Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File:                     8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier:          QmPO0uyNjwRZFpy4AAKYrnmmMotNiGHvavJGyR9t9Ko=
Subject key identifier:   F3:9C:E0:F0:25:12:C4:21:43:4F:48:7D:A7:DA:2C:82:26:E1:41:31
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer:       /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial:       019F8FB5CCB5F57F98AE53BF6D7BB1C67044
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number:          13C4
Signing time:             Thu 23 Jul 2026 16:01:23 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:23 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:23 +0000
Files and hashes:         1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
                          2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
                          3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
                          4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: 24JIwsAd5kfRMLuX3SNecwC2UGL6DLZGuqxOLUTWgnE=)
                          5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
                          6: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (hash: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:cc:b5:f5:7f:98:ae:53:bf:6d:7b:b1:c6:70:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
        Validity
            Not Before: Jul 23 16:01:23 2026 GMT
            Not After : Jul 24 16:01:23 2026 GMT
        Subject: CN=f39ce0f02512c421434f487da7da2c8226e14131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:7b:4b:5f:f2:03:da:91:70:87:e9:e6:05:
                    96:b3:d1:eb:d8:bc:0a:82:b1:82:38:e3:75:32:ee:
                    4b:7f:73:cd:55:3a:5f:42:0c:e7:00:b8:9c:7b:b9:
                    23:c4:47:e1:e1:d7:b9:40:7c:5c:21:e6:b4:2f:63:
                    cc:bb:5a:13:f4:83:a6:90:07:8d:ee:5c:a5:fc:51:
                    68:9b:4a:5a:79:f7:b1:0c:b3:46:9f:be:06:09:a1:
                    f5:3e:a5:92:5e:6d:20:a4:0d:5d:c5:d9:a2:d1:2d:
                    a2:49:5b:b6:f9:35:cb:61:e1:db:c7:13:55:d6:48:
                    84:f3:96:29:54:76:fa:3c:2e:6c:3e:58:6d:ea:88:
                    4d:07:81:f2:93:bb:b1:45:cc:b8:4e:d6:4c:df:c6:
                    8f:f8:39:fa:48:4c:db:bc:2c:c3:7f:ac:1e:c0:ee:
                    43:74:83:97:37:b0:c8:bf:57:ae:a7:4a:d5:90:7b:
                    2f:99:d2:03:4a:15:cf:7a:1a:fe:81:8f:76:a4:ba:
                    24:3b:09:a2:a7:32:b7:d1:21:0d:b7:2a:13:ff:f5:
                    46:1a:50:50:5e:61:ac:d5:1a:cf:52:38:07:2d:1a:
                    6e:64:e5:8c:8c:53:0d:e9:ad:aa:06:c2:80:56:e8:
                    86:15:f0:af:05:a6:64:6b:86:da:c7:af:cd:24:23:
                    82:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:9C:E0:F0:25:12:C4:21:43:4F:48:7D:A7:DA:2C:82:26:E1:41:31
            X509v3 Authority Key Identifier:
                keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:31:11:23:92:20:17:91:bd:93:ea:50:d2:c9:1c:32:14:a7:
         af:98:78:e4:44:8f:24:82:cb:ea:4a:82:7e:a0:0d:5f:2a:b9:
         31:2d:31:ec:b4:18:cf:52:e8:26:2b:35:1e:a0:2e:7f:fa:5b:
         d1:d8:98:33:8b:9e:19:4f:cf:8b:43:6a:30:32:ac:1e:a5:fb:
         24:04:fb:f1:12:cf:1c:a0:92:b7:d6:0a:7f:09:97:9f:60:7c:
         ba:06:b5:af:36:03:0f:95:b6:90:fc:10:53:09:e8:f4:83:de:
         af:ed:20:80:fe:f8:80:58:39:f2:76:0b:63:79:fb:80:cf:6d:
         fa:db:71:e0:3c:3d:89:37:61:0a:25:23:93:d8:2c:62:09:2f:
         70:5d:6f:00:1c:da:6b:f8:e2:26:81:50:e5:0a:a1:17:46:66:
         3c:2f:a1:b4:4a:a9:8e:7c:c6:d6:fd:c2:cd:0a:98:44:f5:b4:
         24:86:d3:28:e3:23:45:36:2c:39:47:e3:df:be:9f:6c:69:db:
         e3:9a:11:d1:87:7f:ba:d9:38:da:73:57:f8:4c:3e:2a:f2:bd:
         ad:32:fc:e7:e8:a9:e4:c9:12:09:62:fd:2b:62:7f:dd:21:6e:
         7a:19:eb:c2:50:92:10:2f:f1:e6:42:03:9b:04:6d:e6:b9:24:
         39:cf:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:56 2026 by rpki-client