Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
File:                     Or4W6uZkLTO7wPuQzeI0_QITRwk.mft (raw, json)
Hash identifier:          7K6sxjChjsvmEI6NvtGmpaqO5p4OSj8zZs7SQNCvjAQ=
Subject key identifier:   34:8F:7F:A2:DC:DA:19:58:A7:F0:5B:9F:41:29:D7:0A:1E:C2:B0:6F
Authority key identifier: 3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09
Certificate issuer:       /CN=3abe16eae6642d33bbc0fb90cde234fd02134709
Certificate serial:       019F90C7A2C31A58896714C85DB079F7DA1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
Manifest number:          8A
Signing time:             Thu 23 Jul 2026 21:00:30 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:30 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:30 +0000
Files and hashes:         1: Or4W6uZkLTO7wPuQzeI0_QITRwk.crl (hash: ECoOagiLwfPSxIfuP/yyidertNt54mXYODn1Yb1P8WI=)
                          2: P-NUTyH2nVmRcyECHCRmEz-xvik.roa (hash: qicAikWH5uUaAqp5U7Os+UidSM1o4zOBz4zwJdo3kRY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:a2:c3:1a:58:89:67:14:c8:5d:b0:79:f7:da:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3abe16eae6642d33bbc0fb90cde234fd02134709
        Validity
            Not Before: Jul 23 21:00:30 2026 GMT
            Not After : Jul 24 21:00:30 2026 GMT
        Subject: CN=348f7fa2dcda1958a7f05b9f4129d70a1ec2b06f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:26:21:12:db:b2:2e:3b:c1:cd:1d:37:55:
                    35:c5:bc:f3:0a:6a:79:30:fb:ae:49:56:89:df:07:
                    10:bb:ae:0f:98:22:f9:40:24:9c:0c:1a:6c:71:c3:
                    fb:cc:2f:bf:2a:6d:1d:3f:8d:e7:71:d8:1b:04:0b:
                    d8:c4:03:35:de:27:77:88:88:8a:21:d1:23:ee:0e:
                    d2:6a:82:86:c6:9e:76:91:b7:6b:8e:25:7e:23:fd:
                    e9:81:9b:e1:2b:36:44:6b:13:ba:2d:34:ba:6f:23:
                    0a:12:a0:8b:9c:30:b3:6a:79:05:ae:76:c1:ff:bd:
                    b6:5c:95:95:53:ba:87:13:9d:08:22:aa:19:90:fe:
                    9a:82:c7:4d:01:a1:3b:cf:48:55:27:81:03:ff:32:
                    94:81:d1:84:e9:43:f4:1e:4c:28:a9:d3:c8:9f:2d:
                    e0:64:4a:18:74:13:1d:54:7b:7f:b5:01:1a:8c:f3:
                    ad:ef:de:5a:5b:83:8a:68:8d:21:16:8c:7b:2c:c4:
                    9a:0a:8f:76:db:2b:7e:d2:1f:91:4a:8c:ce:fc:9e:
                    22:c9:9c:d8:41:d1:22:b4:2f:49:c9:05:27:29:2c:
                    82:ee:13:6a:f5:29:5a:0a:d3:a6:6d:44:dd:ca:72:
                    34:6a:8b:bd:1d:35:0e:e6:1f:3a:18:27:dc:f2:cb:
                    f3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8F:7F:A2:DC:DA:19:58:A7:F0:5B:9F:41:29:D7:0A:1E:C2:B0:6F
            X509v3 Authority Key Identifier:
                keyid:3A:BE:16:EA:E6:64:2D:33:BB:C0:FB:90:CD:E2:34:FD:02:13:47:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or4W6uZkLTO7wPuQzeI0_QITRwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/fd91a6-1ee8-4cca-8bc2-6a6f9fe64052/1/Or4W6uZkLTO7wPuQzeI0_QITRwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:51:42:f0:b3:37:bb:a0:cf:ee:61:98:cc:56:42:6b:06:
         ad:fb:2f:12:7b:04:f3:f3:ca:07:70:ef:b0:07:a6:db:7d:6d:
         c5:36:0e:f2:52:16:d5:ea:92:b4:f8:fb:33:19:42:68:6e:84:
         4f:3f:e6:6b:2a:8d:21:02:70:76:d5:72:b2:2c:f4:71:23:59:
         eb:30:66:38:42:e3:d7:7e:ef:c5:b9:48:3b:75:47:69:db:6e:
         ac:fb:f1:ae:d9:f0:fc:09:c2:0e:ee:35:75:74:a6:ae:a0:ae:
         ee:7b:35:ca:75:32:ca:1d:f3:c5:f6:f1:20:bb:e7:aa:07:84:
         e9:e1:b8:79:d3:a5:a0:f5:ff:f5:8c:f0:6f:21:c3:26:54:0b:
         bb:4c:0a:e3:b6:87:6f:84:ac:b3:d4:3d:97:6e:8f:b7:60:ee:
         c2:2e:31:ae:76:6b:05:19:9d:0f:e2:70:60:b0:2b:a5:f9:77:
         0b:31:df:d1:ac:00:77:9b:dc:ba:e3:1d:69:f7:3e:61:c8:8a:
         63:16:a0:c8:2d:45:bb:de:5e:24:b8:df:f9:56:7b:16:65:ae:
         4d:34:55:3a:6e:bb:3d:47:51:05:5b:05:eb:4d:6b:29:8f:0d:
         20:b9:1b:b2:e2:0a:11:36:0b:dc:5c:60:cc:a5:a8:3e:19:73:
         c3:1d:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:38:00 2026 by rpki-client