Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          hLUFaxDdMYvkPBxTElVpma51+CGiAucLzUQyBwRUDDE=
Subject key identifier:   70:C8:53:F2:E2:B5:4E:4B:A4:E5:28:00:FC:FA:69:F0:12:3B:02:CE
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019F547CF42F02D57963C5003477210F5466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          19C9
Signing time:             Sun 12 Jul 2026 04:01:42 +0000
Manifest this update:     Sun 12 Jul 2026 04:01:42 +0000
Manifest next update:     Mon 13 Jul 2026 04:01:42 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: 66t3cyCVrrqj++gtbc3dGLv+RnDuN5dbX8mjgipoUXs=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 04:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:54:7c:f4:2f:02:d5:79:63:c5:00:34:77:21:0f:54:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Jul 12 04:01:42 2026 GMT
            Not After : Jul 13 04:01:42 2026 GMT
        Subject: CN=70c853f2e2b54e4ba4e52800fcfa69f0123b02ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:45:ae:24:43:c1:dc:47:94:da:c7:5e:83:
                    f6:25:8d:f5:22:ef:e5:f4:0a:a5:e0:0d:ac:6b:0a:
                    49:c8:66:d6:b2:94:44:61:1b:0a:75:5a:70:50:88:
                    ed:73:5d:e7:24:42:ad:f9:5b:ea:cf:e3:a0:38:d4:
                    6a:68:a4:b1:d2:b3:aa:a9:8f:26:3a:61:f6:3c:f0:
                    9a:8b:54:75:ff:6b:72:ef:36:46:2e:a1:12:1a:27:
                    d6:13:48:ed:70:eb:14:94:d2:bb:6c:ac:10:50:10:
                    53:cc:80:9c:42:46:55:a2:68:90:f6:0d:3f:3f:cd:
                    b3:1e:dc:08:92:e1:94:fd:b6:74:e7:97:c9:0e:0f:
                    f8:36:04:0d:b2:98:d1:9b:1b:bd:25:7e:53:ae:61:
                    2e:6e:f7:b4:c2:0f:db:a8:99:9b:3e:64:2b:34:c9:
                    d0:a9:06:d4:35:94:0b:4a:43:27:18:e2:98:1e:54:
                    49:6b:33:c7:aa:eb:c5:c8:c8:3d:22:c8:3b:21:f8:
                    5d:9d:15:4a:b2:13:62:4d:2b:d7:29:ce:bc:39:e5:
                    13:fe:52:07:df:ad:96:b5:ed:20:7a:89:5a:91:89:
                    71:dc:46:63:10:33:9f:c6:8e:da:bb:a0:90:5d:7f:
                    ea:4b:db:97:58:20:5e:15:3d:23:a7:50:2a:9b:9d:
                    b6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C8:53:F2:E2:B5:4E:4B:A4:E5:28:00:FC:FA:69:F0:12:3B:02:CE
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e8:45:ad:7a:24:2d:84:2f:e9:d9:92:96:93:7b:bb:6c:68:
         6e:c6:ba:76:68:22:c1:f9:87:5b:50:7e:bd:2e:46:ef:ee:28:
         1d:5d:13:6f:79:a3:1e:99:88:8b:4d:cb:2a:1a:a6:55:08:06:
         9d:ee:2f:76:c7:4a:a5:fb:26:88:7f:19:00:98:b6:9f:de:70:
         5c:88:66:05:11:21:a6:bf:78:3e:b4:ff:d2:a3:8a:55:d6:e4:
         13:fb:04:ac:ef:d1:11:eb:e7:51:71:1c:68:54:96:68:1a:0e:
         1d:0f:40:d0:bf:c2:90:dd:e9:51:0c:ea:c1:9c:d2:a9:6c:ef:
         c6:2b:93:8e:d9:aa:5a:7a:95:a6:1f:62:6c:24:06:e6:0a:d1:
         48:5a:60:1e:17:6e:6b:0a:7c:58:72:b0:ee:66:c2:bd:31:4f:
         d6:ea:33:b7:82:19:7e:15:3b:32:75:35:f2:bb:f9:1f:e0:84:
         3c:83:6e:31:ab:e2:24:75:bd:15:23:42:ed:8a:40:63:50:67:
         ab:da:d8:49:88:33:b9:78:05:96:91:9f:62:13:03:e5:6a:b2:
         f8:46:a4:96:3a:56:88:fa:a2:dd:9f:26:de:e7:49:d9:b8:25:
         26:21:89:b0:f7:47:4d:48:5b:74:25:8f:e5:ce:5c:c0:dd:56:
         62:96:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 09:58:10 2026 by rpki-client