFM.roa (hash: ok6ZqIcHmI5POEVYtqUr4M7uhrPkkTSbl73JjPBOL34=)
                          11: tnYABoJMY7Wi-wWcLi2d_oJP6jQ.roa (hash: GWuYZQOsyi/Kep+VibmM7lp5ukM+ocv9ZUuI4km8O1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:97:53:81:bf:9a:34:ec:96:31:e7:5f:b8:59:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
        Validity
            Not Before: Jul 27 09:01:15 2026 GMT
            Not After : Jul 28 09:01:15 2026 GMT
        Subject: CN=d0ca8965f0c3a7500bb764529d7a5dac812b272a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d0:66:93:35:a0:15:b8:98:b7:15:bc:35:da:
                    04:de:0d:bc:96:7b:f6:00:18:81:8e:76:cb:16:0a:
                    82:f2:ea:23:fb:35:19:42:7a:00:f8:a6:67:7d:3b:
                    70:83:68:f3:1e:88:55:72:5f:85:fc:9b:0e:8d:e3:
                    6c:e1:02:9a:c1:a1:7b:a3:f1:e8:b0:5f:a7:ba:d7:
                    f7:62:0d:13:db:9a:4c:58:6d:5a:93:2d:32:cd:79:
                    0a:2a:9a:1d:e4:27:e3:70:10:b1:66:f3:d9:d1:c7:
                    f4:37:7f:09:ef:f0:95:91:f4:bb:e2:eb:b5:6d:29:
                    b6:3a:ad:76:46:fc:39:2b:ef:a9:2d:d9:85:71:01:
                    a0:0b:1e:4a:31:b1:aa:43:ae:a8:3d:b4:ff:39:f1:
                    c2:71:97:94:dd:1e:ff:69:10:05:c4:55:05:75:f5:
                    50:3e:11:3d:d7:45:bf:dc:16:33:74:f6:1e:ae:a7:
                    c3:f8:d2:e4:ed:58:19:a0:07:a3:25:fb:43:c9:f3:
                    95:8d:7d:ab:36:76:67:55:26:f5:52:ba:86:28:91:
                    a6:5d:d7:1d:eb:a0:81:cc:6a:ae:15:d8:77:40:d4:
                    87:2b:62:b6:20:a8:20:e4:16:12:b4:44:a2:d6:7b:
                    d5:d7:2d:ac:6e:d6:da:b2:7d:0f:52:7f:b6:6d:73:
                    ea:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CA:89:65:F0:C3:A7:50:0B:B7:64:52:9D:7A:5D:AC:81:2B:27:2A
            X509v3 Authority Key Identifier:
                keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ff:25:3d:96:fa:77:6b:8a:12:07:41:d6:e0:5f:09:8b:eb:
         1e:40:79:ca:b6:9a:80:b1:79:ad:fb:dc:0e:d8:aa:95:9e:2e:
         47:be:47:dd:05:0f:1d:e7:b2:1c:ce:f9:29:29:4d:59:e7:25:
         8e:36:72:11:53:3c:14:ae:51:08:e7:66:8d:d8:f5:93:dd:93:
         20:0e:6f:d5:3d:b0:f3:b7:24:3d:70:4f:3a:0e:97:37:4f:d4:
         6b:66:65:a7:21:ea:23:8b:f6:c1:a5:26:85:3a:dd:b6:35:43:
         0b:47:24:45:4f:17:fe:10:13:69:06:2e:d4:b5:1f:ff:b4:87:
         49:67:3f:43:61:ee:2d:c8:69:56:75:2e:db:fb:2b:36:2b:73:
         10:8e:74:02:74:74:7d:57:20:43:8d:76:17:b3:dc:ce:99:25:
         65:da:50:d0:91:a3:4c:b2:03:de:0d:63:27:f2:30:36:15:d9:
         6d:bc:39:5a:d0:99:bc:76:6f:11:18:bf:d7:c5:d1:39:31:78:
         6b:49:6b:23:c4:05:85:2d:5d:e2:10:b9:ce:77:5a:18:c5:51:
         09:fa:17:73:04:8b:1e:c8:8c:2e:29:b7:8b:ef:52:c9:7e:b5:
         8b:0b:6d:69:39:c6:8f:cf:f6:c2:7b:69:2f:d2:f4:d5:7d:0d:
         da:0c:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:43 2026 by rpki-client