Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          krQHNvv2kVYgNROx8+nygwuQPp55YmCp6OYfMKCABVA=
Subject key identifier:   6D:8E:A4:9B:BA:EF:E2:CF:74:A6:AA:E8:7F:D2:59:E7:EE:8C:8D:AE
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       019FA1F22EB3EFAFE10D30F5D6EB5291B867
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          128F
Signing time:             Mon 27 Jul 2026 05:00:31 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:31 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:31 +0000
Files and hashes:         1: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (hash: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: Y8mVzSaxpwgP2HTMT6v2f9nfm8KwmsajZAdGBwCZMBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:2e:b3:ef:af:e1:0d:30:f5:d6:eb:52:91:b8:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Jul 27 05:00:31 2026 GMT
            Not After : Jul 28 05:00:31 2026 GMT
        Subject: CN=6d8ea49bbaefe2cf74a6aae87fd259e7ee8c8dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:99:99:c5:7d:69:74:75:a8:81:4f:da:3e:08:
                    49:da:92:a3:9f:a4:42:11:d6:66:9d:28:c9:b5:a5:
                    c0:98:80:3d:1a:57:5c:d7:cb:26:47:66:e7:94:17:
                    e7:8e:ce:be:ad:8f:25:6e:00:85:84:0a:51:91:44:
                    b5:68:4a:be:6d:6f:a4:2b:13:f8:b2:29:27:3a:57:
                    d0:c6:d0:79:f1:1c:83:c8:1a:54:4b:58:f2:9f:6f:
                    c9:ba:df:93:94:a3:36:c1:5c:bb:6c:a5:bc:da:34:
                    3b:37:6b:72:c6:22:7f:6c:91:e2:d2:d9:41:14:3b:
                    20:d6:c5:eb:54:03:c3:fe:cc:04:ab:a1:e8:c3:c8:
                    0d:f9:6f:75:b7:2b:5a:50:97:44:29:13:d2:45:75:
                    95:4a:6b:6e:2a:a7:0d:b8:ab:37:b0:e2:dc:6f:5b:
                    3d:50:24:b5:94:c7:74:5e:13:c3:01:a9:ea:d3:e4:
                    58:55:0e:ff:22:c4:cf:c9:82:db:f2:32:58:3c:39:
                    f2:24:3d:9e:01:25:fa:4c:0c:a8:10:52:47:d9:99:
                    01:e2:8e:61:a7:cf:82:40:c9:a0:b3:bd:ce:9d:0e:
                    39:dc:90:25:d3:ce:4b:ed:8e:3e:e1:17:bd:87:ca:
                    62:aa:84:bd:3f:4e:ca:2b:e4:d3:6b:f2:85:85:7b:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:A4:9B:BA:EF:E2:CF:74:A6:AA:E8:7F:D2:59:E7:EE:8C:8D:AE
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:9b:6f:90:03:ef:4f:30:9b:c7:df:3f:d4:99:8f:5e:0f:e5:
         b0:39:e3:e9:fb:bb:1b:96:d4:96:c7:bb:e4:36:6b:29:e1:a6:
         32:57:cc:50:27:d4:2e:88:1c:2f:53:d8:34:af:05:b2:a0:70:
         42:dd:9d:ea:0d:28:91:74:7c:cd:f3:c9:bb:af:b9:5f:c6:27:
         a2:6e:82:56:2d:a1:1a:31:e2:d1:88:9c:57:43:00:b3:ff:cd:
         01:19:cc:52:cb:63:c8:ba:5b:cc:f2:eb:9e:52:5c:e0:90:d6:
         97:1e:c7:35:9b:e7:cc:f2:83:1e:c8:38:e4:de:e2:83:18:1e:
         e3:4f:ef:23:7e:45:56:68:b2:7e:3e:5b:47:69:13:37:9f:2e:
         18:6b:ed:07:27:f8:e6:f6:02:53:17:71:69:5f:06:df:55:44:
         2e:2f:b4:73:fa:c8:b1:f2:54:9d:d8:45:02:10:fc:aa:a3:b1:
         03:48:98:6e:25:25:f1:9e:ba:49:97:ec:95:d6:12:fe:8e:92:
         45:39:b4:bd:c4:3c:71:d5:5f:f8:df:8f:2f:4e:ab:7d:81:d5:
         47:b6:e6:f2:07:a2:16:14:c9:d0:ee:e3:10:29:59:58:66:5a:
         ff:ae:c6:30:7d:88:f6:3b:f4:9d:12:e3:f6:e3:f0:ed:0f:74:
         eb:12:12:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:05:02 2026 by rpki-client