Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
File:                     sCqa8vxf6TxDFIqssTxRvpBMjkw.mft (raw, json)
Hash identifier:          1YFpyq3uNmsvJxMEfyxFJ2k9Sj8beb/ZvMFrw6jxVTI=
Subject key identifier:   67:46:72:D8:94:0B:ED:87:F9:F3:62:18:7E:11:09:02:13:3D:79:39
Authority key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Certificate issuer:       /CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Certificate serial:       019FA33CADF42E8BC098C8C05E1035715A41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
Manifest number:          080A
Signing time:             Mon 27 Jul 2026 11:01:30 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:30 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:30 +0000
Files and hashes:         1: sCqa8vxf6TxDFIqssTxRvpBMjkw.crl (hash: Hh2IsKs3bH4LxWA71OaKnNddTkg6DRNv266Qz4VoO24=)
                          2: y0urSuZI8k80qDTQJ3kG5eohDE0.roa (hash: Y9liF5XubPckrTgkSr37iUFqjTSMFsZSlRvzu6Hk6eI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:ad:f4:2e:8b:c0:98:c8:c0:5e:10:35:71:5a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
        Validity
            Not Before: Jul 27 11:01:30 2026 GMT
            Not After : Jul 28 11:01:30 2026 GMT
        Subject: CN=674672d8940bed87f9f362187e110902133d7939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:20:2d:71:6d:20:43:59:59:ad:71:c3:4e:
                    5a:2f:7d:5a:4b:37:df:76:14:85:ae:74:ab:21:26:
                    9e:d5:fd:28:ea:1d:06:42:f0:49:9a:d1:98:d9:23:
                    ec:1b:f2:71:07:55:c5:61:46:9b:cc:df:11:eb:9b:
                    b7:cf:95:74:01:f5:7b:50:66:b2:ca:e6:31:3c:a7:
                    27:af:81:25:e0:d0:ca:b2:16:55:c1:d3:4c:22:77:
                    9f:33:c6:41:13:eb:d5:e2:91:00:58:50:9f:87:b6:
                    da:11:8d:17:7b:95:12:b0:4b:fd:54:37:d2:86:40:
                    77:94:fc:d2:1b:f3:05:9c:2f:5f:d5:14:47:92:3f:
                    96:db:f8:92:0b:9f:fc:da:d0:da:1a:ae:9a:1c:22:
                    22:ce:02:0d:14:36:69:03:0c:b2:0e:3f:5b:3f:45:
                    85:bc:3a:23:c3:f9:7b:2b:99:0d:7f:d5:44:cc:05:
                    b6:09:50:bc:52:a2:ed:58:88:1a:d2:fe:23:c6:1f:
                    37:83:96:01:f3:84:90:f7:87:75:6c:9f:4a:72:4c:
                    8b:b5:18:24:72:1b:3a:f5:93:63:eb:85:17:81:e9:
                    43:1c:ee:09:72:4e:1c:ce:02:66:54:72:a7:b1:f0:
                    69:93:b0:dc:ba:dd:77:d9:09:90:85:1d:19:1c:41:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:72:D8:94:0B:ED:87:F9:F3:62:18:7E:11:09:02:13:3D:79:39
            X509v3 Authority Key Identifier:
                keyid:B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:36:79:07:f2:34:a6:f5:72:d9:57:c1:46:96:b3:2d:9f:f0:
         74:20:3f:33:78:a3:65:9a:64:d4:75:b7:d1:2a:9a:4f:b4:39:
         70:16:d0:3d:66:87:46:a2:c8:c0:91:8a:69:e3:89:20:2e:29:
         47:83:f3:2b:cf:e9:eb:6c:8e:80:39:c5:e7:3a:fa:be:94:cd:
         0d:40:fe:c0:b9:df:c2:92:8e:dc:2f:78:b3:bb:18:76:34:bb:
         2d:14:4d:dc:e8:58:85:d9:74:a1:51:6f:b7:87:1c:b4:74:b3:
         d5:7b:55:07:e8:9c:6e:48:61:29:dd:b1:e3:6b:24:7d:51:7d:
         3c:91:53:65:82:fa:b3:0d:19:57:4b:c3:68:25:6e:28:49:59:
         fd:d4:aa:31:de:c4:8a:05:0e:76:15:e9:87:ea:64:34:89:cf:
         ff:e0:be:e1:7b:b6:5e:f0:23:36:fb:26:58:73:df:da:29:07:
         ec:93:8b:9c:8a:81:76:58:48:19:ec:41:e9:df:06:3e:05:b6:
         43:75:65:fe:6c:9c:19:b6:c0:8b:9b:b1:94:b2:02:2e:2f:f1:
         d4:f3:13:d8:e7:4b:06:ea:28:d6:4c:8e:b6:11:66:85:27:c0:
         50:63:a9:b3:34:c3:e8:92:83:93:fe:8c:f5:ae:48:5f:f4:92:
         12:1d:ac:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:21:45 2026 by rpki-client