Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File:                     8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier:          9i0G3jiE05xIGTdYbJSkqM1DW+17k4qoiAzMywiZDHE=
Subject key identifier:   61:1C:E0:50:70:23:79:FE:07:F9:D7:24:FD:53:3F:BB:27:65:A0:56
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer:       /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial:       019F92B605FBCD91C0D4C55BCA19DE541C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number:          0E02
Signing time:             Fri 24 Jul 2026 06:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:30 +0000
Files and hashes:         1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: Hm1mlfy3z2MpqCOYx8B0JRbTPuBbYycqvyiT7a5Tc3w=)
                          2: xQZJn1hVlQsTuNoTjlcGuEGpY3g.roa (hash: GksZjbavALa0LpSPHzr2TolInQ6ItFW8MrzpinnttOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:05:fb:cd:91:c0:d4:c5:5b:ca:19:de:54:1c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
        Validity
            Not Before: Jul 24 06:00:30 2026 GMT
            Not After : Jul 25 06:00:30 2026 GMT
        Subject: CN=611ce050702379fe07f9d724fd533fbb2765a056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:bb:52:30:7b:e3:05:5a:55:71:94:eb:e0:
                    c7:31:78:ea:51:8c:b7:34:ec:5f:09:a4:dd:03:89:
                    0a:f7:62:e4:6f:a4:62:51:22:5c:24:81:ea:1b:0d:
                    35:0e:27:45:0a:b4:9c:66:e4:ac:be:8b:7b:34:0c:
                    c4:ee:cb:e6:80:9f:ee:fd:5b:ab:0c:8f:5b:e7:07:
                    98:fa:7e:a9:e2:4b:d2:fc:2b:da:2f:c6:5f:4e:8f:
                    7a:ef:88:a6:7b:ef:68:5b:e3:5c:b4:10:48:60:6c:
                    ce:a3:6d:8d:69:e1:75:74:e8:dc:80:8b:13:d0:99:
                    78:1b:c0:f3:3f:02:e1:8b:a9:df:6b:bd:19:01:37:
                    26:ae:f4:b4:14:fc:33:73:e1:6b:21:e5:3d:9c:64:
                    a1:59:5a:18:ba:a3:3a:8c:43:23:53:1d:30:8b:2f:
                    fe:2d:12:dd:4e:3b:ec:1c:49:89:64:14:31:b7:62:
                    ee:ef:fa:88:b5:b5:2c:c9:e3:ab:be:9c:0c:89:66:
                    2d:b0:3d:3b:75:b5:f2:aa:82:ac:1d:ec:be:aa:d4:
                    41:39:48:9b:eb:1b:1a:5a:b8:76:cd:89:7d:fa:d8:
                    f2:db:0c:8c:96:4a:c9:0d:da:a5:a2:91:4b:96:4c:
                    10:f5:78:ef:01:0d:eb:80:47:3b:4b:a9:8a:3b:27:
                    97:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:E0:50:70:23:79:FE:07:F9:D7:24:FD:53:3F:BB:27:65:A0:56
            X509v3 Authority Key Identifier:
                keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:bc:a4:9a:4f:d4:5a:85:23:4c:1a:7d:79:6d:17:41:e7:c3:
         f7:0b:ba:6d:e5:19:bc:58:b5:53:5e:ae:3d:7b:cf:ba:c9:ba:
         50:b0:c6:a9:93:79:09:b7:46:de:5b:0f:51:b5:88:72:c7:bf:
         96:ba:c1:2b:53:14:ec:4a:36:d5:87:1e:d8:20:d4:72:7f:03:
         a3:f6:8a:6f:9c:96:6c:3f:8a:32:e3:72:b7:d6:c1:b9:1e:4d:
         48:90:46:a2:03:ba:9f:64:38:30:26:74:3a:43:a1:ad:d5:fe:
         e4:48:7d:63:f5:33:7d:1c:8c:8b:2b:4e:d5:ec:c9:e9:34:47:
         17:a0:c0:ac:31:54:86:f7:70:3a:b0:24:6b:a1:a0:62:95:94:
         5c:9f:20:7a:27:31:b3:90:c2:ec:d5:91:e1:f7:b2:fb:3c:24:
         6f:7f:dc:b5:7f:be:df:6a:b5:09:42:eb:33:67:76:59:81:6e:
         87:8e:59:7d:5b:c8:1f:cd:e1:9e:1e:f2:e2:eb:8d:34:1d:24:
         4f:1e:9c:9f:70:e9:7c:87:ca:43:1f:65:a9:f3:e6:1e:69:34:
         39:87:eb:c8:6f:2d:9a:3e:70:2f:57:64:2b:44:38:a8:e0:94:
         65:69:43:aa:1a:6e:56:70:84:0b:95:aa:01:d4:c9:20:87:bb:
         9a:d2:08:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:27:22 2026 by rpki-client