Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
File:                     0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft (raw, json)
Hash identifier:          mYWhbnZtBBs3MGxY5wsmVOthaBXwnN5ZhoCMfkXsGNg=
Subject key identifier:   E6:8A:00:8C:65:64:EF:46:8D:83:A3:34:BC:32:6D:F7:5D:2F:B5:DB
Authority key identifier: D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95
Certificate issuer:       /CN=d052bc250ff778b7279a4b18c126740d4ce86c95
Certificate serial:       019F8EA28078135CD8BA3A6670D1D5EC2AD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
Manifest number:          3E
Signing time:             Thu 23 Jul 2026 11:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:42 +0000
Files and hashes:         1: 0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl (hash: 044K01erCEwQXHluME0NjnySh0rIqysSry95WQbnAn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:80:78:13:5c:d8:ba:3a:66:70:d1:d5:ec:2a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d052bc250ff778b7279a4b18c126740d4ce86c95
        Validity
            Not Before: Jul 23 11:00:42 2026 GMT
            Not After : Jul 24 11:00:42 2026 GMT
        Subject: CN=e68a008c6564ef468d83a334bc326df75d2fb5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:c2:b1:9c:ec:35:6a:0e:9d:1a:8b:4a:4e:
                    6c:a3:33:c7:d9:39:ef:c0:26:2f:f9:b4:75:a8:89:
                    15:20:f0:66:19:7d:f8:a1:bc:05:18:c4:12:46:3f:
                    92:e3:ad:0b:58:26:9d:17:72:98:07:e7:b2:39:91:
                    02:ba:09:d4:72:d3:99:23:c9:f3:d0:be:08:25:4c:
                    6f:67:9f:36:30:18:0a:56:42:4c:ed:78:58:7e:a4:
                    59:b7:69:3b:d7:4e:eb:2c:62:30:ba:b3:3e:8e:c4:
                    4e:92:58:2c:e1:ae:79:20:df:bd:0f:48:52:b2:77:
                    19:dd:43:b2:49:0a:38:28:27:93:a3:7e:d0:9b:d0:
                    33:8e:6d:8a:da:21:68:17:b5:b6:31:ea:6c:e6:bb:
                    76:ea:d7:c8:75:36:55:d5:ce:67:8e:b3:13:c3:e6:
                    ec:01:dd:5b:92:3a:f1:ee:b6:13:c7:1e:d9:fc:7c:
                    e0:9b:a2:81:73:b2:3a:6f:f9:ec:32:c9:f1:8b:af:
                    b5:e9:9e:ec:96:fd:ae:1c:b8:55:83:d5:49:88:d6:
                    ff:19:2f:21:2e:c8:17:a1:c9:09:59:c8:00:08:6a:
                    a4:5c:98:2f:3d:4c:f0:73:03:a0:9d:6f:e0:07:63:
                    9c:27:a5:ab:75:50:27:ad:55:b7:03:4d:5c:17:9a:
                    90:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:00:8C:65:64:EF:46:8D:83:A3:34:BC:32:6D:F7:5D:2F:B5:DB
            X509v3 Authority Key Identifier:
                keyid:D0:52:BC:25:0F:F7:78:B7:27:9A:4B:18:C1:26:74:0D:4C:E8:6C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FK8JQ_3eLcnmksYwSZ0DUzobJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/d7d3cd-5e67-47f3-82c6-4dd151c6aded/1/0FK8JQ_3eLcnmksYwSZ0DUzobJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:17:fb:09:b4:3c:58:19:e6:56:50:e2:e5:4d:a4:3b:fb:82:
         14:96:3e:06:87:aa:37:56:6b:e0:5b:63:de:b3:67:99:dd:0f:
         15:54:b7:1c:8a:2a:50:d1:99:c3:ee:40:fb:a6:d1:09:e9:d6:
         8d:39:31:ca:e8:b3:d2:8c:df:f0:d5:77:a7:1c:44:ee:20:81:
         25:51:7b:b6:9a:8c:83:4b:a3:9d:99:6d:32:2b:d2:f6:64:e3:
         c1:ed:ca:92:84:33:5e:f8:eb:de:87:35:50:d9:1a:40:51:31:
         fa:b8:0f:fa:96:78:16:27:28:98:09:8a:60:bb:f4:b3:79:59:
         9d:d3:cd:37:19:66:1c:13:62:5a:f7:11:a1:6d:96:a7:44:5e:
         b4:c3:16:a0:ad:5c:6f:fd:9c:38:72:de:7c:a0:d9:3d:f5:47:
         f5:f1:63:be:30:4b:cb:8d:d3:eb:b3:f4:f8:f9:9e:0b:77:af:
         ea:9a:1a:c6:00:d8:50:6e:0f:ed:6f:25:dd:c6:45:7a:63:dd:
         be:c0:19:26:e8:a3:0f:c2:b4:ef:c7:89:31:cd:e6:81:2b:19:
         b3:00:17:f8:e8:21:88:2a:60:7f:71:3b:61:ab:02:49:f1:5e:
         d5:76:8c:b4:b5:ee:2c:94:4a:d7:c7:63:71:50:36:c0:92:a3:
         2b:95:9c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:25 2026 by rpki-client