Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File:                     8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier:          sBVg2mFLgI6CteuHt0Wa/R0cztoKlF9y1ql2zgsJlvw=
Subject key identifier:   2F:45:15:66:3B:BD:6E:1A:1F:43:D7:51:86:18:F9:08:DB:2B:E4:E3
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer:       /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial:       019E1D91000E1559E4C3C6BC7242859F9038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number:          1651
Signing time:             Tue 12 May 2026 19:01:42 +0000
Manifest this update:     Tue 12 May 2026 19:01:42 +0000
Manifest next update:     Wed 13 May 2026 19:01:42 +0000
Files and hashes:         1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: /QX+M6AvIvIDM9EJkVNG6KnTKCmeS1jwNtIysg8X5ng=)
                          2: w2Ta-rPPbmIQNKq-ipxVWX-8dg4.roa (hash: gcIiCCsS3PcYcJA4aDFua+5XE66yaXHV16D0VY59VUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:00:0e:15:59:e4:c3:c6:bc:72:42:85:9f:90:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
        Validity
            Not Before: May 12 19:01:42 2026 GMT
            Not After : May 13 19:01:42 2026 GMT
        Subject: CN=2f4515663bbd6e1a1f43d7518618f908db2be4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1f:ef:18:07:81:db:22:9a:57:8d:f2:67:96:
                    4b:cb:c7:d9:4b:73:63:f2:73:01:38:2a:b9:54:40:
                    4f:da:c2:64:bf:0d:b9:79:95:33:24:a7:17:a3:c1:
                    50:2f:c3:70:13:98:87:52:b9:2e:9d:c4:e6:c3:21:
                    92:f7:79:66:4b:3b:92:25:81:d1:0e:1c:14:4c:09:
                    4e:7d:6a:c0:82:50:87:b6:47:f3:7d:c9:39:a5:23:
                    c0:d8:a0:66:96:6f:a0:01:b0:fd:7a:d5:65:37:01:
                    31:f6:5a:f2:35:fa:93:3d:5a:76:19:8c:55:0e:a8:
                    43:5a:d3:38:81:95:c2:4a:d9:06:3e:83:ec:1f:04:
                    d8:60:5c:4a:34:88:a0:8e:a5:6a:b4:bf:cb:8e:1b:
                    db:21:c4:57:b2:44:5d:6d:15:e5:18:9b:46:7a:2b:
                    51:25:d7:05:36:da:11:13:61:7a:39:ee:0e:c5:35:
                    58:43:f7:13:52:c4:16:4a:c8:6b:44:10:24:66:05:
                    ab:b6:b2:00:e3:f3:60:42:fb:f0:54:92:b3:b0:d7:
                    96:62:09:6a:21:ee:00:ec:92:71:bf:96:0f:86:5b:
                    9b:b0:dc:95:32:8c:47:b9:f7:01:ba:da:ac:1a:7d:
                    03:5e:64:2f:d1:28:22:9a:79:55:44:03:a5:48:b1:
                    fe:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:15:66:3B:BD:6E:1A:1F:43:D7:51:86:18:F9:08:DB:2B:E4:E3
            X509v3 Authority Key Identifier:
                keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:ed:32:dc:38:82:56:46:32:ee:c3:b9:16:b1:15:35:ef:
         03:76:c5:50:b3:d8:67:3c:8a:23:10:79:2d:6b:bf:9e:5c:49:
         9f:57:c1:a3:f2:ec:29:d7:1a:74:46:22:4f:ee:64:71:e9:16:
         c4:68:ea:18:48:6e:66:6e:33:55:83:4f:3e:fb:e5:2a:a5:75:
         59:55:03:f4:f7:29:f0:8d:c9:d5:2c:e5:bb:ec:a8:6d:c4:2d:
         5b:8a:46:4b:7a:90:85:1e:07:f9:2e:4f:71:5e:3d:f2:56:5f:
         73:29:01:bc:83:4b:70:d6:16:09:60:37:bd:3f:05:f7:d3:2c:
         ef:85:04:8a:d2:3f:64:8f:8a:6e:1e:e7:7b:74:68:3d:5a:c4:
         53:19:58:cb:d4:5d:84:f9:52:90:21:f1:a7:d5:8e:f3:8c:76:
         ab:d9:c9:7c:c0:f3:1e:90:e3:e7:e1:45:eb:65:58:55:44:59:
         24:b3:60:73:9e:5a:2a:78:4f:54:e4:81:16:c9:fa:80:a4:a2:
         a2:54:96:dc:9a:4c:1e:c3:e8:80:d5:65:74:f0:da:f7:8e:bf:
         1e:67:7d:dd:61:70:35:12:55:37:5a:ed:1e:c8:0d:e1:64:d2:
         6d:38:fd:46:6d:bc:89:cf:bf:6e:bf:23:97:ae:cb:ac:12:35:
         83:e9:f1:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:40 2026 by rpki-client