Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
File:                     8RqaRFV9Rv8tgIiiKIha_wANwqI.mft (raw, json)
Hash identifier:          1B71/zjQc51Rcsa3nmPLNnqO1IwKAcWv/CyXKkmfCD8=
Subject key identifier:   0D:C2:11:03:CD:67:29:41:8F:2D:2C:60:D9:D1:5C:58:14:A4:90:27
Authority key identifier: F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2
Certificate issuer:       /CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
Certificate serial:       019F90915AC05115DC0C7969F366013975DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
Manifest number:          0E12
Signing time:             Thu 23 Jul 2026 20:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:12 +0000
Files and hashes:         1: 8RqaRFV9Rv8tgIiiKIha_wANwqI.crl (hash: WTue2gM7ZsFDcUhSPb2YTub7OfzP10/bMlUA5vitFsE=)
                          2: z6n92NIP1tvVgc0euBLMnBtSoZk.roa (hash: Jjy7mkaYofsu+k30uI9CDy57tkSDpiXwny9UHpG3aJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:5a:c0:51:15:dc:0c:79:69:f3:66:01:39:75:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f11a9a44557d46ff2d8088a228885aff000dc2a2
        Validity
            Not Before: Jul 23 20:01:12 2026 GMT
            Not After : Jul 24 20:01:12 2026 GMT
        Subject: CN=0dc21103cd6729418f2d2c60d9d15c5814a49027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:f5:43:c4:fb:f7:18:21:b9:20:4a:9f:47:
                    05:ec:47:14:7d:e4:e4:f4:f5:b7:27:f8:de:dd:1c:
                    a3:5b:e1:50:94:7c:21:14:eb:86:05:92:59:34:26:
                    39:32:a7:69:4c:46:52:60:a2:89:29:57:08:ba:72:
                    18:84:89:23:2e:26:7e:22:57:44:76:aa:74:41:49:
                    d0:5f:31:c1:2f:01:03:e5:1f:0a:06:e0:55:fe:f4:
                    d2:60:d9:39:82:cf:b6:87:36:13:2c:e0:6e:50:fe:
                    f4:1e:38:a6:51:d8:70:b9:1d:25:19:78:a8:6b:0b:
                    37:97:eb:17:72:ab:3e:dc:04:a3:0d:d0:25:ec:6c:
                    4c:2e:f8:d0:01:7b:3d:e8:c4:91:56:b7:f3:6d:1b:
                    b9:8c:0d:49:a6:b8:e7:40:b0:c5:34:00:da:cc:41:
                    5a:84:5c:ce:ea:08:bf:df:00:cc:2c:a6:5f:41:9b:
                    ca:18:29:97:ca:53:11:3c:8a:aa:54:6c:50:f8:34:
                    7b:d6:3a:89:ea:71:d2:29:93:c0:85:37:fa:cd:a3:
                    6a:15:0a:f1:0d:f4:16:77:b7:b5:2f:b7:10:91:8c:
                    54:aa:46:86:47:eb:a3:b0:d1:b6:74:78:72:f3:00:
                    a2:70:83:6c:6b:85:cc:5e:24:e5:ba:01:7c:b9:99:
                    4b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:11:03:CD:67:29:41:8F:2D:2C:60:D9:D1:5C:58:14:A4:90:27
            X509v3 Authority Key Identifier:
                keyid:F1:1A:9A:44:55:7D:46:FF:2D:80:88:A2:28:88:5A:FF:00:0D:C2:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8RqaRFV9Rv8tgIiiKIha_wANwqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/07e4b2-6b38-4bc0-a680-a60bc7d07878/1/8RqaRFV9Rv8tgIiiKIha_wANwqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:c4:11:14:26:fc:88:16:dc:9e:ab:26:b6:a0:03:4c:f4:21:
         b4:5a:5b:e3:dc:8d:5a:33:35:9f:87:d5:81:5b:27:c0:09:9a:
         36:16:6c:e1:a3:bf:92:d1:4b:5b:34:6e:43:0c:76:d5:4c:de:
         04:42:02:47:e0:5f:c1:ed:12:83:97:18:b8:c7:cb:10:28:e2:
         68:bf:1b:ee:9d:e2:3d:cb:d6:69:e1:bc:ab:cf:51:8b:4c:da:
         9f:a1:08:4f:32:e4:15:96:f0:a8:33:f5:d7:71:69:00:13:3d:
         fd:25:f7:b6:a7:18:43:4f:63:0f:61:c7:bf:76:d1:76:db:31:
         f7:c0:bb:53:48:46:19:6d:1d:ee:b4:c8:e7:f2:5e:33:cd:59:
         a8:b2:38:16:54:5c:bc:09:61:32:21:40:4e:ae:29:8c:2c:2d:
         43:59:77:46:d4:6f:d7:e3:75:83:a4:33:df:81:6e:c7:c5:b7:
         c7:0b:f1:57:e1:e2:dd:04:24:30:38:36:28:f0:49:d7:67:17:
         d6:e6:c4:67:b5:96:cd:82:fe:47:88:eb:7f:6e:59:6f:84:d9:
         5c:b0:ff:67:dc:50:ee:c4:92:0f:29:fb:85:a3:5f:49:a0:e0:
         c4:34:1c:ed:61:ce:03:76:83:97:c7:47:96:4e:ae:5a:93:63:
         a0:90:ac:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:39 2026 by rpki-client