Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File:                     8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier:          nQ6Xtw6xRgf5CELYEfV6UvBOntFK3UNvt1A4DNBEDo4=
Subject key identifier:   78:A2:D5:CF:82:91:5F:A5:61:53:1A:0F:07:8F:E1:6B:6A:50:C8:64
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer:       /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial:       01A0CEC80A2327ACE216089DBD54E23AA91C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number:          0855
Signing time:             Wed 23 Sep 2026 15:00:11 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:11 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:11 +0000
Files and hashes:         1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: ywvA+wB7xcTsetLu68/XXSf6Qa3fPtCxkTgErB1KEDc=)
                          2: Ai9LL1nBu21OkTYlkY_Pp3wMYA0.asa (hash: CLua6BXr1setbPhQlltRXBVmyAQ//kTTQ391+KxY/Yg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c8:0a:23:27:ac:e2:16:08:9d:bd:54:e2:3a:a9:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
        Validity
            Not Before: Sep 23 15:00:11 2026 GMT
            Not After : Sep 24 15:00:11 2026 GMT
        Subject: CN=78a2d5cf82915fa561531a0f078fe16b6a50c864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:4e:ce:98:ac:62:ed:22:2b:88:d9:90:d3:
                    f8:56:6a:e6:71:fc:d8:a6:7d:c4:7f:b9:aa:d2:1b:
                    1e:02:64:6d:d5:7a:62:cc:ca:ee:b1:54:d3:3d:58:
                    82:37:44:b2:bf:01:73:9e:bf:08:ed:aa:06:d3:0c:
                    f0:33:d4:e5:12:0e:8e:5a:e7:42:fb:3c:a2:de:5a:
                    4f:77:51:d4:72:b8:bc:39:eb:7d:57:db:65:65:63:
                    62:85:7a:76:b7:08:f0:01:f2:23:cb:41:3b:75:3f:
                    7b:eb:f9:6e:60:11:2f:a3:02:8b:c2:ae:5b:43:d5:
                    80:85:c2:56:2d:aa:a1:64:d2:14:3f:7f:d4:4c:5c:
                    a4:d3:dc:3d:ad:51:df:59:0e:5b:57:ca:cf:c5:a2:
                    43:92:59:d3:37:fe:ba:48:aa:01:10:3c:1d:40:7f:
                    3b:e7:27:5d:75:73:57:bf:bd:90:ae:5c:a4:9e:42:
                    a2:a0:44:eb:15:9e:7b:62:51:04:a2:8e:84:61:bc:
                    24:fe:23:c9:97:84:8a:49:50:01:f3:3a:4d:12:c4:
                    46:36:21:15:d2:b1:3d:cb:7e:15:10:79:5f:12:2b:
                    14:26:1e:6c:da:38:02:3b:ca:16:51:fb:04:4d:0c:
                    40:21:6f:12:05:92:50:4e:58:0b:d6:07:0b:c5:88:
                    b6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:D5:CF:82:91:5F:A5:61:53:1A:0F:07:8F:E1:6B:6A:50:C8:64
            X509v3 Authority Key Identifier:
                keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:f7:7b:fe:83:cc:54:b2:a7:69:7a:49:1a:3d:e3:26:aa:e9:
         d4:d3:bc:61:42:4c:dc:be:f5:93:f0:a0:03:31:d5:97:53:34:
         15:1f:0c:f1:eb:cb:a9:e0:bf:eb:c1:b8:8d:d2:2b:14:84:05:
         47:b9:5e:bc:1b:2f:0d:db:57:92:cc:5f:7e:20:df:6f:47:86:
         ad:25:c1:6d:85:c0:f9:26:64:7f:fe:ad:10:68:25:59:08:68:
         d9:23:31:ad:0c:7d:c3:f7:02:98:23:59:30:6f:29:36:26:80:
         57:99:0f:ad:4e:8d:ee:26:cd:a3:e5:d0:b9:df:0a:24:9a:73:
         c6:32:89:78:a9:b7:68:87:22:df:73:a9:52:7f:ee:70:ed:22:
         dd:48:af:1d:8d:bb:61:8a:60:ff:85:3c:1b:24:47:dc:5a:95:
         0d:36:90:9e:1f:06:dc:8a:ba:f5:59:04:e2:b5:08:83:87:95:
         46:b7:e7:80:99:a3:d5:7e:0f:65:e9:11:a4:56:08:fc:3b:6d:
         7d:1b:0c:ea:cc:c7:03:2c:ab:42:02:34:a7:76:77:08:3b:c2:
         54:1d:ab:fd:a4:1b:51:84:13:ec:44:3e:57:7d:02:c0:6a:13:
         fa:52:5c:4e:71:42:58:ed:25:cc:76:33:46:85:0b:0c:a1:2c:
         05:8f:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:08:50 2026 by rpki-client