Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File:                     8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier:          /NM1DS8EhT3CoCXJ2XTiQCgwng5UgxfyfMFsOMYhor4=
Subject key identifier:   88:33:19:F1:F8:81:4A:62:FB:BF:5B:52:2E:BF:84:44:1C:73:4A:77
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer:       /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial:       019F927EDDA45DDC571CAB6B54BC62A15255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number:          0799
Signing time:             Fri 24 Jul 2026 05:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:15 +0000
Files and hashes:         1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: P5EsXIgZzi9ol24cSPyJm4nQV+aw4d5HFpJCyPFWOMo=)
                          2: AbRiyCHHLVlOy73Va3XhnwR_DLo.roa (hash: 6HenLNVbET8UrcTGANmzLr3/H2ChFNxxswPM4qVTvAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:dd:a4:5d:dc:57:1c:ab:6b:54:bc:62:a1:52:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
        Validity
            Not Before: Jul 24 05:00:15 2026 GMT
            Not After : Jul 25 05:00:15 2026 GMT
        Subject: CN=883319f1f8814a62fbbf5b522ebf84441c734a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:8b:ae:8c:ae:ec:59:1a:de:20:4e:28:d8:
                    73:b8:c1:18:8b:91:00:3e:e2:68:6f:ed:0c:68:d7:
                    c5:c1:b0:4a:c8:16:ab:fd:f9:d3:a5:06:72:1b:11:
                    bb:ef:4f:7a:5d:4e:1f:bb:94:a7:42:08:70:eb:82:
                    dd:c5:33:99:31:82:5e:16:08:25:35:d8:6c:56:ac:
                    6f:01:12:45:5c:c0:e6:ab:4e:fb:3d:6d:99:7c:b9:
                    15:34:50:47:b1:a2:34:cb:23:89:b9:fb:0d:40:5d:
                    cf:aa:6f:c4:2c:e4:91:05:82:8c:4a:0b:e5:93:cd:
                    5f:5a:c0:bc:5d:cb:13:58:df:fa:c8:4d:35:da:15:
                    53:b8:8b:43:fa:bf:e8:04:f8:52:af:89:f5:c7:e8:
                    36:e0:60:5f:de:d3:a3:cf:72:53:64:71:56:c3:38:
                    96:51:3b:a9:db:43:e5:10:39:6a:c4:8a:a1:75:b6:
                    3d:74:94:ac:84:d3:39:06:7d:e0:8e:22:3b:91:0d:
                    f1:7e:48:49:cf:47:c6:24:34:bb:99:b8:d6:fc:0f:
                    94:71:52:7a:7c:67:ac:c5:13:62:fc:a8:02:a1:54:
                    20:20:74:45:41:53:84:ea:18:35:57:c0:44:1a:83:
                    8c:70:42:96:56:c6:02:cc:7f:28:a9:67:49:7d:4f:
                    1e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:33:19:F1:F8:81:4A:62:FB:BF:5B:52:2E:BF:84:44:1C:73:4A:77
            X509v3 Authority Key Identifier:
                keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:49:f7:bb:73:01:99:13:db:0c:ee:80:5e:74:84:6d:2c:cf:
         db:49:4d:54:49:dc:be:e3:1e:05:5d:1a:e4:fd:5b:ec:88:19:
         3e:4d:11:c3:3a:3a:16:e3:c6:0c:e3:69:99:f8:a0:73:d9:e9:
         08:49:f0:0e:bc:42:3f:55:59:55:e7:41:49:3f:4f:35:37:ea:
         bf:2a:6e:a4:8d:37:33:ce:47:a9:51:cf:a8:c3:75:3d:ca:40:
         56:0e:d8:4d:6d:33:d1:19:ea:1b:97:20:30:e8:6e:5c:6f:85:
         fd:a3:80:67:da:b6:ca:62:3e:2c:ef:e5:67:7e:22:8c:55:db:
         52:04:68:d9:2d:78:c6:71:aa:9b:c3:19:19:71:ff:e4:e0:ca:
         db:99:3a:5c:0e:82:03:a9:be:05:c8:ea:13:c6:ec:63:89:d3:
         01:8b:b3:31:08:92:8f:8c:1c:0a:db:4a:4e:26:01:f5:ef:33:
         90:3a:c1:2b:42:67:6e:55:e3:6a:cd:10:cb:91:26:df:08:85:
         3b:49:2a:60:3b:d8:50:32:cc:c1:32:73:50:f6:84:06:95:99:
         be:2b:cd:6b:af:f8:ca:25:29:af:72:ac:81:d7:11:56:b2:af:
         12:d1:6d:d6:55:48:a4:a7:69:79:61:e6:dd:9b:ab:7d:61:98:
         df:37:20:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:35 2026 by rpki-client