Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          5jAV0tljfZ/SNI8CASo/XiNZEV/AcyGQwXpGboIiy3g=
Subject key identifier:   D6:7A:0A:3C:3C:0D:61:C7:58:AD:D2:7F:28:25:E9:1A:C0:B8:A3:E4
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       019F1755112D87653B263D5D17678B336418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          10E7
Signing time:             Tue 30 Jun 2026 07:01:18 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:18 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:18 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: dU0uuqXOJGEvgAkdTp6uDe7lKcHhCkXUPrFD7j3PRNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:11:2d:87:65:3b:26:3d:5d:17:67:8b:33:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Jun 30 07:01:18 2026 GMT
            Not After : Jul  1 07:01:18 2026 GMT
        Subject: CN=d67a0a3c3c0d61c758add27f2825e91ac0b8a3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:8b:14:d4:34:64:7a:78:eb:7e:6e:3b:28:
                    b9:e7:8f:16:f1:cc:4a:54:51:04:2c:2b:46:97:c4:
                    c7:ce:19:3d:e5:69:b1:8b:3d:b8:78:97:a1:06:5b:
                    5f:0a:dc:b4:b2:07:72:1a:17:5f:f9:f2:9f:41:67:
                    e5:d0:fc:49:dc:da:f0:5a:27:ba:e8:33:81:89:2c:
                    05:85:ed:60:8a:03:1e:e1:9d:54:e1:37:7e:27:df:
                    8f:36:8c:9c:90:c7:cf:55:89:13:e7:06:a8:71:bf:
                    1a:1d:1f:a4:31:fa:60:a0:b0:c3:51:9c:ec:03:24:
                    1f:bb:cc:9c:31:e4:08:80:4c:bf:95:ec:eb:11:66:
                    e9:b9:85:bf:ff:be:a8:61:ee:58:37:db:04:5b:a9:
                    c7:12:94:cb:5c:1d:c0:c1:54:26:cb:3a:e2:af:15:
                    15:c7:8b:e1:25:a0:24:06:3e:42:c2:5f:38:bd:f2:
                    b7:83:dd:c8:8d:2d:e0:07:f2:d9:84:ab:8e:1b:32:
                    4f:f9:23:6a:b1:07:06:97:06:4c:f1:05:96:f8:95:
                    35:15:bd:5b:d2:08:37:e5:d5:8b:5b:fc:0d:5d:1d:
                    56:0f:ea:64:f1:76:bc:a5:11:0a:a1:3e:5e:72:29:
                    44:e2:93:0f:70:e0:57:4d:06:27:de:00:0c:5b:8f:
                    d6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7A:0A:3C:3C:0D:61:C7:58:AD:D2:7F:28:25:E9:1A:C0:B8:A3:E4
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:47:02:8f:3f:bc:24:0a:a6:3f:f4:6c:75:d2:cf:1b:06:cf:
         2e:dc:9c:0d:fa:32:ff:fc:8b:e1:f9:3a:35:58:43:9c:02:91:
         13:8f:6a:b0:5b:c4:db:45:ee:65:6a:e7:1f:b0:51:02:d3:11:
         30:b8:fa:59:88:3a:52:ac:18:b8:17:a0:ab:22:55:3c:fc:61:
         7c:7e:fc:62:4a:b7:cf:e6:5d:e3:4e:58:f9:3a:77:9f:e4:7c:
         80:c3:bd:e5:9d:9e:85:5c:22:ec:f2:68:0a:e0:37:f3:15:82:
         cf:b8:7f:cd:66:66:12:b1:a0:4a:ad:79:f4:14:75:34:6e:95:
         66:f3:b9:97:0a:57:84:5c:7a:a5:74:2d:9a:da:ec:07:20:ec:
         bb:6e:fc:83:8c:02:6d:7d:53:a9:43:95:84:1d:7b:46:8d:5d:
         30:97:6c:77:c7:db:55:cd:fa:db:08:90:f9:84:e6:43:a3:4e:
         14:2c:11:3f:ee:a1:51:b2:ef:70:cd:fb:4b:5e:98:3a:b3:5e:
         9a:12:cf:c2:64:8d:d3:5a:6d:10:1f:4a:14:18:45:9b:7e:6a:
         5f:f1:15:7d:f4:3a:2f:01:82:3f:86:5a:c0:19:b2:73:25:0f:
         12:4b:19:ed:42:a1:db:83:f1:4d:83:5b:9f:1e:1e:48:ce:ea:
         d8:82:24:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:16 2026 by rpki-client