Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
File:                     8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft (raw, json)
Hash identifier:          iLNNWUNtx9v2aKaG6D8VTNVqypIKFSrCMFpmJtMKYNQ=
Subject key identifier:   17:C0:AE:63:85:65:43:2F:9F:63:BC:76:6B:B5:93:55:10:B2:43:40
Authority key identifier: F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66
Certificate issuer:       /CN=f0594e7a31db7937fab52fcc389059d3451f2366
Certificate serial:       019D27E06940BC0452132C62EB5E17F94ECF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
Manifest number:          01BF
Signing time:             Thu 26 Mar 2026 02:01:51 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:51 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:51 +0000
Files and hashes:         1: 8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl (hash: KhvEM+tx1gQ694eGt7EdInsYYZq3+SGj9w4yYqOwRoc=)
                          2: FQxNg7AnkMBIxSPt-ywRlwPzZU0.roa (hash: mDMc0kRW89SXaN2WszngnBY0Vg6QXvcafmxW2mS8Fw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:69:40:bc:04:52:13:2c:62:eb:5e:17:f9:4e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0594e7a31db7937fab52fcc389059d3451f2366
        Validity
            Not Before: Mar 26 02:01:51 2026 GMT
            Not After : Mar 27 02:01:51 2026 GMT
        Subject: CN=17c0ae638565432f9f63bc766bb5935510b24340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:90:be:06:8a:39:4f:5a:b6:96:50:d5:05:a4:
                    e5:02:bf:6b:32:02:93:78:d9:41:ca:4e:61:a7:0c:
                    2c:50:c7:d6:a5:22:77:5e:96:01:05:50:97:41:ec:
                    b2:9e:e4:bf:54:bc:65:0c:9b:26:c0:d3:86:d7:48:
                    a9:23:05:98:67:db:20:04:50:d9:f8:15:9e:85:fd:
                    21:f8:5f:89:a3:1f:ad:13:91:f6:cd:f1:ab:50:9b:
                    05:26:b5:7f:99:77:75:b7:b1:84:c9:78:f4:ea:74:
                    f4:f6:c4:d4:7d:94:0b:83:b5:11:6a:b1:08:20:9c:
                    ef:25:e2:8b:50:0e:da:d2:c2:41:0e:c0:18:2f:53:
                    df:ab:fc:d4:aa:88:a7:76:d7:11:96:8e:89:50:18:
                    c0:cf:64:3c:d3:8d:e3:de:b6:55:c2:bc:ed:ef:20:
                    fe:f2:b4:50:d1:5a:ff:4c:7f:f9:c6:f5:ab:f6:ec:
                    8e:c5:51:2d:f5:be:7d:0f:74:93:98:f9:c8:17:32:
                    43:cc:01:a9:5b:e8:42:23:4b:ec:29:3d:14:a7:2a:
                    41:2d:c5:76:b2:a8:da:ac:bc:1e:e4:5a:cf:b4:d8:
                    46:32:2b:c7:5a:d6:96:1c:a2:65:00:49:b4:32:c2:
                    b0:57:02:67:ce:e7:b4:96:41:44:f5:6e:58:ea:4c:
                    cf:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C0:AE:63:85:65:43:2F:9F:63:BC:76:6B:B5:93:55:10:B2:43:40
            X509v3 Authority Key Identifier:
                keyid:F0:59:4E:7A:31:DB:79:37:FA:B5:2F:CC:38:90:59:D3:45:1F:23:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FlOejHbeTf6tS_MOJBZ00UfI2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1d5135-b712-431a-a28b-b57f50f00804/1/8FlOejHbeTf6tS_MOJBZ00UfI2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:da:aa:f9:b3:88:4d:79:ee:15:30:98:bf:0f:92:7c:99:
         80:d5:0b:57:02:e7:d9:11:34:56:ed:d9:49:37:40:bd:7b:dd:
         05:bf:68:c1:46:32:33:8b:83:bf:29:a7:c1:16:c9:ab:72:af:
         67:49:7e:d6:79:8e:65:fb:3e:ee:c5:94:d7:d9:fc:87:90:b5:
         f9:2c:94:11:84:87:4f:84:66:50:02:e6:b0:e3:67:f9:e9:0a:
         f4:7b:0a:3c:44:af:b6:df:28:18:de:d2:04:90:4e:76:16:16:
         7e:7e:c9:5a:7a:18:03:96:1f:1f:81:90:36:3d:75:7d:a4:db:
         f6:c1:35:20:2b:b5:77:d1:43:59:cf:09:82:b3:52:c0:27:a2:
         70:f9:18:2a:c8:ef:c5:25:55:38:64:e6:76:05:f0:82:7d:3b:
         98:38:29:fe:e8:6d:c1:2f:0f:c9:53:d7:39:66:1c:98:c3:1c:
         9a:bd:16:43:21:42:79:9f:c3:9e:61:07:91:1d:ce:7b:1e:7d:
         9a:22:26:b7:f1:07:4e:1d:7a:f1:fc:0a:5f:74:59:e2:19:3d:
         60:1b:9a:c3:c5:fa:3f:7a:33:10:bd:06:d3:77:e3:28:67:51:
         34:48:76:e9:eb:8a:10:7c:be:39:ef:a0:09:ae:a6:7e:94:35:
         58:ae:d6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:20 2026 by rpki-client