Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
File:                     82DHix1GLWuv33NZ08Iz3b-SnTE.mft (raw, json)
Hash identifier:          YnlVE9+CPX/wr1WuuqKrIcUZjn94QL+ZAq8SPIUGI1M=
Subject key identifier:   48:9D:EA:7C:AD:6D:0E:0B:0A:50:93:06:EB:3A:95:26:3C:9A:39:8D
Authority key identifier: F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31
Certificate issuer:       /CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
Certificate serial:       019F18300646885A591979C83A495DAB0131
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
Manifest number:          08F8
Signing time:             Tue 30 Jun 2026 11:00:28 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:28 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:28 +0000
Files and hashes:         1: 82DHix1GLWuv33NZ08Iz3b-SnTE.crl (hash: 0mYX+jI3puR13FD0+slm40JE4h/USEDZSUzoCgcMPtk=)
                          2: yhxgRAr99RGmci9ROhuXvzy0jYE.roa (hash: 3wgbJG/cVAe3llBkizxknl37XeT2Rpuyh/OqTuIeXAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:06:46:88:5a:59:19:79:c8:3a:49:5d:ab:01:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360c78b1d462d6bafdf7359d3c233ddbf929d31
        Validity
            Not Before: Jun 30 11:00:28 2026 GMT
            Not After : Jul  1 11:00:28 2026 GMT
        Subject: CN=489dea7cad6d0e0b0a509306eb3a95263c9a398d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:f5:b7:9d:6d:79:f9:63:e0:af:80:ef:72:
                    8c:79:6d:d5:7f:ce:b4:42:b4:37:eb:c4:16:ee:cb:
                    49:ca:0d:b3:9c:cc:04:a3:9e:49:05:22:25:62:70:
                    19:be:bc:1e:ea:8c:a0:fb:c8:bf:52:c2:f2:6b:9c:
                    91:f6:0e:81:b2:64:1d:14:4d:e4:da:65:fc:97:f3:
                    79:b2:93:f5:65:95:9d:e8:d9:7a:2c:6b:1e:0d:99:
                    52:a4:b0:f7:f7:32:23:26:1b:9e:a2:2d:8f:e9:a5:
                    50:36:0b:fc:17:55:42:b9:18:b8:b4:1c:82:52:6e:
                    18:22:f9:7a:92:00:a0:2d:a1:b1:53:ab:25:3d:dc:
                    d4:13:69:5c:45:e2:0e:0c:17:c4:1f:16:7c:ad:f6:
                    a6:ae:b2:26:53:1b:e4:9b:09:90:d9:da:6f:08:68:
                    79:9d:cd:6c:51:ee:d8:2d:55:19:59:4a:42:61:5c:
                    04:f7:8d:98:8a:63:86:67:d4:4d:2f:3a:1c:f7:9e:
                    fb:9e:33:95:25:e7:4b:92:27:33:6b:9a:71:f7:2b:
                    a9:ca:75:a6:13:fc:c2:fa:e3:7f:a5:96:5c:a2:58:
                    ea:ea:25:b5:13:f4:b7:13:84:56:4e:2c:11:9a:ef:
                    53:af:47:32:09:f3:e3:9d:c0:dd:35:b3:f4:bb:15:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9D:EA:7C:AD:6D:0E:0B:0A:50:93:06:EB:3A:95:26:3C:9A:39:8D
            X509v3 Authority Key Identifier:
                keyid:F3:60:C7:8B:1D:46:2D:6B:AF:DF:73:59:D3:C2:33:DD:BF:92:9D:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82DHix1GLWuv33NZ08Iz3b-SnTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d8c99c-e0c8-4c1a-81fb-900d1ca32d7e/1/82DHix1GLWuv33NZ08Iz3b-SnTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:f9:b0:5d:ad:21:b0:32:f1:8f:dc:b5:9c:68:ba:1a:58:a6:
         84:c7:e2:b2:21:92:4e:c1:1c:5d:79:bf:ed:c1:83:46:0d:25:
         4e:67:df:fc:f8:29:9e:6c:25:2f:90:c9:22:a9:5e:bc:81:e3:
         ab:5c:17:2f:f4:1a:5e:66:32:31:e1:df:e1:59:d3:de:0a:5e:
         05:6b:e7:44:c2:df:6d:85:77:54:e3:b8:10:ae:b6:08:64:90:
         61:da:66:51:28:21:30:9b:ae:3b:ef:b5:3d:b5:aa:39:d9:4d:
         9f:62:c6:e9:a3:21:cc:e7:72:31:06:77:bb:48:5f:cf:5e:35:
         55:ec:39:b9:7a:86:3e:e2:1d:25:fc:b2:32:3c:b1:c2:a3:31:
         13:78:c8:a2:e3:47:3c:f2:dc:92:f9:91:0d:7d:76:59:3f:59:
         b7:4c:f5:02:f3:5a:56:d9:88:df:64:be:aa:37:1c:2f:1a:e3:
         54:c0:11:fc:4b:06:bd:2d:e9:b2:4a:07:24:22:88:ef:9e:47:
         8b:b8:45:36:bb:88:1a:9b:e5:bf:cf:bf:bf:d8:7d:40:b7:74:
         1c:45:52:4f:a1:93:cc:54:5f:89:19:a5:14:95:b2:6d:d8:20:
         36:0c:8b:23:32:1b:9b:4b:08:d3:f6:05:50:81:39:c6:dc:41:
         6d:31:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:35 2026 by rpki-client