Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          69rlfWnoHfFsRCjvkqI1RGtyxzYCZoCr3OAvqPJOw+c=
Subject key identifier:   35:B7:75:89:30:E8:B7:09:8B:E1:39:C8:B1:FA:3A:89:64:04:77:B7
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019F35971330344C255FF744DD596EDCABEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          19B9
Signing time:             Mon 06 Jul 2026 04:02:01 +0000
Manifest this update:     Mon 06 Jul 2026 04:02:01 +0000
Manifest next update:     Tue 07 Jul 2026 04:02:01 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: OiD2h2/vRKmt2vmTCq/f9EatwhwMtbC5X0cH/p3XVPY=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:35:97:13:30:34:4c:25:5f:f7:44:dd:59:6e:dc:ab:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jul  6 04:02:01 2026 GMT
            Not After : Jul  7 04:02:01 2026 GMT
        Subject: CN=35b7758930e8b7098be139c8b1fa3a89640477b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:48:4c:ae:6a:1a:ab:3d:22:19:1b:80:24:55:
                    17:71:4b:5b:da:74:14:7d:71:06:c5:31:31:a6:b7:
                    95:02:42:8e:3d:fb:82:38:2b:25:d8:f5:23:24:71:
                    06:70:52:81:e2:03:3a:21:29:14:bb:23:8f:00:3a:
                    c2:f0:89:ac:a5:c3:64:6a:ed:7c:83:91:88:08:36:
                    6c:dc:83:91:d1:17:ea:8c:6d:c9:0f:62:8b:41:dd:
                    e8:7c:70:9b:ee:ab:17:3e:1b:29:30:86:ac:c3:cc:
                    0a:f4:93:dd:f3:56:60:72:08:71:0c:0c:7c:84:f5:
                    0f:11:ab:f3:7d:92:db:46:8d:a8:f7:2a:ce:1c:2f:
                    ef:64:1a:08:5a:8a:86:9d:cb:05:48:9e:8d:e9:ef:
                    4d:c1:d7:69:bb:3f:16:8e:04:95:0e:e7:9d:c6:fe:
                    3b:e8:12:3b:a9:d8:45:cd:9e:79:d9:d2:48:21:4c:
                    ad:a6:89:f3:ca:26:45:32:bb:27:f9:00:8d:84:ca:
                    dd:16:cf:1d:c2:bc:9e:dd:3d:73:1c:2d:7d:cb:45:
                    aa:fc:47:70:c5:03:7c:76:3f:07:d7:2e:6a:15:d5:
                    b1:f9:c7:ad:9b:5a:cf:51:d1:55:55:86:ef:a6:10:
                    bd:99:b5:83:6a:0c:1f:7a:f7:cd:bb:45:0a:fa:66:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B7:75:89:30:E8:B7:09:8B:E1:39:C8:B1:FA:3A:89:64:04:77:B7
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bf:e5:8b:5f:e6:2b:fc:82:f4:82:51:38:bf:75:e8:c7:55:
         0b:5c:71:dd:82:9c:28:ff:3f:4e:f4:60:2b:38:5c:0e:be:6e:
         e6:62:dd:bb:78:d4:61:b5:d4:85:cd:6b:93:a5:d5:6d:44:c9:
         31:7d:68:a7:d1:8b:60:c6:a2:62:ff:ee:a3:ab:c3:8d:0b:62:
         c3:d6:a7:fa:0b:45:90:3d:d2:02:74:72:25:0f:a9:39:75:00:
         d7:e8:2f:2a:7b:0c:39:62:9a:6f:b9:fe:fa:61:87:3d:15:40:
         11:8e:ee:af:78:82:0f:d7:60:e5:46:89:d5:50:c8:96:0b:5a:
         89:53:d5:98:f4:5a:15:5e:17:10:8b:d1:07:d7:27:58:fa:b3:
         ee:41:72:58:34:28:79:fa:c8:cb:93:f8:da:4a:8b:01:de:a6:
         a5:78:fe:e6:93:01:d6:53:94:25:a8:52:34:b8:b4:cb:2d:86:
         ca:10:d7:3e:87:c2:78:a4:58:a7:ec:6d:ab:b8:c5:33:46:49:
         55:d1:c7:94:ec:2f:46:bf:48:f2:2f:56:01:da:6c:11:e5:08:
         35:1e:07:c6:e2:74:58:e3:6a:f8:09:be:21:33:fc:86:bb:d4:
         79:87:cb:86:9a:91:24:d3:09:d0:37:a8:c1:fc:d2:61:0d:a9:
         7c:d5:04:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 06:54:03 2026 by rpki-client