Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
File:                     8p5p65n-wSVjcxHUMFL3kx2P3TI.mft (raw, json)
Hash identifier:          qdZRQ+8OdRgi2Acm5Wma2d84Zj2D6Hn3yjgZy5mbcGw=
Subject key identifier:   FE:4F:62:77:D9:F1:B7:47:BC:BB:D1:08:96:E6:E6:F0:5D:F9:46:55
Authority key identifier: F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32
Certificate issuer:       /CN=f29e69eb99fec125637311d43052f7931d8fdd32
Certificate serial:       019F916D25703032A79A09301FFFEB3BB367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
Manifest number:          0960
Signing time:             Fri 24 Jul 2026 00:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:17 +0000
Files and hashes:         1: 8p5p65n-wSVjcxHUMFL3kx2P3TI.crl (hash: TuHkSlA7ML2znXtZaFW4sRm+fHe9rjoGR18+8XFI08k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:25:70:30:32:a7:9a:09:30:1f:ff:eb:3b:b3:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29e69eb99fec125637311d43052f7931d8fdd32
        Validity
            Not Before: Jul 24 00:01:17 2026 GMT
            Not After : Jul 25 00:01:17 2026 GMT
        Subject: CN=fe4f6277d9f1b747bcbbd10896e6e6f05df94655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:18:f1:25:5d:fc:37:68:f3:75:17:75:26:8c:
                    04:a0:47:f8:3b:df:43:3b:b4:36:3b:1e:6a:7d:83:
                    5c:6a:11:c2:4c:8f:77:55:2b:b6:cc:c6:63:af:53:
                    5c:c2:45:98:08:eb:e4:b1:9f:05:9f:d8:3d:d5:7e:
                    81:5e:7d:aa:ad:e4:08:59:06:4b:89:72:6e:44:9a:
                    ac:7a:d9:70:1e:36:4e:6e:46:8f:b3:5b:4a:76:ee:
                    04:bf:f3:ff:e1:6c:65:7d:98:8a:a2:a9:43:fe:d4:
                    20:9e:f5:4a:60:0f:40:d8:82:21:2f:56:2c:30:27:
                    ea:b2:f1:e2:a0:6a:bb:5a:82:52:a7:a6:c7:93:1d:
                    46:d0:d9:82:e1:5e:1a:1f:c7:b1:ce:09:75:c5:8f:
                    30:e7:f4:42:22:90:ac:72:b9:49:f8:7d:c3:51:28:
                    b6:68:b2:f6:82:fa:0f:c5:02:f6:6a:f5:c2:55:ab:
                    a0:b0:d9:95:ed:07:97:38:91:46:87:a2:b2:1b:eb:
                    1e:77:de:73:08:87:4b:65:48:ae:4d:b5:19:90:24:
                    5a:c9:3a:5a:97:f5:ea:60:b1:ad:15:b3:ea:5f:08:
                    f5:0c:67:7a:a0:e9:5e:5b:f2:15:fc:04:e4:10:43:
                    53:e8:28:c4:52:fc:d2:87:c5:03:25:39:85:91:21:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4F:62:77:D9:F1:B7:47:BC:BB:D1:08:96:E6:E6:F0:5D:F9:46:55
            X509v3 Authority Key Identifier:
                keyid:F2:9E:69:EB:99:FE:C1:25:63:73:11:D4:30:52:F7:93:1D:8F:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8p5p65n-wSVjcxHUMFL3kx2P3TI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c826d-93b8-4c3a-a21f-513403e3d820/1/8p5p65n-wSVjcxHUMFL3kx2P3TI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:4e:e2:62:3b:80:dc:b7:9d:46:6d:6d:c0:e7:e0:64:2a:
         17:c8:bb:34:96:24:39:54:68:cc:76:80:04:d0:0d:0f:cb:fb:
         9f:1c:8d:40:24:15:54:eb:a5:52:4f:82:0e:8a:e2:b3:1c:9b:
         2a:97:44:75:e4:cd:8c:08:e2:57:64:4c:19:24:55:90:a9:9a:
         bf:f6:76:f0:76:b1:35:5c:a1:3f:ef:0d:28:fd:1d:47:38:21:
         c7:13:b2:c1:d6:72:b5:9d:c9:a3:2c:74:22:0b:0b:bc:91:0e:
         b0:30:64:ad:63:ac:ff:71:d5:7b:a7:d3:cf:4d:a6:52:6c:d4:
         4b:d4:ee:72:83:84:a6:51:51:7b:51:ca:a9:bb:5b:33:b2:32:
         1e:1b:f7:6e:ad:df:2a:1b:67:e1:23:b8:d7:55:39:3e:a0:21:
         6d:97:e9:a0:d6:d7:b2:7d:a8:df:24:e1:df:1a:bf:6d:94:26:
         08:3d:bc:80:a1:95:eb:38:d5:fb:a9:21:c6:28:a5:a0:50:bd:
         d2:3b:ca:f1:26:89:a1:ea:e5:7a:18:4f:55:6f:24:d1:3b:fe:
         10:5f:1b:de:a0:ac:9a:c6:90:f2:d8:fb:a3:aa:55:7e:f7:0c:
         f1:36:5b:4c:4f:f5:17:f3:93:df:9d:74:40:87:4a:f8:83:20:
         25:bd:8c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:58:54 2026 by rpki-client