Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File:                     8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier:          qYlvUoDN2vbo4kJNuprDh40QfxGo34vgnayP2F8wrtQ=
Subject key identifier:   4F:B6:5A:C4:E6:5D:9A:72:5D:0D:EA:A1:09:C7:C8:FF:53:C6:7B:D2
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer:       /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial:       019F1867CB94B0344D7A360F24DD1CD33677
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number:          12C1
Signing time:             Tue 30 Jun 2026 12:01:23 +0000
Manifest this update:     Tue 30 Jun 2026 12:01:23 +0000
Manifest next update:     Wed 01 Jul 2026 12:01:23 +0000
Files and hashes:         1: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: pTR2CeMEuVuBta8EAghfNCcC1tyZPaQ2jMkHFn/R43Q=)
                          2: jNP4lkkfBvGwQninx6yZc-naqo8.roa (hash: sz5Qqi9rGFZNr7jIWcNDJD+aLk3iNQT71jM/j1utVDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 12:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:67:cb:94:b0:34:4d:7a:36:0f:24:dd:1c:d3:36:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
        Validity
            Not Before: Jun 30 12:01:23 2026 GMT
            Not After : Jul  1 12:01:23 2026 GMT
        Subject: CN=4fb65ac4e65d9a725d0deaa109c7c8ff53c67bd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a9:44:5b:de:88:d8:03:65:e1:e2:4b:7f:cf:
                    f1:00:ed:56:91:66:9b:69:24:7c:48:6d:ce:41:36:
                    6f:38:f6:fe:43:71:79:12:f6:33:f1:ac:3a:6f:c9:
                    cc:88:0c:a9:7a:5e:86:48:41:70:60:a4:b5:b0:cd:
                    c8:52:f5:df:46:49:db:40:63:f8:73:e1:c5:5c:d8:
                    ea:b4:cc:8d:31:1d:3a:68:1d:c8:52:7e:5d:90:7e:
                    8f:05:d0:58:d1:af:45:7a:b0:44:1b:a0:85:5c:31:
                    fe:ab:82:38:68:62:a4:e8:67:4d:6c:5e:4b:a7:55:
                    47:24:c9:13:89:a5:91:7b:15:73:0b:b2:c1:a6:7f:
                    e0:7c:f4:24:3c:da:90:70:27:71:e4:2b:65:6e:95:
                    ce:72:4a:a8:dd:aa:d7:11:47:94:45:7a:2e:a1:f8:
                    03:e8:d0:44:87:ec:f2:7d:75:f1:ec:57:85:6c:fe:
                    c9:9d:d8:44:72:58:b4:73:35:02:4a:fb:69:9f:92:
                    48:19:2c:3e:9b:5b:af:9f:bf:e7:e7:28:74:36:25:
                    18:8c:6f:f6:47:3b:92:ee:de:a6:4b:ab:f4:3a:8a:
                    b5:fa:4c:b3:8a:c8:c0:4a:5a:1d:b3:15:5f:51:d6:
                    b2:78:21:5a:e8:c9:66:af:13:1d:33:9f:9e:51:9b:
                    e0:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B6:5A:C4:E6:5D:9A:72:5D:0D:EA:A1:09:C7:C8:FF:53:C6:7B:D2
            X509v3 Authority Key Identifier:
                keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:df:0c:66:fc:5d:df:1a:1d:fb:bd:ae:db:f2:08:e0:14:9f:
         8d:cc:60:23:9a:83:da:46:ee:14:60:9c:4b:7a:d5:b1:c0:3f:
         49:c6:db:14:06:b1:77:78:f9:b1:f2:8c:3d:2d:de:47:ac:1c:
         24:9c:9c:c2:2d:c4:18:83:f2:63:6f:74:0c:f4:c3:8d:f8:49:
         35:56:33:49:77:0c:92:35:de:2e:5e:9c:20:10:2d:1b:64:c9:
         68:52:a6:37:e9:7b:3e:89:be:20:1c:1d:84:03:33:02:cc:f5:
         c4:c7:a0:5e:c2:2c:8a:d3:a3:0c:86:08:42:99:d8:43:13:88:
         01:f9:be:b8:b8:8d:0b:ee:8b:5e:90:6d:37:87:6a:e4:93:9a:
         d4:df:15:bc:3b:93:9e:e9:f2:e1:b7:f4:a3:82:c6:07:1a:3c:
         91:16:c5:e5:36:1e:ac:50:1d:7c:22:d1:87:92:9f:00:c6:fb:
         cf:46:de:a2:30:ed:4c:2a:a8:1e:76:f9:8c:a5:7b:06:98:33:
         6f:37:13:29:d9:d3:fb:ea:20:e1:8e:cc:80:01:af:da:41:86:
         05:cb:54:83:5a:99:c6:03:c4:e7:cc:65:e3:10:28:64:74:0c:
         71:af:97:78:ad:47:54:01:5f:88:f0:8b:bc:39:50:7f:e6:97:
         ca:4e:55:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:29:56 2026 by rpki-client