Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
File:                     8oaDKt2kCpfrhjpaZILJRpMaZu8.mft (raw, json)
Hash identifier:          izNwd03CgvUGEpKateG2RypCCCVxu520nicVr7nB9+U=
Subject key identifier:   78:AB:7A:F6:30:0A:D7:33:D1:7E:B1:66:AD:DA:3D:F7:9F:7A:40:BB
Authority key identifier: F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF
Certificate issuer:       /CN=f286832adda40a97eb863a5a6482c946931a66ef
Certificate serial:       019F90914285951635904B78E351FB12DF6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
Manifest number:          03F1
Signing time:             Thu 23 Jul 2026 20:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:06 +0000
Files and hashes:         1: 8oaDKt2kCpfrhjpaZILJRpMaZu8.crl (hash: Z6A/NLqxowu13SFjW1f7D0YWLrj35G6aVuBwLLIhcvM=)
                          2: HhuLuv4H8nFl-u4FRGTWHs5DTJg.roa (hash: 6cAQwo1q/0sZVyGynHF1390xD5S+4XKwq9DB6RFsVo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:42:85:95:16:35:90:4b:78:e3:51:fb:12:df:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f286832adda40a97eb863a5a6482c946931a66ef
        Validity
            Not Before: Jul 23 20:01:06 2026 GMT
            Not After : Jul 24 20:01:06 2026 GMT
        Subject: CN=78ab7af6300ad733d17eb166adda3df79f7a40bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:db:a8:fe:de:1b:d3:4d:09:42:95:ea:9b:
                    10:19:91:35:fa:93:f0:7c:13:c6:bd:61:8b:53:1d:
                    56:1a:59:c4:c0:e8:4a:75:bb:76:ff:82:19:8e:d7:
                    3d:cd:0c:bd:b5:02:f0:f8:db:40:c7:83:73:54:6f:
                    b3:9b:d3:cd:0e:b6:08:70:81:75:41:c9:7e:76:69:
                    2a:25:6c:7a:83:88:fc:d1:31:b8:1b:16:16:10:db:
                    81:db:09:2a:d8:15:78:ee:3d:e2:10:53:ba:03:1e:
                    45:64:e4:1b:1f:22:de:fa:85:0a:fd:3e:c9:b9:2f:
                    41:7f:09:ad:b1:46:63:b2:b2:a8:97:7b:d2:49:4e:
                    f7:86:aa:29:fc:09:c7:3e:88:4a:d0:35:93:c3:72:
                    0b:15:e8:3c:8d:50:70:c9:86:8f:98:5d:39:19:00:
                    69:93:d5:a4:da:69:7d:68:9a:0f:64:94:5b:83:55:
                    45:0f:53:5a:17:75:74:3d:21:eb:ae:c2:47:02:fa:
                    b6:fc:3c:67:a6:91:5f:a3:3d:b1:ad:b2:68:d5:f6:
                    a1:95:a1:fe:86:77:39:83:84:97:2f:ba:58:a1:eb:
                    09:84:96:e7:c5:eb:d2:9e:0a:87:ae:9e:49:9b:db:
                    ab:09:62:e1:d4:45:80:ff:4f:e7:b7:9b:90:c1:07:
                    ab:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AB:7A:F6:30:0A:D7:33:D1:7E:B1:66:AD:DA:3D:F7:9F:7A:40:BB
            X509v3 Authority Key Identifier:
                keyid:F2:86:83:2A:DD:A4:0A:97:EB:86:3A:5A:64:82:C9:46:93:1A:66:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oaDKt2kCpfrhjpaZILJRpMaZu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/45e738-286e-4f9a-ba02-d9431140e6f1/1/8oaDKt2kCpfrhjpaZILJRpMaZu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:00:78:25:a8:97:f4:20:d8:30:aa:2a:28:0a:18:0a:37:44:
         85:16:99:d4:64:1f:46:e7:b6:27:07:ba:7e:4d:e5:83:82:88:
         45:20:5c:db:7e:f4:43:55:cf:29:64:f5:7b:77:d4:1d:73:61:
         80:28:b5:59:22:62:b6:53:72:30:69:23:a4:64:b5:07:45:76:
         97:7c:46:6d:53:2d:80:98:fc:ad:73:ba:e0:0f:5c:db:b0:91:
         69:50:85:4d:66:81:6b:49:91:57:a7:b9:62:76:32:f5:ee:7b:
         24:8d:17:64:c9:bc:68:52:8d:08:1e:11:66:d7:2b:85:eb:43:
         00:c0:de:8c:35:bc:72:34:a5:ff:d3:c2:0b:3e:6e:75:02:5a:
         f3:7f:1b:66:f8:67:ce:b1:e6:0f:aa:a2:87:58:3f:ed:36:ed:
         f6:e7:18:5f:50:87:6a:3c:a1:8e:71:03:d9:82:de:16:64:f3:
         d8:9a:7b:71:e7:0e:40:e6:fb:18:6e:a3:ce:25:7e:24:bf:65:
         cd:76:19:6c:56:db:56:b8:1d:94:dd:24:89:ac:2e:69:5d:4c:
         db:06:a6:61:b5:93:4f:ae:13:83:a6:3d:3f:8c:44:18:d2:4b:
         2e:9f:1a:ac:1d:6e:fe:87:42:d7:22:4d:7b:78:dc:e1:d5:d0:
         f7:8c:fa:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:27:57 2026 by rpki-client