Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
File:                     yMr0p4F9msWWHUKkx-WuGrHRg_o.mft (raw, json)
Hash identifier:          lW0HpPM69Si8B2U6zwKtOIB0UbiBsJU3wb68acCJLqc=
Subject key identifier:   0B:A8:6C:AF:95:50:BB:7B:96:20:A6:67:AF:02:AD:8D:E4:04:31:9F
Authority key identifier: C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA
Certificate issuer:       /CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
Certificate serial:       01A0219E9C072E8FAFE75425F90C55145072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
Manifest number:          7C
Signing time:             Fri 21 Aug 2026 00:00:37 +0000
Manifest this update:     Fri 21 Aug 2026 00:00:37 +0000
Manifest next update:     Sat 22 Aug 2026 00:00:37 +0000
Files and hashes:         1: 8txx-a7bVPOx2o3RXnkrRbsFJvw.roa (hash: 9QzPxs6o1/HIn/z859bIlS9gq61Oxzk7wr0uT3OmX3c=)
                          2: yMr0p4F9msWWHUKkx-WuGrHRg_o.crl (hash: lYCnBr2YtENXsOjVu0nDLa1ve8q7EvN0STpJTwYuDgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 20:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:21:9e:9c:07:2e:8f:af:e7:54:25:f9:0c:55:14:50:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8caf4a7817d9ac5961d42a4c7e5ae1ab1d183fa
        Validity
            Not Before: Aug 21 00:00:37 2026 GMT
            Not After : Aug 22 00:00:37 2026 GMT
        Subject: CN=0ba86caf9550bb7b9620a667af02ad8de404319f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:6b:36:e7:a4:0b:7c:4b:07:3d:27:c7:4c:
                    db:d4:39:b9:4d:73:b7:8d:f2:d1:23:6d:8f:6c:37:
                    a9:a3:a2:a7:1a:02:d7:75:bb:05:8b:b8:28:c9:3d:
                    07:fa:1f:b6:ff:9c:7e:e9:c5:61:9a:cd:bb:a1:d1:
                    3e:b7:65:e2:58:f9:ca:7c:c0:05:e7:d2:0d:94:04:
                    58:6c:43:f2:da:f8:c3:59:08:dc:f5:94:36:04:f7:
                    38:10:47:f9:8d:2c:3b:39:c1:69:28:4c:21:fc:83:
                    b2:f9:94:45:1b:c4:7e:e5:e8:53:1b:c9:6f:8f:2a:
                    09:87:f7:ef:53:2d:df:03:b0:d5:b1:90:b2:c3:5f:
                    fe:8b:4d:78:65:92:02:7c:e0:fb:5e:0e:bd:99:97:
                    e1:64:e5:62:fc:55:78:0a:d8:54:a8:30:f3:d8:8c:
                    cd:1f:34:11:74:83:c3:26:12:a1:d5:8f:b2:96:bb:
                    6e:8f:0d:20:87:ba:d5:c4:9e:4d:92:ec:fb:cf:0f:
                    c8:d6:cb:f8:15:1f:5d:b7:9a:af:b3:c6:22:4d:31:
                    44:4e:a8:0c:e0:f3:a1:aa:c4:0a:38:cb:d1:10:05:
                    9d:a4:48:f8:30:bd:c1:5d:d9:d6:0d:7f:99:2d:58:
                    53:0c:61:dd:57:bf:f2:8f:7f:66:4d:54:3d:f3:40:
                    ef:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:6C:AF:95:50:BB:7B:96:20:A6:67:AF:02:AD:8D:E4:04:31:9F
            X509v3 Authority Key Identifier:
                keyid:C8:CA:F4:A7:81:7D:9A:C5:96:1D:42:A4:C7:E5:AE:1A:B1:D1:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMr0p4F9msWWHUKkx-WuGrHRg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/508e70-78b9-4efd-b5f9-f10b0070d701/1/yMr0p4F9msWWHUKkx-WuGrHRg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:94:5e:8d:5a:5e:85:8e:f7:e3:42:86:10:d5:67:22:f2:
         8d:27:97:a0:43:5a:0e:4a:46:e4:c2:2b:62:7a:73:91:83:93:
         52:ff:99:06:ff:5d:2a:28:d8:ae:93:34:55:3a:bb:7b:d4:f9:
         cb:23:b7:b8:18:d5:72:27:14:50:fe:be:c1:9e:27:09:f5:84:
         5e:b3:1e:ed:f6:56:aa:df:8e:08:a7:fb:33:64:1a:35:be:e2:
         dc:a8:63:46:08:b0:81:eb:81:16:15:19:ac:f3:a8:4c:22:a4:
         d7:09:a8:4a:18:ca:9f:ec:fc:1e:d7:ec:d1:ac:7b:48:53:56:
         14:88:34:34:da:60:80:ff:de:6c:f8:e0:9c:61:23:d4:2b:5a:
         6b:b8:db:fb:2a:7e:29:09:51:64:c5:4a:40:30:a1:46:b4:e9:
         af:c2:56:33:c2:1c:6d:74:92:b1:2b:84:26:3e:03:f2:6a:2b:
         a6:ea:11:9b:f0:7d:7a:21:16:a7:9a:68:11:f8:85:14:92:0d:
         be:b9:ba:fb:b2:a8:92:a2:c4:ab:fc:02:5b:f8:b3:74:bf:31:
         f8:dd:85:93:be:1b:e4:90:1d:b8:75:b2:97:0b:0d:92:ac:8b:
         ae:48:ea:6a:71:ed:de:ce:38:0b:50:40:33:ab:11:f0:52:8a:
         39:3f:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:09:48 2026 by rpki-client