Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
File:                     8YUnDoMZPTJp983p2ggIse_1Uq4.mft (raw, json)
Hash identifier:          AihONwF4TySjFDQKUe37/d0c3cGNkP1rJoxkZg4YjDc=
Subject key identifier:   A4:C0:0F:F6:44:8C:AF:C7:8C:CA:DE:C4:A0:1E:22:A6:7B:A3:06:5C
Authority key identifier: F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE
Certificate issuer:       /CN=f185270e83193d3269f7cde9da0808b1eff552ae
Certificate serial:       019FA56123344A40A8780407713868C0FA1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
Manifest number:          0950
Signing time:             Mon 27 Jul 2026 21:00:34 +0000
Manifest this update:     Mon 27 Jul 2026 21:00:34 +0000
Manifest next update:     Tue 28 Jul 2026 21:00:34 +0000
Files and hashes:         1: 8YUnDoMZPTJp983p2ggIse_1Uq4.crl (hash: 6mclSUh1F0ivfkqBgCv876nZFZNjaOPO/nMQIM3VhgI=)
                          2: wg9L7rd4GBIxdDb6Qm5YK6zsb3U.roa (hash: Mp7viOHmtxKfCc5QYE1IZGldkiFvmgFzmHRq++mrwh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a5:61:23:34:4a:40:a8:78:04:07:71:38:68:c0:fa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f185270e83193d3269f7cde9da0808b1eff552ae
        Validity
            Not Before: Jul 27 21:00:34 2026 GMT
            Not After : Jul 28 21:00:34 2026 GMT
        Subject: CN=a4c00ff6448cafc78ccadec4a01e22a67ba3065c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:60:97:1a:ad:4d:b9:27:37:8c:8e:d3:49:48:
                    c0:5b:f8:66:bc:05:a6:d4:13:ab:e6:e9:e3:ee:db:
                    21:a0:a6:aa:b9:b0:06:d1:f3:f6:16:77:a9:bb:b5:
                    55:f0:dd:0e:51:7c:15:2e:b4:e0:ff:25:32:07:2b:
                    e7:b8:58:8e:09:41:81:9e:64:21:83:8b:26:3e:7f:
                    97:17:4f:19:61:47:45:74:18:dc:be:f5:62:d9:da:
                    c9:61:00:b1:c5:ec:f5:a4:e6:6f:36:72:61:ca:07:
                    9c:c2:3d:3e:2b:f7:b3:a4:fa:d8:d1:8f:3e:02:ef:
                    48:77:ca:00:02:7e:2a:13:93:92:83:20:12:29:13:
                    6e:fc:38:13:08:23:99:da:6c:60:72:2b:45:0c:72:
                    33:a2:ec:55:fa:ca:b9:6d:e3:d0:48:1f:91:25:87:
                    8e:1d:03:8e:10:25:7b:53:78:42:49:ef:05:ea:b3:
                    7c:c9:cb:3b:50:31:dc:da:10:ed:6f:65:be:d2:e7:
                    75:6c:b3:6c:ed:46:1c:8d:86:4b:fd:01:5d:9d:2d:
                    bd:a4:f1:08:ee:c3:c5:13:82:bd:bf:47:f2:97:41:
                    84:cc:88:2b:41:34:80:46:1a:0d:67:0e:a4:a1:08:
                    f3:d4:b6:d5:fc:a6:15:cb:a3:f7:35:06:6f:71:35:
                    b3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C0:0F:F6:44:8C:AF:C7:8C:CA:DE:C4:A0:1E:22:A6:7B:A3:06:5C
            X509v3 Authority Key Identifier:
                keyid:F1:85:27:0E:83:19:3D:32:69:F7:CD:E9:DA:08:08:B1:EF:F5:52:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YUnDoMZPTJp983p2ggIse_1Uq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d8de6b-750e-4150-9be8-fef96e95aba0/1/8YUnDoMZPTJp983p2ggIse_1Uq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:bf:f9:97:40:6c:97:55:0f:20:22:29:76:85:e9:87:54:
         55:02:05:96:ca:b2:c1:b4:d1:04:b1:5e:dc:02:c9:9a:88:5f:
         66:bd:b6:25:42:05:cf:90:79:52:00:d8:c7:85:fa:4c:fb:58:
         d6:78:58:0f:c1:87:40:33:64:f9:8b:fd:ae:c4:b3:bc:e1:83:
         57:4f:5f:f5:94:3c:1c:a8:0c:da:9e:cc:15:f1:9d:6d:b9:dc:
         e5:e6:60:b4:e2:24:6d:fc:99:12:13:f9:76:47:de:2f:3c:f0:
         f1:40:2e:c8:72:f6:d2:d0:d3:49:a1:de:d6:34:d4:da:2f:71:
         75:1a:e6:7b:f0:63:03:49:94:3e:07:98:15:6c:b1:23:ea:66:
         d0:0c:f2:e8:76:ea:ca:ca:8b:37:c2:a7:dc:13:74:55:be:8f:
         92:44:ea:53:27:9b:57:8f:3a:4c:e7:d5:25:51:c4:bc:5e:77:
         28:b1:cb:e9:9b:03:d4:d8:29:7c:7f:a3:18:02:59:65:2a:f3:
         ef:f4:fc:6a:7c:ef:c5:eb:e4:e6:1a:fe:2f:2a:09:16:fb:4c:
         2e:3a:1b:0e:1b:04:9a:2f:30:29:81:10:7c:a1:d1:45:9d:e5:
         15:e8:4f:e9:a7:f1:48:33:6f:38:38:f7:6c:84:8a:85:da:88:
         b2:7f:ab:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+lYSM0SkCoeAQHcThowPodMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxODUyNzBlODMxOTNkMzI2OWY3Y2RlOWRhMDgwOGIxZWZm
NTUyYWUwHhcNMjYwNzI3MjEwMDM0WhcNMjYwNzI4MjEwMDM0WjAzMTEwLwYDVQQD
EyhhNGMwMGZmNjQ0OGNhZmM3OGNjYWRlYzRhMDFlMjJhNjdiYTMwNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCXGq1NuSc3jI7TSUjAW/hmvAWm
1BOr5unj7tshoKaqubAG0fP2Fnepu7VV8N0OUXwVLrTg/yUyByvnuFiOCUGBnmQh
g4smPn+XF08ZYUdFdBjcvvVi2drJYQCxxez1pOZvNnJhygecwj0+K/ezpPrY0Y8+
Au9Id8oAAn4qE5OSgyASKRNu/DgTCCOZ2mxgcitFDHIzouxV+sq5bePQSB+RJYeO
HQOOECV7U3hCSe8F6rN8ycs7UDHc2hDtb2W+0ud1bLNs7UYcjYZL/QFdnS29pPEI
7sPFE4K9v0fyl0GEzIgrQTSARhoNZw6koQjz1LbV/KYVy6P3NQZvcTWzkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTAD/ZEjK/HjMrexKAeIqZ7owZcMB8GA1UdIwQY
MBaAFPGFJw6DGT0yaffN6doICLHv9VKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgt
ZmVmOTZlOTVhYmEwLzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9kOGRlNmItNzUwZS00MTUwLTliZTgtZmVmOTZlOTVhYmEw
LzEvOFlVbkRvTVpQVEpwOTgzcDJnZ0lzZV8xVXE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlq/+ZdA
bJdVDyAiKXaF6YdUVQIFlsqywbTRBLFe3ALJmohfZr22JUIFz5B5UgDYx4X6TPtY
1nhYD8GHQDNk+Yv9rsSzvOGDV09f9ZQ8HKgM2p7MFfGdbbnc5eZgtOIkbfyZEhP5
dkfeLzzw8UAuyHL20tDTSaHe1jTU2i9xdRrme/BjA0mUPgeYFWyxI+pm0Azy6Hbq
ysqLN8Kn3BN0Vb6PkkTqUyebV486TOfVJVHEvF53KLHL6ZsD1NgpfH+jGAJZZSrz
7/T8anzvxevk5hr+LyoJFvtMLjobDhsEmi8wKYEQfKHRRZ3lFehP6afxSDNvODj3
bISKhdqIsn+rug==
-----END CERTIFICATE-----
Generated at Tue Jul 28 00:17:24 2026 by rpki-client