Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File:                     A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier:          +WaZl6vUVz4davsUctW1KvHL3ufivN7vD6XWz60/kJM=
Subject key identifier:   B0:BB:62:D0:83:B9:EF:CD:82:F8:D5:2F:B1:82:15:1A:37:2A:EE:F4
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer:       /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial:       019F8F4736179C708774429D2B058EBD1896
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 14:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:36 +0000
Files and hashes:         1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: tJ9qLaO2MroGq8g2dNxbxJoGZR5xCStSuVul786Ec1Y=)
                          2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:36:17:9c:70:87:74:42:9d:2b:05:8e:bd:18:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
        Validity
            Not Before: Jul 23 14:00:36 2026 GMT
            Not After : Jul 24 14:00:36 2026 GMT
        Subject: CN=b0bb62d083b9efcd82f8d52fb182151a372aeef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:c2:3e:e9:73:7d:31:55:63:4a:19:ee:b9:
                    62:95:5e:8f:6f:71:f9:a8:84:98:b3:f0:39:72:d9:
                    a5:02:b4:cd:d1:25:9c:72:46:1d:d8:17:11:db:69:
                    c8:41:30:0b:fb:aa:a6:ca:2e:34:a1:46:c6:b6:b0:
                    2a:39:1f:8b:ad:57:90:43:ea:7f:bc:35:99:8d:b9:
                    41:cc:de:0e:ca:01:59:ca:83:e7:10:c8:0b:79:8e:
                    79:43:7c:6b:f7:e8:57:a3:d9:03:41:f7:a3:59:4d:
                    fc:5d:f5:d7:88:78:9e:3a:bd:7b:a7:df:62:c0:d7:
                    ad:1e:84:7c:33:7a:09:52:4b:c0:98:b1:c4:51:ee:
                    14:d4:14:dc:53:5b:08:fe:05:81:24:77:a4:28:14:
                    55:0e:ad:c9:a7:9f:94:dd:bb:de:d4:5f:64:85:cc:
                    14:9b:3f:6a:4f:18:56:b5:ee:95:19:bc:02:a4:91:
                    12:c4:b2:c1:b3:96:8f:15:6e:71:c1:72:3b:9a:5f:
                    7a:63:93:26:2b:5d:2d:1e:f6:c3:60:43:d1:c8:f4:
                    48:a0:bb:e4:89:c1:d9:c6:24:e7:79:d1:cb:c9:62:
                    bf:43:60:d1:36:56:16:26:cb:ca:6c:04:b5:d5:85:
                    74:85:25:32:6d:77:e5:88:b0:02:db:ba:07:6f:da:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BB:62:D0:83:B9:EF:CD:82:F8:D5:2F:B1:82:15:1A:37:2A:EE:F4
            X509v3 Authority Key Identifier:
                keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:14:66:14:04:c9:b6:a0:d7:50:85:63:21:c9:4f:85:cc:
         e2:ee:dd:59:3c:a5:e8:17:a3:f3:69:5b:26:69:47:31:ff:2b:
         4b:4d:5d:07:19:57:e2:c4:c0:21:a7:bb:f2:d8:1e:05:2d:43:
         20:dd:a0:4c:ae:4b:c8:dc:18:f6:0c:8f:6b:71:cb:72:a8:74:
         73:7f:1c:ab:1b:8b:cf:90:95:82:86:d6:f1:09:80:bc:f4:48:
         ba:fd:0d:2e:fa:48:18:05:a1:30:af:7e:84:fb:82:d2:9d:9a:
         65:f4:70:73:e6:63:80:41:04:e7:21:2c:c6:bb:e8:3b:85:e9:
         eb:f3:97:7a:78:09:e6:91:9c:b1:d9:82:8a:80:73:bb:07:42:
         1c:7f:e1:94:7e:73:07:89:0d:37:f1:21:98:23:b3:ad:1f:c5:
         7e:b3:49:f8:15:78:cb:e1:69:03:03:48:9b:e9:9d:11:2f:9c:
         05:d5:5a:18:77:46:04:dd:8f:a0:32:45:68:de:7c:00:b6:80:
         88:12:37:15:0f:55:36:8a:21:55:9c:cd:bc:88:8a:30:11:68:
         e7:3c:1d:72:84:bf:11:3f:b7:7b:52:e9:83:cc:78:dc:a2:bb:
         72:91:e3:2c:e5:9f:7e:67:3c:cb:e8:90:b1:20:be:ac:e3:5c:
         28:da:c5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:07:21 2026 by rpki-client