Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          9bHvllYN/F3WYTFldCrPZ/gKY3T9LDgJfBUj0rIBgQc=
Subject key identifier:   7C:86:D3:0C:95:1D:9C:78:FA:A1:80:41:D9:29:B4:2A:CF:79:3F:36
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       019F8F4759DBB8C76052D0FFCAB2ADFAB60A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          1052
Signing time:             Thu 23 Jul 2026 14:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:45 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: zddHcGTptTlKyw/6lSf37q0TwIRU0wN1hwFU8l93Ieo=)
                          2: UIIn39nTLp1morWauT7gr2in8-4.roa (hash: jTFbYC8gMB5ReO3RhcTGo44tsBwWXySORvyGFBMm9pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:59:db:b8:c7:60:52:d0:ff:ca:b2:ad:fa:b6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: Jul 23 14:00:45 2026 GMT
            Not After : Jul 24 14:00:45 2026 GMT
        Subject: CN=7c86d30c951d9c78faa18041d929b42acf793f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e7:41:09:cd:e4:b6:8b:40:d7:40:87:b4:ab:
                    66:32:cb:d9:6c:db:3d:d3:68:f6:e9:6a:de:5d:2a:
                    53:c3:44:e8:d6:41:f7:83:c1:69:4b:1b:3a:c8:77:
                    16:e7:11:9c:b4:e4:14:77:1f:6c:48:32:cd:27:1a:
                    3f:fc:5b:9c:d0:ce:0b:7a:1c:db:47:8f:9f:2e:74:
                    33:98:a6:a2:e8:a1:91:e6:a0:f4:6a:31:46:f4:1b:
                    c6:7f:67:ed:53:7e:b8:ca:31:65:9b:1a:9d:e2:80:
                    f4:a8:20:21:c5:98:fe:c5:0b:2d:85:4e:5f:83:57:
                    2c:54:e5:e3:4a:a4:9a:d5:49:85:da:0b:50:da:e6:
                    54:9d:93:2c:2a:5e:46:08:fc:51:a2:35:a0:5f:e3:
                    80:e7:ba:93:73:a6:51:64:09:f9:b0:18:33:ac:39:
                    95:28:fd:74:00:59:1f:27:56:b1:ed:1e:e5:ab:34:
                    c7:a5:c5:e2:09:3b:49:71:48:b4:74:c6:f7:bc:fc:
                    d5:24:b6:83:0e:72:0a:d2:e7:7a:ff:15:f8:5a:a0:
                    d3:d5:f0:6f:39:8b:47:eb:62:76:3b:29:d3:0d:94:
                    52:a0:74:83:df:d4:9c:7e:94:b2:7e:4c:6c:b8:b9:
                    7e:c5:bf:e6:e1:91:ea:b5:af:89:ae:9d:1f:1d:5a:
                    1b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:D3:0C:95:1D:9C:78:FA:A1:80:41:D9:29:B4:2A:CF:79:3F:36
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b6:77:67:de:8d:6c:fd:c9:27:66:25:f9:4f:dc:c9:f2:cf:
         c6:e9:32:80:bf:73:24:0a:3f:48:7e:5e:d5:48:86:a1:73:93:
         a4:68:58:af:05:b1:39:af:c5:81:ce:fd:f6:d5:d5:1c:b2:69:
         6f:aa:d3:4b:07:1d:61:90:08:6f:2b:c9:3f:8c:85:ca:23:1d:
         ec:5b:7b:98:d1:20:7c:81:4e:2f:70:21:94:9a:96:8e:c0:8a:
         ac:43:6d:c1:f1:79:cd:76:be:29:c4:40:51:a2:36:de:43:e3:
         4e:ad:4c:b3:69:c2:3e:00:2a:f7:b9:de:61:86:e3:83:be:b3:
         5c:41:b0:65:e6:68:78:d7:8c:b1:a9:44:57:14:14:4f:9b:f7:
         8e:74:83:81:c5:01:2d:a9:09:d6:09:21:78:ef:2e:2e:da:64:
         d9:84:50:0d:13:ea:59:78:69:0d:64:af:ba:af:f0:f7:de:f8:
         c7:6c:4b:ab:01:4d:6f:14:a1:6b:4a:74:e1:20:31:96:8c:18:
         04:a8:aa:f8:e3:ae:60:46:51:1e:1c:b6:46:64:0b:b6:99:ad:
         6d:df:96:9c:c7:d8:46:bb:29:3c:1d:56:3c:d0:10:51:72:48:
         3e:65:73:4b:50:31:0f:90:e2:ff:bb:09:83:cd:91:01:67:23:
         fb:b4:54:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:13:17 2026 by rpki-client