Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File:                     8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier:          MwC+0eez2Edr4QFY+e30VnP2vKxhYcOXzvk5wM2ALvA=
Subject key identifier:   9C:F2:FE:02:95:F5:CD:E6:CF:62:8A:B0:AE:BF:5A:85:A7:C1:7C:0A
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer:       /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial:       019F8FB5A1A9415C832ACA49736EA0A860F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number:          0E45
Signing time:             Thu 23 Jul 2026 16:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:12 +0000
Files and hashes:         1: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: fa9diFbg2sSpPRl3RCJcCnyuA0prKhk+XYMOd0ca0zY=)
                          2: Zidt70uR7EwA_jgMGhMKRePnDVY.roa (hash: 6vXv6cZr8X2Vui/UxLz5jRQ2ypTWx8KVaQj2Aal4KCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:a1:a9:41:5c:83:2a:ca:49:73:6e:a0:a8:60:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
        Validity
            Not Before: Jul 23 16:01:12 2026 GMT
            Not After : Jul 24 16:01:12 2026 GMT
        Subject: CN=9cf2fe0295f5cde6cf628ab0aebf5a85a7c17c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:90:a3:c8:ef:4b:d7:76:db:44:96:a1:a3:00:
                    fa:40:10:64:90:26:5e:69:47:e7:12:8a:a0:c4:eb:
                    8b:e7:08:30:88:29:d2:59:d2:db:46:c0:57:d3:85:
                    2a:34:5b:9d:b1:c2:e6:05:78:2e:2b:37:df:c9:66:
                    69:99:90:f8:e3:a3:a3:7d:ef:0b:ae:8e:22:9c:87:
                    7f:02:10:91:07:28:03:ae:45:df:3e:3e:72:f4:8e:
                    55:2f:15:09:8c:f2:a9:2c:c3:cd:c7:56:dd:92:00:
                    54:cc:24:54:ab:d7:49:6b:3a:68:61:b3:c5:a2:95:
                    0c:d3:cf:21:c0:62:49:ae:8a:5b:54:22:0d:7e:30:
                    d5:9e:2e:e6:e9:f4:23:06:fb:82:b1:77:31:4d:0d:
                    7b:7e:56:c2:d5:e0:9f:84:ce:23:ed:91:76:3d:15:
                    6a:1e:2d:ef:a6:c4:5e:09:d3:cd:14:81:39:a6:02:
                    6c:ad:92:bb:7e:05:a2:75:9a:5d:dc:af:93:6b:ae:
                    ca:86:26:37:02:0c:0a:c0:90:1e:09:c1:90:00:59:
                    c5:f2:26:b4:36:5c:f6:d1:ea:b8:60:ca:2a:16:2f:
                    8d:c9:8d:ac:ef:bf:1e:93:06:45:9b:5e:04:a9:9a:
                    80:e3:a4:ff:a4:c9:69:e0:52:d9:18:01:3e:75:3b:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F2:FE:02:95:F5:CD:E6:CF:62:8A:B0:AE:BF:5A:85:A7:C1:7C:0A
            X509v3 Authority Key Identifier:
                keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:92:91:33:ae:dd:eb:e3:0c:9e:7e:80:8d:47:7a:08:58:4b:
         51:13:67:4f:73:98:77:8c:84:25:42:00:ee:0c:c8:ed:40:3e:
         35:8c:b1:cf:65:14:d5:ba:47:44:54:6a:b1:9a:dd:eb:df:fe:
         4b:4c:86:e3:d6:db:6c:3a:62:a0:5c:6a:87:b1:48:ef:17:92:
         e4:1f:04:33:87:f8:a8:9b:3c:d4:06:df:59:44:94:27:4e:34:
         ed:32:48:1e:c1:64:7f:ec:d7:3a:fc:e3:b8:e7:e8:af:3d:3a:
         bc:b7:a5:0a:53:5e:11:59:89:c4:ea:8e:47:98:7d:fe:c4:94:
         06:36:11:c3:af:8f:44:0c:6f:62:05:d9:08:a1:94:fd:37:4c:
         18:28:38:47:90:6c:86:51:72:76:54:8b:82:f6:ff:1d:e7:b7:
         77:b7:46:8d:dd:a6:93:a6:4d:c5:a5:5b:60:96:33:e6:1b:2a:
         cf:ad:82:d6:ab:3f:5b:8c:b9:8f:ea:aa:13:2e:03:c7:76:07:
         c3:5d:03:f2:06:3c:7f:bb:db:17:22:5f:ef:56:db:86:b3:9a:
         b9:17:95:55:56:47:7d:db:7c:85:d5:79:9a:33:58:44:06:7c:
         ef:07:ba:5e:1a:b4:6d:25:b8:57:9e:b0:1a:65:3b:cc:ba:46:
         29:92:71:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:10 2026 by rpki-client