Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
File:                     80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft (raw, json)
Hash identifier:          3NtlO5YzuWsoM+XJL0MG4rEAETULrCycNoORs/x+PKE=
Subject key identifier:   65:1E:FD:96:57:99:C0:5D:13:3C:56:EC:1E:E4:5E:0A:B2:63:A9:1D
Authority key identifier: F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4
Certificate issuer:       /CN=f344a9f3665084f5009921ac52d119750beed4b4
Certificate serial:       019F8F4727EBA239E1989197BAACD5E72450
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 14:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:32 +0000
Files and hashes:         1: 2KekhlWBejdFD7GFVdo-rq9I-Lk.roa (hash: u86VEt28YlwVGTomKAy9b0M7sMBBTGVJ9+WMRB1kQKY=)
                          2: 80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl (hash: AFOYvR3UfsKkSlvWnqx+85r66Yj3As0UNBn9pBo8W44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:27:eb:a2:39:e1:98:91:97:ba:ac:d5:e7:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f344a9f3665084f5009921ac52d119750beed4b4
        Validity
            Not Before: Jul 23 14:00:32 2026 GMT
            Not After : Jul 24 14:00:32 2026 GMT
        Subject: CN=651efd965799c05d133c56ec1ee45e0ab263a91d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:60:e8:2b:ec:bb:2a:0e:e7:66:2d:10:9d:9b:
                    0e:84:83:cc:99:3d:1b:4d:fb:4a:13:74:4c:d2:c0:
                    9e:3b:52:f1:db:03:f8:61:89:33:18:b7:e7:16:38:
                    4d:16:e4:34:d5:91:bf:07:34:e2:68:44:e8:0a:d5:
                    18:64:6a:65:3b:1a:42:83:0d:d7:49:81:af:86:13:
                    81:ed:63:39:ad:f0:4b:fc:60:7b:bc:ac:22:b8:ab:
                    48:24:f5:92:3b:2d:82:fd:18:2a:a7:4a:eb:8a:11:
                    6c:f3:75:96:5e:07:25:98:6f:5f:85:54:cb:79:48:
                    70:d1:34:ad:40:ae:e6:a1:68:df:06:03:31:d3:a1:
                    bb:78:78:9c:dc:d7:e5:87:d7:30:9c:5e:da:a0:cb:
                    6c:06:b4:e9:58:af:b4:9c:62:39:23:95:e5:4e:c0:
                    5f:35:ba:08:c8:14:0c:0f:02:92:c3:bd:a6:43:6f:
                    e1:9b:bb:25:5c:aa:f2:b6:ff:ba:f3:76:54:c8:c4:
                    af:4b:69:61:aa:de:6e:dc:ab:22:90:00:9f:cf:7b:
                    ca:f4:71:ba:23:a7:76:0b:3b:08:7e:32:21:47:2c:
                    3d:8e:b1:4a:1a:4b:3a:29:0b:17:b9:e4:14:33:f9:
                    c7:bf:b6:1e:a2:d1:31:04:48:6b:9b:03:10:4f:fb:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:FD:96:57:99:C0:5D:13:3C:56:EC:1E:E4:5E:0A:B2:63:A9:1D
            X509v3 Authority Key Identifier:
                keyid:F3:44:A9:F3:66:50:84:F5:00:99:21:AC:52:D1:19:75:0B:EE:D4:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/716a90-d295-4903-90f9-d8c7ef15511d/1/80Sp82ZQhPUAmSGsUtEZdQvu1LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9a:e3:68:69:b5:0b:59:11:05:1b:cb:be:5d:52:99:78:ba:
         b5:87:73:e4:dc:f6:97:59:71:85:92:5f:7f:bd:d1:a1:15:95:
         41:b7:b2:13:c3:b4:fb:c5:1f:95:7a:a6:aa:92:58:29:0e:f6:
         39:5f:7a:86:c2:d4:e7:1a:23:56:1e:d3:aa:93:d5:75:79:3c:
         35:7c:4f:71:68:ab:7b:95:c0:7e:62:b1:b8:16:b1:14:5b:4c:
         c9:83:1d:a9:70:f8:f2:99:81:cd:f0:01:43:c0:15:55:9b:99:
         cd:3b:6e:2f:d0:e2:18:d9:1b:29:1f:06:39:1c:b7:a2:25:52:
         36:ac:4c:16:03:98:0d:f3:8d:97:5d:b9:5a:f9:3c:42:48:8b:
         73:33:68:6d:99:54:64:60:7f:d3:89:53:4a:ad:f3:0e:58:bc:
         8d:99:98:b3:5d:c6:c9:c6:4e:1b:c6:28:7b:7f:f4:64:57:b7:
         71:9e:a5:23:2d:db:c1:40:9d:5f:f1:16:ce:3d:55:63:d0:6e:
         dc:7c:7c:e5:17:96:81:46:a9:86:33:4d:c4:ae:d8:bf:99:ff:
         42:4c:f3:72:d1:a7:83:1c:32:36:b4:35:1b:7d:f6:b4:ba:51:
         97:32:ee:69:60:3e:cc:b7:07:49:5f:cb:3a:0f:ba:17:4a:bb:
         84:de:1f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:08 2026 by rpki-client