Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
File:                     87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft (raw, json)
Hash identifier:          2eq0xQHjayKDcoiwXSx6cGQrmxHBI13kANScWr7G+WE=
Subject key identifier:   C8:A0:57:29:FA:D2:42:07:50:0E:60:2B:E8:72:F0:98:C6:10:57:14
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Certificate issuer:       /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial:       019F8F7EAF986685AA0F3A877F83BD727D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
Manifest number:          0B5B
Signing time:             Thu 23 Jul 2026 15:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:12 +0000
Files and hashes:         1: 06XUCJMT07KfXMH10GGCj5wEbAw.roa (hash: EgHdwMOgNylzVaIS1PHOHRnXwiOAytji7pJB66LjXYc=)
                          2: 87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl (hash: zQzXDX5URDKFequGXAWPtHQNA7JXxfNSgurAs31uyCQ=)
                          3: BTJzW0cyJnm3gOVHNjV6jn9aIRE.roa (hash: VWm9Zf270UZNJJ0FAQ1IEKbRWwfLrnZq1cNtrFR5b6U=)
                          4: WFKY5S3JEQ7Bnr9_U-2Ry0udwLQ.roa (hash: fSBLesAAtR+VxH91LhsUX54ddGl+GGLe6PyGSsyj77Q=)
                          5: bNSTLmAd_NIyCsQeeMYvIeRAEeM.roa (hash: k+yE5PrtofGaHem4WOpHAIKjDh/WIjo33qvbhPmIE5I=)
                          6: jWrQWxU_htSVFKc3r-gsjIqKyK8.roa (hash: 155qzeQlRhVHXfpXCRqK6ZR2jbaxRLl0EHy1IGUr6Uk=)
                          7: o-t9v30roQgEmAMMQrIN0GWWHTM.roa (hash: BDRjhS+R9h4zRZxBIv6pBvO1F0/r0pyiN4YZozbXmzs=)
                          8: oujn_bgR2P0PhEZCax5BiO_oVf4.roa (hash: JeulLAWLMZsbKOX1qSlzlZW6BLtojE/TzKdL/Yu5wSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:af:98:66:85:aa:0f:3a:87:7f:83:bd:72:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
        Validity
            Not Before: Jul 23 15:01:12 2026 GMT
            Not After : Jul 24 15:01:12 2026 GMT
        Subject: CN=c8a05729fad24207500e602be872f098c6105714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:f1:22:74:40:3e:98:dc:62:7a:12:b1:b7:
                    70:4b:8a:24:bb:e4:e4:15:30:76:d3:e1:b6:dc:0c:
                    ca:3a:56:3c:38:50:81:a5:41:f5:8b:76:c7:af:05:
                    c8:6a:15:1d:eb:e2:b9:7a:7c:eb:24:75:08:7d:36:
                    3c:98:ea:aa:76:bd:eb:82:f9:ab:10:7e:32:ee:b6:
                    23:f4:c5:92:7d:df:e9:45:51:ba:dd:98:49:f3:f0:
                    55:61:2d:71:99:38:c4:27:5a:8a:ec:7c:35:4e:51:
                    24:7f:18:80:68:10:03:f3:5d:e8:d9:ff:b9:da:e2:
                    b6:f0:85:32:fd:81:59:a6:10:d9:58:19:c5:1b:d0:
                    68:b3:c4:ca:38:d4:79:c3:90:fb:23:60:4d:a0:b8:
                    06:4e:66:0a:3a:be:b9:64:b2:f5:7c:9c:73:63:5b:
                    49:c8:f7:05:55:1d:d2:4a:34:14:83:ae:28:aa:3a:
                    57:3a:73:1e:6b:c6:95:4e:a8:78:3c:7b:50:27:29:
                    7d:60:48:ed:ec:4a:39:42:70:9e:7a:8a:0c:a5:90:
                    dc:05:98:7c:4c:58:4e:61:4d:4d:7a:bc:38:ad:87:
                    82:84:8c:ad:1b:e2:56:f8:ff:0b:11:e5:49:27:fc:
                    47:56:db:9e:18:b8:6c:35:01:5c:7f:b7:70:27:52:
                    ed:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A0:57:29:FA:D2:42:07:50:0E:60:2B:E8:72:F0:98:C6:10:57:14
            X509v3 Authority Key Identifier:
                keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e5:42:a2:40:cf:b6:07:1e:28:aa:dc:f7:96:d2:a3:65:69:
         79:e6:57:97:54:63:6a:5f:c3:cc:f6:76:06:01:2d:d6:14:b1:
         8f:81:9c:de:f8:24:aa:53:68:d1:76:26:53:3a:24:81:14:0b:
         d9:3e:95:98:01:5e:9f:80:51:26:83:33:e6:8b:99:89:a8:e2:
         bb:cd:0d:c8:97:da:82:72:27:2c:2d:c3:98:3e:48:e4:07:0a:
         29:3f:61:c3:1f:5f:74:c0:bc:be:9f:bc:dc:e9:02:44:6d:e9:
         1e:b6:66:ec:0d:21:d4:27:f7:ce:8e:70:53:6e:e3:04:34:f7:
         4b:e3:d7:8f:b9:24:f0:ab:20:1d:eb:9c:63:e1:01:bb:b1:e7:
         62:cf:5a:0d:36:4f:a2:7b:e9:8c:6a:3a:63:e2:f4:2e:b0:0d:
         ec:14:b9:44:b1:72:76:30:35:2f:91:b2:6a:77:e6:92:0e:61:
         b8:25:f9:05:bb:ba:f5:87:a2:8f:74:64:c0:95:f7:dc:94:49:
         f1:89:b1:74:bd:eb:4a:96:be:70:e2:df:cd:22:37:d8:fd:c2:
         b8:a2:83:65:39:67:5d:5c:9e:ad:bb:90:fe:5d:87:e6:0f:97:
         f3:3f:61:57:25:8c:51:6e:45:8a:cd:4e:66:5c:46:db:bc:72:
         95:bd:3b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:23 2026 by rpki-client