Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
File:                     8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft (raw, json)
Hash identifier:          MCp8KxFYu+SlyQKanWhKFzm2aX2Iykb114SD3mhfkIQ=
Subject key identifier:   75:E1:F2:41:E9:00:2A:C3:BE:CE:DE:68:26:F9:A7:32:DF:78:BD:AD
Authority key identifier: F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27
Certificate issuer:       /CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
Certificate serial:       019F905A068EFFB74D6DA1EB2BA706F80681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
Manifest number:          0B6B
Signing time:             Thu 23 Jul 2026 19:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:46 +0000
Files and hashes:         1: 7Nyjbqbs9N9Zh41DGSBoETJC5r0.roa (hash: mi+2zduefLUt/QSaBO9zYe4aEoiLRvtVBwAZPWRpVqo=)
                          2: 8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl (hash: EEmbn0l2vIGtH/cOk6PS856X7k244DeWi8/bKsMteHA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:06:8e:ff:b7:4d:6d:a1:eb:2b:a7:06:f8:06:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1307479f991b5043b7d37f7f8fd90466a2abf27
        Validity
            Not Before: Jul 23 19:00:46 2026 GMT
            Not After : Jul 24 19:00:46 2026 GMT
        Subject: CN=75e1f241e9002ac3becede6826f9a732df78bdad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:ad:a0:d2:82:a7:05:ec:38:a5:3c:44:1c:
                    4d:6f:81:f1:ec:df:b9:e2:13:81:3b:90:4c:26:e7:
                    04:01:cd:78:7a:a6:6c:42:06:72:2c:2a:9b:e3:79:
                    7f:c1:b3:bc:1e:09:b7:34:11:a6:c8:bc:34:31:9d:
                    0e:f8:d2:5b:eb:9d:85:74:b9:24:f8:69:c0:a5:9c:
                    fb:33:d4:b1:79:d7:df:96:4b:f5:91:94:9f:db:9a:
                    7e:24:d7:a7:17:7a:fd:0c:cb:d3:d3:55:1b:30:75:
                    8a:8a:81:66:f7:c2:88:29:5a:a8:3f:45:2b:ef:d7:
                    1a:7e:d1:88:48:70:6a:e4:98:f4:30:e5:b8:6b:e9:
                    65:db:72:fe:bf:fb:49:d0:8d:dd:11:c7:09:d7:92:
                    f3:9d:f2:1a:e3:31:52:bc:5f:fb:84:c5:b1:94:d3:
                    47:58:24:59:22:33:c2:ef:e8:4a:81:72:5e:4d:c3:
                    b9:24:ca:36:7b:43:21:ca:bc:5b:25:6a:7b:49:e4:
                    7b:55:1a:72:d1:b0:d8:0c:65:c8:5f:ef:65:10:82:
                    b6:0d:66:32:df:35:84:e8:cb:e4:0e:de:7d:31:f7:
                    67:5c:b3:d6:0f:f3:1a:35:ba:31:9b:fd:c2:0d:cb:
                    17:54:44:dc:f9:35:43:a0:86:b9:7a:ba:d5:ce:f2:
                    f1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E1:F2:41:E9:00:2A:C3:BE:CE:DE:68:26:F9:A7:32:DF:78:BD:AD
            X509v3 Authority Key Identifier:
                keyid:F1:30:74:79:F9:91:B5:04:3B:7D:37:F7:F8:FD:90:46:6A:2A:BF:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TB0efmRtQQ7fTf3-P2QRmoqvyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/54d445-a307-4987-8b68-b6aa0b8920e5/1/8TB0efmRtQQ7fTf3-P2QRmoqvyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:46:3e:1c:8b:0b:35:63:4e:62:62:eb:ca:66:ec:a9:e0:dd:
         8d:49:07:37:6d:e9:09:a4:f3:6c:d0:3d:54:da:68:bb:08:bb:
         a0:7e:d2:6f:bb:d3:ec:17:41:49:4f:d7:84:e0:52:50:31:6f:
         98:35:cb:36:73:be:d7:66:4d:a8:95:ca:b4:99:2b:24:35:b2:
         d0:41:45:7a:08:87:e8:58:74:b4:17:6f:43:5d:84:03:02:4c:
         9f:1e:c5:fc:62:14:59:ac:ba:88:8b:db:bc:0a:4c:c3:99:7e:
         17:37:ba:14:d9:5e:0a:a4:da:12:68:7a:fa:96:86:de:bd:3a:
         d0:c0:9f:d8:60:8e:c9:46:bb:8e:46:d5:e6:29:e6:cb:11:09:
         54:0d:30:e0:37:08:06:a1:ac:4a:ca:2e:f1:db:4e:28:e2:ca:
         d9:c3:a5:59:22:25:0f:dd:39:91:d8:60:58:d1:b0:e6:41:fd:
         1c:d2:b0:57:1c:ea:01:7a:6d:36:4b:5a:fa:71:de:ea:d5:88:
         62:32:fe:4c:a2:71:24:97:aa:23:92:0a:77:a4:72:3e:6b:7f:
         dd:52:88:5a:51:fb:5a:70:84:73:05:18:73:5d:d6:09:0e:00:
         6d:ec:e8:ef:5f:03:fe:01:c8:a5:0b:e2:99:8a:1b:68:2e:b0:
         80:05:c5:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:47:13 2026 by rpki-client