Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File:                     k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier:          5i2JEogHuk4FHi4Oo1nCtLCc/nUu5WfpcVq5+c0DBvE=
Subject key identifier:   BF:74:3D:E0:71:F2:2A:2A:80:08:1C:BD:73:DB:03:67:23:94:B2:04
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer:       /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial:       019F916C4360A4888DAECBBED85E9CA38511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number:          10D9
Signing time:             Fri 24 Jul 2026 00:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:19 +0000
Files and hashes:         1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
                          2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
                          3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: xPPSzgKDgYaOGF5SBacYVDnb9dS4o2S36RSOxKOyWJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:43:60:a4:88:8d:ae:cb:be:d8:5e:9c:a3:85:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
        Validity
            Not Before: Jul 24 00:00:19 2026 GMT
            Not After : Jul 25 00:00:19 2026 GMT
        Subject: CN=bf743de071f22a2a80081cbd73db03672394b204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a3:8b:c6:cb:f2:01:1e:22:a4:d4:60:f5:d3:
                    49:17:f4:df:92:e5:1c:c3:ca:2c:ac:cc:da:12:5c:
                    d9:91:8f:81:45:72:d3:9d:b2:a9:c7:85:57:5a:9f:
                    ee:b0:20:39:8f:2b:a5:e2:a0:3d:eb:36:37:5a:e9:
                    10:1b:74:86:b4:70:80:89:2f:06:15:11:0f:c3:1f:
                    e2:c4:d3:a2:2a:3d:5f:c4:0c:0c:a3:ed:cf:05:e3:
                    23:28:05:c5:9f:23:3c:2c:1e:a0:59:14:f4:c6:b1:
                    73:ee:96:12:c6:b0:29:f2:9b:6a:9a:18:7f:11:8e:
                    45:b7:db:5a:fa:9a:7b:c8:dc:20:06:7c:74:f5:c8:
                    ff:3e:cf:93:5b:8d:1f:3a:ac:d5:7d:f3:a2:bb:0e:
                    0a:1c:0d:3f:48:18:21:2e:42:93:65:07:3a:be:e0:
                    4b:c1:9e:e0:e5:a5:33:cb:9b:d5:b8:b6:53:48:73:
                    c3:b6:f5:f5:3f:fd:e5:2b:ab:5c:25:18:e7:dc:66:
                    8b:1e:7f:df:9d:4e:a9:ef:88:b8:4e:c9:c4:18:0d:
                    27:c4:f9:10:4f:26:99:88:b1:e3:24:c9:a0:4b:dc:
                    fa:ec:dd:61:e4:d5:e1:a1:36:39:cd:33:77:c6:41:
                    10:24:b3:5a:64:22:44:29:54:76:99:ec:6a:5b:e0:
                    13:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:74:3D:E0:71:F2:2A:2A:80:08:1C:BD:73:DB:03:67:23:94:B2:04
            X509v3 Authority Key Identifier:
                keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:82:8b:0a:38:3f:f6:db:4b:02:79:b0:88:24:17:83:9a:
         17:9b:90:b6:2e:ef:5d:4e:0c:03:df:11:fe:b2:61:23:02:6d:
         4c:1d:63:15:ab:a4:b3:74:76:37:9b:2c:1a:ac:11:53:3d:1c:
         18:d0:a9:ab:11:7b:1e:d3:8b:8a:b2:59:9c:55:9c:e3:9a:76:
         84:03:af:09:f0:99:d0:ee:5f:de:7f:eb:da:32:d5:b4:2b:1d:
         6b:ef:cd:0f:38:67:64:6f:a2:7e:f3:8f:33:1f:f8:dd:9e:bc:
         4f:7e:eb:40:e3:a7:23:00:5b:f4:4b:09:3c:f2:71:0c:3a:70:
         fa:3e:8d:49:34:62:04:46:41:8b:40:75:4a:2e:43:2d:69:ca:
         c8:93:da:d0:54:42:a5:fd:35:2b:f0:21:3a:79:19:ab:71:a0:
         2c:85:b6:22:d4:8e:5d:c3:01:19:ef:67:6e:9b:85:79:8c:e7:
         c9:a8:69:85:19:2e:0f:cb:b0:a4:34:cd:f5:36:26:45:52:f0:
         9c:8d:e3:d9:5b:93:8c:e6:e1:6d:40:2e:f5:e9:ed:d6:50:c7:
         72:e7:b0:59:8c:42:74:8d:89:db:3a:5d:29:29:28:a9:48:82:
         11:c3:63:24:3a:87:2c:d6:b0:0c:b1:e3:18:43:d6:51:cf:f4:
         8e:c1:d3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:04 2026 by rpki-client