Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          pczBd7vQFrbEgHsXD1bMIRU5rv7Qwo7bXNmWNAgEHRs=
Subject key identifier:   52:66:B2:F2:12:5E:DA:F5:74:E7:F7:F8:94:F0:EA:46:C1:A8:9A:7D
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019F14C145854956E1D165303EB8B6875B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          19A8
Signing time:             Mon 29 Jun 2026 19:00:38 +0000
Manifest this update:     Mon 29 Jun 2026 19:00:38 +0000
Manifest next update:     Tue 30 Jun 2026 19:00:38 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: OCGzg9dvmuhUeeElUdidIRioj5UKjGBl4mu304GQYPo=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:14:c1:45:85:49:56:e1:d1:65:30:3e:b8:b6:87:5b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jun 29 19:00:38 2026 GMT
            Not After : Jun 30 19:00:38 2026 GMT
        Subject: CN=5266b2f2125edaf574e7f7f894f0ea46c1a89a7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:84:4b:3e:d3:6f:f3:fc:8a:83:f3:7f:9f:49:
                    32:b4:e2:75:cd:c3:9a:8b:6e:c7:f2:84:b4:95:26:
                    21:f4:dd:96:8e:0a:57:d5:1d:ff:f1:20:fc:41:8c:
                    7b:c6:31:21:20:05:e8:43:c9:09:4f:8f:e4:ab:10:
                    45:71:e2:39:4a:86:1d:50:d0:8b:95:3d:a0:ac:3e:
                    79:fb:24:47:c8:7c:ac:5c:f3:9a:66:74:6c:2a:2a:
                    57:42:6d:a5:f4:cd:b5:fb:96:28:7f:3f:04:1d:05:
                    5a:cc:a4:6c:c7:ea:eb:bf:bf:46:00:ab:1f:5d:16:
                    3d:bd:f9:9a:7e:94:bd:ab:9a:b4:72:0a:21:4b:91:
                    d5:f8:e0:09:58:4f:c2:20:1e:6d:f2:35:20:a2:61:
                    04:d2:a8:ee:d6:45:00:2d:57:33:c6:be:06:a6:27:
                    bc:28:c0:ee:b1:53:8b:c7:80:56:d1:63:1d:73:6e:
                    a9:d4:7e:8c:29:02:45:4d:73:94:fe:aa:4a:80:f4:
                    b2:64:a9:88:32:b8:c2:7f:0d:bd:3c:39:f5:e0:1d:
                    89:60:77:90:dd:99:2e:b6:c9:c2:32:03:f8:10:b4:
                    61:2e:78:e2:66:de:e8:13:2c:67:45:43:bc:c2:85:
                    7d:80:f4:1d:8c:50:3c:a3:0d:ca:f2:3d:c9:fb:bf:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:B2:F2:12:5E:DA:F5:74:E7:F7:F8:94:F0:EA:46:C1:A8:9A:7D
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:c5:60:b2:b7:fd:3e:ec:65:e2:d2:83:65:87:da:53:e1:
         24:c8:d5:23:b4:5d:86:68:1c:52:14:a7:31:ec:9f:5a:91:f0:
         2f:14:88:9b:03:15:c0:29:7a:95:36:9a:33:65:e1:e9:15:1e:
         41:0c:87:f6:3d:0a:cc:de:d5:24:80:62:73:73:57:d7:27:ed:
         f2:2b:0f:4d:9a:3c:14:9e:de:ea:dc:52:44:b2:17:63:52:74:
         a9:81:21:57:03:b0:77:c7:6d:30:20:e6:79:5c:98:b4:cb:d1:
         db:3a:6f:9a:1c:22:94:2d:b8:af:87:2d:36:99:36:f9:e9:95:
         b3:89:38:22:14:1a:d4:4a:5e:48:dc:73:2c:c0:3b:cb:fb:d1:
         e2:b6:5a:39:aa:a7:84:99:ef:49:21:d9:44:92:13:a0:c2:4c:
         a0:b6:6e:00:e1:e0:98:fa:66:e1:1a:45:2a:38:eb:f3:77:3c:
         e9:31:96:7a:3b:c7:6a:1b:66:a1:35:84:3a:e7:30:fa:14:58:
         d9:56:e1:f6:ec:90:c1:a3:27:42:96:be:0d:3a:cb:d1:37:9b:
         4a:37:54:69:c3:be:9c:7b:66:bf:17:ad:30:ee:9e:24:aa:09:
         ad:b6:dc:e3:44:be:57:e5:f7:c3:74:23:41:9d:80:6b:6e:2a:
         ca:d7:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 05:08:17 2026 by rpki-client