Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
File:                     8KEScQQ06Frl_m-_Qedr3fk4GM8.mft (raw, json)
Hash identifier:          xT5vZ8c40fEbASiUrFkclcId6LyUH6VTqN1WoaAVvy8=
Subject key identifier:   8C:9C:E0:BB:20:ED:20:07:86:9A:5A:E4:33:CE:FD:BF:EC:FA:FE:F1
Authority key identifier: F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF
Certificate issuer:       /CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
Certificate serial:       019F913557882D92588F064AE9783E15E47F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
Manifest number:          083F
Signing time:             Thu 23 Jul 2026 23:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:19 +0000
Files and hashes:         1: 8KEScQQ06Frl_m-_Qedr3fk4GM8.crl (hash: I48o6XgNasuP2aDZCOh9uzrqINgqjjcegzQle3E+hxw=)
                          2: nwAF_VA7b5QLJBmqxWMgeg05ev8.roa (hash: c/NjZkh9geRKVWgr/sc352gf8HkePyWjE1VddV8tbrA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:57:88:2d:92:58:8f:06:4a:e9:78:3e:15:e4:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a112710434e85ae5fe6fbf41e76bddf93818cf
        Validity
            Not Before: Jul 23 23:00:19 2026 GMT
            Not After : Jul 24 23:00:19 2026 GMT
        Subject: CN=8c9ce0bb20ed2007869a5ae433cefdbfecfafef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:70:8a:1f:28:5c:c2:44:6f:a3:ae:77:ef:
                    bd:70:ce:46:5c:6c:bb:aa:10:46:b7:1b:5c:31:0d:
                    e9:34:31:67:12:91:9a:14:13:53:19:49:09:1f:ea:
                    0f:4e:4d:29:9b:fe:e4:a3:1b:2a:fa:81:5d:21:52:
                    16:ce:ee:3d:b2:20:c4:d3:a2:0c:d8:1a:4d:b5:c9:
                    25:54:2f:42:93:7e:1b:3a:55:8f:c7:ea:cf:a6:d9:
                    13:ab:2c:78:d1:ec:7f:1f:79:eb:53:ea:c0:37:10:
                    fc:d8:a1:a6:27:33:cd:9c:7a:fc:e8:55:11:12:42:
                    31:81:f0:e7:b3:58:6c:25:a4:f5:dd:f8:b4:0f:6d:
                    34:fe:76:21:2a:6e:d0:49:5c:61:80:1a:c5:e0:65:
                    f8:8a:2b:5f:0d:02:0c:1d:cf:90:e7:bc:ea:1c:32:
                    60:c7:76:7c:a9:79:b0:46:75:e5:07:60:a1:1d:43:
                    0b:07:f9:90:6a:72:f1:ad:f4:00:ef:dc:d2:49:d8:
                    43:d9:8e:0c:9e:fb:ee:ef:f3:32:a2:8c:a0:11:57:
                    ed:ea:cf:ba:46:3c:f1:cd:f5:54:b1:cd:91:f3:a2:
                    a1:5d:44:9e:1a:de:6c:09:b2:9d:73:a2:2c:43:72:
                    e7:37:d3:f8:06:d9:12:6f:7a:f6:a6:d2:c0:8f:9d:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9C:E0:BB:20:ED:20:07:86:9A:5A:E4:33:CE:FD:BF:EC:FA:FE:F1
            X509v3 Authority Key Identifier:
                keyid:F0:A1:12:71:04:34:E8:5A:E5:FE:6F:BF:41:E7:6B:DD:F9:38:18:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEScQQ06Frl_m-_Qedr3fk4GM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/294a81-5237-4bf3-a05b-a88a4d094af0/1/8KEScQQ06Frl_m-_Qedr3fk4GM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:e9:83:c4:6f:60:30:e7:11:ac:a4:9f:7e:54:07:ca:2a:
         be:6e:9c:9e:87:0b:8d:1b:65:df:47:4f:8c:62:cb:a7:d4:9f:
         c1:c6:52:df:b1:4b:f8:65:05:15:e9:d8:5f:b5:5f:ef:c5:59:
         70:04:c1:d5:00:b4:7e:e9:1b:9a:aa:b2:da:8a:69:d3:c0:c5:
         2a:5e:a0:a6:95:ea:73:1c:26:3c:b5:e9:3b:34:b9:64:9e:62:
         87:92:3c:ca:93:d7:49:9b:24:79:af:87:15:b3:41:fa:02:a0:
         be:ef:b0:93:22:9d:a0:44:87:c5:ac:01:4a:2c:6e:17:72:dd:
         2e:d1:a5:1f:74:3d:37:40:56:f8:43:21:69:a2:b8:23:c3:9a:
         c2:c9:ac:0b:c5:96:5a:5c:82:a4:c8:d5:20:a9:32:d4:6b:02:
         81:9c:67:1f:65:d3:96:04:3b:f4:49:33:19:07:7c:c0:1a:a0:
         64:cd:1d:a8:50:73:bf:ef:cd:5b:39:e4:c5:1b:66:fa:52:05:
         bb:53:52:7e:d5:44:fe:e2:44:2a:7f:20:ff:62:f8:95:b1:e4:
         55:88:a9:b5:bc:cf:88:3e:99:a0:71:bf:87:ee:a8:c7:88:03:
         8f:10:02:b3:c3:d7:bf:d3:58:00:67:26:5c:1d:89:fc:9c:1f:
         0f:a7:4f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:30 2026 by rpki-client