Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
File:                     8XUAF9wNk26aoWaTGTffeJKv6fE.mft (raw, json)
Hash identifier:          qHzBQbA5uNewgY8phnxk0+mhGCKc6UK/VzuoWrasVyo=
Subject key identifier:   9C:7C:11:20:DF:A5:82:E4:85:B3:C7:BB:47:60:12:E6:7E:68:06:65
Authority key identifier: F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1
Certificate issuer:       /CN=f1750017dc0d936e9aa166931937df7892afe9f1
Certificate serial:       019F90236CBFE82E7367181F9BC9ACB46906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
Manifest number:          0393
Signing time:             Thu 23 Jul 2026 18:01:08 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:08 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:08 +0000
Files and hashes:         1: 8XUAF9wNk26aoWaTGTffeJKv6fE.crl (hash: rAHZaedGnG8dCp1I04UMVUEwSsNyfx95IgOdqR9np/4=)
                          2: RJmo5W4f9aoT7fFDQ3yD2RKwAac.roa (hash: IZ2vUVo1okHZdVGuQKYV71GbDyxma+mzCV0u8e3RDcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:6c:bf:e8:2e:73:67:18:1f:9b:c9:ac:b4:69:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1750017dc0d936e9aa166931937df7892afe9f1
        Validity
            Not Before: Jul 23 18:01:08 2026 GMT
            Not After : Jul 24 18:01:08 2026 GMT
        Subject: CN=9c7c1120dfa582e485b3c7bb476012e67e680665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:07:df:34:4e:57:5f:70:b6:1a:99:09:f2:fc:
                    e3:56:bd:a8:fc:3a:ea:fb:5c:51:d5:5a:e9:98:4a:
                    34:a4:0d:3e:74:9c:d6:fa:ae:43:01:61:16:e4:cf:
                    f5:81:17:c8:63:c2:ae:9e:33:94:f2:fc:f0:a4:e2:
                    6a:8a:e7:c0:0c:27:25:62:e5:9a:e0:ad:b0:53:5a:
                    58:a3:f2:33:64:17:1b:b3:bd:91:4c:a3:98:63:6d:
                    ab:bb:f4:dd:1b:f1:a7:ae:48:d2:da:d5:69:ca:26:
                    52:8a:b1:00:3b:e3:e5:b5:50:38:a1:77:ef:83:20:
                    ac:1c:a2:8f:a0:03:2e:01:cf:08:f7:81:a6:d1:22:
                    f5:de:b9:52:d4:90:b4:72:5d:d5:83:82:51:07:2e:
                    41:d2:2c:fa:e9:f9:79:6c:c2:28:17:34:8e:08:fd:
                    52:fc:a3:a1:05:e5:36:a6:7c:da:bb:1c:ce:5e:7d:
                    c5:19:f2:06:ea:64:74:64:6e:81:f3:07:08:6a:30:
                    a8:54:cb:0a:72:24:89:af:8b:b7:1f:56:70:1b:69:
                    6b:d0:f2:d9:21:32:1f:cc:63:d7:54:01:76:5e:6e:
                    09:65:d1:b1:21:1c:9f:c2:d1:eb:47:22:65:76:4e:
                    23:69:f5:1b:6f:2d:e1:0b:3f:be:e3:2c:d3:b4:77:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7C:11:20:DF:A5:82:E4:85:B3:C7:BB:47:60:12:E6:7E:68:06:65
            X509v3 Authority Key Identifier:
                keyid:F1:75:00:17:DC:0D:93:6E:9A:A1:66:93:19:37:DF:78:92:AF:E9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8XUAF9wNk26aoWaTGTffeJKv6fE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/f614ef-56ae-4ddf-a3fc-92995fcf57c6/1/8XUAF9wNk26aoWaTGTffeJKv6fE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:57:69:35:9a:fd:3d:fd:e4:a7:cb:70:98:a7:d3:27:c0:
         e1:f5:61:55:91:8e:14:d6:5e:45:28:02:a5:04:af:e6:51:1a:
         b5:9d:38:fa:3b:10:a0:a0:c7:1e:df:ae:45:61:9c:ef:f0:c1:
         d7:06:04:09:e9:3c:29:48:4f:31:20:bf:e9:3f:eb:d0:28:ce:
         d9:b3:77:6c:2b:2c:87:d8:9d:9d:5b:ff:d0:1d:62:25:31:98:
         29:df:fd:32:e5:b7:36:7a:46:eb:cd:e8:48:15:f0:6e:d4:12:
         f2:40:d3:4f:1c:93:fb:6c:29:23:b8:2b:b0:38:b8:ce:c3:5f:
         69:74:ec:6d:5a:e3:f0:d3:14:ff:67:eb:25:b2:4a:a6:f7:96:
         b0:d8:83:ea:e1:3c:8e:0e:00:1f:0b:7c:2d:23:eb:09:20:b7:
         92:a3:f0:f2:0b:3b:b6:f1:ce:c3:7e:49:d8:c3:21:03:e2:73:
         7a:b1:86:3d:04:2c:d5:96:5f:d6:9b:66:b5:ea:57:51:4f:46:
         48:b7:63:00:cf:69:e8:f3:d8:3a:47:5f:5d:86:d3:46:ab:31:
         a2:eb:8d:ca:90:58:81:4e:83:78:6a:bb:91:93:15:c5:f8:65:
         f0:a9:a2:36:d4:cf:5a:69:b9:2a:28:96:fa:0b:2a:1a:78:5e:
         3b:39:d3:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:22:12 2026 by rpki-client