Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File:                     8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier:          KkjEtm/yZ3/5L5j9QehUqm78BfJjalZaKcTglqh2nDI=
Subject key identifier:   90:B1:4C:27:E8:CD:D2:A7:B5:54:59:05:2C:44:41:C9:1A:A2:7A:E6
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer:       /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial:       019F92110D276A99F855824361FF0DC0FCB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number:          0D71
Signing time:             Fri 24 Jul 2026 03:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:18 +0000
Files and hashes:         1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: Cu8zgzQ5RHfnyPIVQWZXIccjyyXBu4SYC9iRc3BvJsw=)
                          2: DrVZDZh6t-NASVfKCJKEMxtwld0.roa (hash: cTJ6lFiko+3ixFYd+6UnWr/LWA37RjzGG0uQnDkQEnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:0d:27:6a:99:f8:55:82:43:61:ff:0d:c0:fc:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
        Validity
            Not Before: Jul 24 03:00:18 2026 GMT
            Not After : Jul 25 03:00:18 2026 GMT
        Subject: CN=90b14c27e8cdd2a7b55459052c4441c91aa27ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:dc:72:c1:ef:15:71:31:a5:73:5c:cb:a3:b4:
                    42:aa:99:5a:6a:2a:78:82:9f:04:fc:ab:03:5e:2c:
                    aa:4e:a3:e3:0d:aa:d7:a1:1f:93:be:7b:5c:ce:53:
                    8c:6d:22:09:00:7c:63:a6:d6:be:14:c0:b9:b3:26:
                    f0:1f:21:1f:32:e6:e1:e6:10:f2:5f:26:19:36:cc:
                    5a:72:c7:96:81:f3:af:07:98:a4:cf:53:a7:25:17:
                    a8:a6:ab:7c:d3:be:dc:fa:74:91:72:3f:4b:e5:73:
                    3b:75:d9:80:ef:20:4f:63:17:74:db:94:e3:5d:29:
                    f0:45:43:8d:3a:c5:2f:27:92:f0:55:7f:5a:7b:81:
                    57:7c:d6:d9:76:33:bb:9a:80:41:10:47:7b:0e:8b:
                    44:49:12:fa:62:06:4f:f6:0e:1d:23:15:fd:dd:a0:
                    1a:39:7c:3e:21:3b:e2:e8:95:66:33:62:0c:ad:5f:
                    53:18:33:d2:77:06:35:e0:65:05:f6:bf:80:79:7d:
                    69:29:02:ed:af:f0:1b:b3:b3:44:ba:7e:16:87:b2:
                    85:b7:5e:86:b2:8f:2f:77:fb:22:f2:7a:d7:e8:2b:
                    41:65:a5:2b:93:c4:4b:8c:ba:cb:3a:e8:c2:bf:a6:
                    c9:29:0c:61:46:cc:cb:6a:1a:b3:b5:31:7f:02:e8:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B1:4C:27:E8:CD:D2:A7:B5:54:59:05:2C:44:41:C9:1A:A2:7A:E6
            X509v3 Authority Key Identifier:
                keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:1f:6b:74:a9:be:bf:9a:ac:a9:88:8e:9c:07:67:10:f2:dd:
         a9:ac:d3:38:52:69:a3:22:e3:50:2e:ef:a3:0d:28:ca:35:bf:
         c0:4c:5e:9e:0f:bb:cd:44:ee:d7:58:07:7e:43:69:30:a4:ea:
         7c:12:04:7e:04:e5:b6:ff:c6:c4:a7:84:cf:d1:dd:87:ff:39:
         54:c2:cb:4d:75:b7:22:eb:84:b7:8c:33:86:1d:b2:64:54:c9:
         49:56:3c:9f:2d:00:9c:b7:21:66:24:e4:e8:d8:ec:a0:f8:0d:
         7c:53:40:e5:e0:9f:7c:5e:02:25:63:40:9e:0a:78:e1:39:ec:
         ef:84:27:32:06:64:b5:54:6d:b0:27:ce:db:66:81:9c:a1:6c:
         c3:65:d4:9a:bd:70:1f:6c:dd:ee:31:8b:02:18:56:02:cf:57:
         a9:ac:fb:5e:05:0d:4d:41:9c:6e:04:87:76:b2:9e:27:7a:72:
         d7:ed:ea:50:3f:90:2e:fa:97:17:d5:ff:d4:9b:1f:c3:f2:52:
         2f:fb:0c:c7:7e:25:c0:94:f8:ae:c9:55:77:89:fa:4b:f7:44:
         67:1a:96:37:7e:3c:ea:43:44:ef:e5:e4:2e:07:72:c3:ef:65:
         d0:fa:4c:dc:4a:19:50:56:d3:8b:6a:f1:18:cb:7f:77:45:f5:
         77:78:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:24:08 2026 by rpki-client