Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
File:                     8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft (raw, json)
Hash identifier:          fLX6MguYEpaVpgkVxw8qyNF+hsQOHKeFSLtxNOw9nh8=
Subject key identifier:   33:BF:08:5E:FF:DC:7F:55:BD:DE:33:45:FA:E5:3C:54:3B:37:AA:81
Authority key identifier: F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74
Certificate issuer:       /CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
Certificate serial:       019F70CF749C3F9D318F875C033878DF737A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
Manifest number:          30
Signing time:             Fri 17 Jul 2026 16:01:11 +0000
Manifest this update:     Fri 17 Jul 2026 16:01:11 +0000
Manifest next update:     Sat 18 Jul 2026 16:01:11 +0000
Files and hashes:         1: 3f-YZ_gZlvXel0INTsX8PYHYwkM.roa (hash: tYd4+MLEesSD8GAgr16MDLhnq93BfcFvnbdolUayoJA=)
                          2: 8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl (hash: 2jjixj6GT87NyXd5aDtDmNiqLHDes6gUR8P8LvkbEio=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:70:cf:74:9c:3f:9d:31:8f:87:5c:03:38:78:df:73:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1da3158eb1bc6a0a9027cf59e603687d6d3e974
        Validity
            Not Before: Jul 17 16:01:11 2026 GMT
            Not After : Jul 18 16:01:11 2026 GMT
        Subject: CN=33bf085effdc7f55bdde3345fae53c543b37aa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:a5:d7:32:55:77:13:00:64:01:76:54:44:
                    27:0d:51:6d:d3:00:74:57:1f:82:d1:24:dc:52:23:
                    67:ef:c9:eb:4d:8e:e5:ea:70:36:dc:8f:81:61:e5:
                    7a:d0:46:d5:a7:42:09:1a:a1:58:13:a8:8e:7c:00:
                    52:59:72:1f:ca:86:de:f6:47:5c:e3:b2:0b:da:bf:
                    f8:70:3c:0c:41:13:ed:a0:2f:3f:4f:13:99:79:90:
                    10:ab:f8:f9:1e:3d:5b:55:68:0f:53:a8:9f:af:11:
                    be:e7:c1:c0:ce:22:fc:fb:04:cd:42:13:4a:be:9b:
                    4b:d0:43:37:aa:41:5a:30:c0:73:d4:74:ed:53:d5:
                    f3:73:a0:95:e6:b6:24:fc:a8:6a:09:2c:be:fd:e0:
                    3a:b8:4e:ea:5b:98:09:68:98:07:55:95:49:bb:a2:
                    8b:3d:43:7e:74:9a:bf:37:7a:06:ec:f2:f6:69:79:
                    91:07:10:95:73:58:5d:82:46:a5:ef:a5:cb:23:ec:
                    d0:a1:52:5c:c3:a0:db:21:f7:c8:68:da:0f:c3:34:
                    b8:16:fc:cb:e9:48:e5:16:76:65:c2:c6:f4:e7:b2:
                    81:f2:86:fa:1f:08:94:53:ef:62:4f:09:7e:dd:5f:
                    45:24:f0:25:63:ab:98:c6:6f:19:5d:7a:bb:49:17:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BF:08:5E:FF:DC:7F:55:BD:DE:33:45:FA:E5:3C:54:3B:37:AA:81
            X509v3 Authority Key Identifier:
                keyid:F1:DA:31:58:EB:1B:C6:A0:A9:02:7C:F5:9E:60:36:87:D6:D3:E9:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8doxWOsbxqCpAnz1nmA2h9bT6XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b8847a-b0f5-4aff-99dc-a9e98b73b556/1/8doxWOsbxqCpAnz1nmA2h9bT6XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:64:43:2b:1a:8e:62:6c:f8:70:38:6e:f4:42:4b:d9:08:e2:
         63:64:ef:f5:15:08:be:76:49:f6:0e:c1:7a:92:b2:1b:98:0b:
         97:17:6b:c7:48:f6:e8:52:56:14:63:f5:61:49:8e:08:3c:90:
         17:25:89:61:3c:f7:c0:84:0a:06:ba:e0:4d:16:39:d6:e5:61:
         0b:04:97:5e:94:5e:67:23:4b:8f:40:02:a0:a3:ec:1c:30:d3:
         c9:bc:9e:56:0a:a8:bc:35:47:22:4b:49:e5:31:bb:a2:32:fd:
         9c:6e:42:15:59:2f:27:82:cb:74:79:0a:9e:dd:82:77:12:64:
         1d:92:a5:59:7f:e2:0a:38:26:fd:0d:b2:42:8d:87:ea:e6:10:
         cf:5f:76:53:4f:18:d6:9b:2f:d2:64:96:2c:d9:b2:05:6f:e3:
         78:f0:7e:19:f9:a1:e0:a3:15:80:6f:5e:42:f9:b1:8f:81:22:
         74:8b:8e:2d:9e:05:39:c9:bd:7c:48:43:b7:6f:cb:ef:10:81:
         00:17:7b:a6:dd:a1:72:c6:f7:7f:c7:20:b5:16:a3:f1:22:1d:
         8f:dc:ae:90:a2:dd:d9:62:dd:bd:b4:e2:7e:35:1c:e5:00:d5:
         0a:0b:a9:d6:84:92:b2:2f:81:a4:14:5c:b5:74:ce:d4:d1:3a:
         ca:04:ef:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9wz3ScP50xj4dcAzh433N6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZGEzMTU4ZWIxYmM2YTBhOTAyN2NmNTllNjAzNjg3ZDZk
M2U5NzQwHhcNMjYwNzE3MTYwMTExWhcNMjYwNzE4MTYwMTExWjAzMTEwLwYDVQQD
EygzM2JmMDg1ZWZmZGM3ZjU1YmRkZTMzNDVmYWU1M2M1NDNiMzdhYTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8+l1zJVdxMAZAF2VEQnDVFt0wB0
Vx+C0STcUiNn78nrTY7l6nA23I+BYeV60EbVp0IJGqFYE6iOfABSWXIfyobe9kdc
47IL2r/4cDwMQRPtoC8/TxOZeZAQq/j5Hj1bVWgPU6ifrxG+58HAziL8+wTNQhNK
vptL0EM3qkFaMMBz1HTtU9Xzc6CV5rYk/KhqCSy+/eA6uE7qW5gJaJgHVZVJu6KL
PUN+dJq/N3oG7PL2aXmRBxCVc1hdgkal76XLI+zQoVJcw6DbIffIaNoPwzS4FvzL
6UjlFnZlwsb057KB8ob6HwiUU+9iTwl+3V9FJPAlY6uYxm8ZXXq7SRdApwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO/CF7/3H9Vvd4zRfrlPFQ7N6qBMB8GA1UdIwQY
MBaAFPHaMVjrG8agqQJ89Z5gNofW0+l0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMt
YTllOThiNzNiNTU2LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iODg0N2EtYjBmNS00YWZmLTk5ZGMtYTllOThiNzNiNTU2
LzEvOGRveFdPc2J4cUNwQW56MW5tQTJoOWJUNlhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWRDKxqO
Ymz4cDhu9EJL2QjiY2Tv9RUIvnZJ9g7BepKyG5gLlxdrx0j26FJWFGP1YUmOCDyQ
FyWJYTz3wIQKBrrgTRY51uVhCwSXXpReZyNLj0ACoKPsHDDTybyeVgqovDVHIktJ
5TG7ojL9nG5CFVkvJ4LLdHkKnt2CdxJkHZKlWX/iCjgm/Q2yQo2H6uYQz192U08Y
1psv0mSWLNmyBW/jePB+Gfmh4KMVgG9eQvmxj4EidIuOLZ4FOcm9fEhDt2/L7xCB
ABd7pt2hcsb3f8cgtRaj8SIdj9yukKLd2WLdvbTifjUc5QDVCgup1oSSsi+BpBRc
tXTO1NE6ygTv7g==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:11:53 2026 by rpki-client