Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File:                     8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier:          dw6j1RTEbZz7TL5KOkVwYQ4WNmBp+nJqQO0MOeQWz/o=
Subject key identifier:   B9:E3:FD:05:C3:72:5F:B2:E7:F9:AD:02:3D:67:AE:F6:F6:32:DA:6F
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer:       /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial:       019F17C2748CA6D2E54A8C5FB239FA2C7E82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number:          07E6
Signing time:             Tue 30 Jun 2026 09:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:47 +0000
Files and hashes:         1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: Mbyf9SRbagN9EKQk4VBaviH1PMGCvF2qNYPmI/2RL3o=)
                          2: Hkxvl640wTVaCG4wxC1K28YsvUQ.roa (hash: ekA7LP7tcvUQDtaAhAw2EppmtQVZSvzCUQgbHmX4j7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:74:8c:a6:d2:e5:4a:8c:5f:b2:39:fa:2c:7e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
        Validity
            Not Before: Jun 30 09:00:47 2026 GMT
            Not After : Jul  1 09:00:47 2026 GMT
        Subject: CN=b9e3fd05c3725fb2e7f9ad023d67aef6f632da6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:86:4e:72:44:af:77:d9:1a:5e:4e:30:6d:67:
                    35:eb:8f:a1:c5:f1:54:e8:90:04:92:21:56:b3:60:
                    b4:ba:d8:d4:b7:66:2d:f9:ca:55:8b:be:b2:fc:2e:
                    3a:ea:cf:11:85:55:93:42:a6:6c:f0:af:a5:c5:3f:
                    5e:00:eb:04:9c:b4:39:85:ef:dd:a9:01:b5:e2:04:
                    24:ba:e4:e4:33:99:ee:3e:1e:f3:5a:21:10:05:95:
                    f8:0c:0a:1e:a7:4b:6a:e1:2b:4a:c2:ae:c7:ff:5a:
                    04:93:a4:8a:92:85:ac:b9:7e:93:e8:f1:35:b2:60:
                    13:65:b0:59:74:d8:ba:a6:32:fc:8e:a9:95:6c:fc:
                    e9:f6:7b:31:9d:be:9d:f2:aa:e8:3f:42:85:6a:7c:
                    fc:0c:42:2b:2c:2d:aa:1b:38:6b:9c:c9:d5:82:90:
                    a6:c1:29:ff:b2:0d:ca:d8:8a:b2:c6:39:cb:98:d2:
                    de:b1:6d:ea:a7:9e:96:36:ec:81:a9:0e:62:4d:3d:
                    08:e6:6d:4a:2b:1c:40:09:fc:8f:f0:f4:0d:fd:43:
                    71:fa:a7:79:35:4a:52:75:d9:13:77:40:79:85:7f:
                    3b:42:b5:8c:29:52:7c:e0:9f:c7:b7:2d:2b:e1:44:
                    be:21:b2:f1:f7:a8:45:91:b7:3b:ae:e1:9c:3b:00:
                    d7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E3:FD:05:C3:72:5F:B2:E7:F9:AD:02:3D:67:AE:F6:F6:32:DA:6F
            X509v3 Authority Key Identifier:
                keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:2d:35:70:f5:34:01:e4:40:02:e5:c3:19:c2:a9:b4:db:4a:
         e3:52:66:d9:d4:2d:21:54:72:29:f9:fd:9c:3d:3b:09:d2:a4:
         91:e9:74:ee:8d:89:c5:14:f6:f4:f6:ae:2d:69:03:a3:ee:c3:
         2b:cb:28:c2:db:32:21:d5:63:23:d3:23:18:46:a1:e7:a4:88:
         ae:a0:ee:08:9e:b5:b8:29:96:78:8b:84:25:e0:ca:a6:ec:84:
         43:77:8e:ff:f5:29:d6:cb:a7:18:96:8b:14:ab:47:cb:15:31:
         39:e7:b3:a3:25:10:ee:76:dd:1d:01:5a:48:ec:3d:0b:85:19:
         e8:a1:60:35:fe:86:09:80:7f:0a:f0:1b:b9:d3:73:cb:60:0a:
         23:85:24:60:bc:a1:8f:cd:a5:cc:cf:7d:d7:60:4b:88:e3:8d:
         cb:66:a8:90:51:e0:b7:c6:08:45:75:31:50:3e:95:8c:a6:ec:
         d3:3c:7a:99:25:a4:5c:5b:d8:eb:a9:e0:df:1f:27:b9:81:ea:
         98:11:18:b9:20:5e:c3:38:9b:53:4a:60:85:0b:e1:72:aa:f1:
         ce:e9:e6:09:b3:2d:aa:af:af:67:24:cd:55:f8:fd:7a:9e:89:
         bb:53:1a:2b:48:16:c6:a1:1f:8c:f8:bf:42:83:d7:a6:04:14:
         36:6f:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:48 2026 by rpki-client