Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
File:                     Y0JgC_HMkhaub-FpoenVQYrZOiI.mft (raw, json)
Hash identifier:          WR0clIlsQndNMugnEgNa/sJnpPAfuRlNVLDLuqrI188=
Subject key identifier:   A1:DE:46:45:28:97:57:6F:33:BC:34:72:35:56:C5:FF:45:7C:62:DA
Authority key identifier: 63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22
Certificate issuer:       /CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
Certificate serial:       019F93C8FB298F68A09868760327DC4A82E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
Manifest number:          0FF8
Signing time:             Fri 24 Jul 2026 11:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:49 +0000
Files and hashes:         1: 51U34o8JYb8CQVhcBv2qFWgAPgs.roa (hash: xu3fMRX2q3+Mv4t+1E/L+4OKYLdaxsUvme7/Xi7jOeA=)
                          2: Naj_hbjSCfJxAXzUztYdICw-HJU.roa (hash: oHxNo2orkmmjEzObI45+SgF12BlHV9OAFLzlNY9SiB0=)
                          3: Y0JgC_HMkhaub-FpoenVQYrZOiI.crl (hash: W+vMGRcrXwIbwoI+uDJsFCo7ORs007N1963+ZmMaDxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:fb:29:8f:68:a0:98:68:76:03:27:dc:4a:82:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6342600bf1cc9216ae6fe169a1e9d5418ad93a22
        Validity
            Not Before: Jul 24 11:00:49 2026 GMT
            Not After : Jul 25 11:00:49 2026 GMT
        Subject: CN=a1de46452897576f33bc34723556c5ff457c62da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:40:1b:84:e5:2d:e0:d5:b6:c1:12:6b:c9:49:
                    2d:5f:8f:56:01:f5:af:1e:ea:d7:40:f8:19:fe:25:
                    ce:2e:06:c3:3c:11:29:3b:cf:78:48:63:79:f8:6e:
                    d9:c2:0a:1b:18:1d:f2:8b:5f:2a:7d:6b:ce:d6:c5:
                    cd:87:9e:12:9e:6e:60:33:c0:48:7d:c4:7d:be:30:
                    31:f7:b4:83:90:1e:12:c0:2d:5a:5c:f1:c6:93:54:
                    78:b2:3d:5a:bf:42:5f:a8:2f:4a:8d:43:f7:b7:4b:
                    05:37:11:8e:81:3c:60:08:8d:39:22:a4:9b:c0:c3:
                    55:28:ac:44:9c:6b:55:55:47:9b:1d:ce:f5:e3:0a:
                    8a:d7:ac:bf:68:0d:21:42:02:13:d0:49:0d:2b:f0:
                    b1:9a:84:c8:45:bd:03:cc:b8:06:4c:36:b0:7b:7c:
                    4b:a1:46:7d:68:af:43:30:ed:70:16:5c:80:a6:97:
                    b8:b1:15:b2:ab:8a:c2:39:b5:29:5e:2a:b3:d9:df:
                    1a:ef:72:f3:39:2b:08:e1:72:04:d8:44:78:23:b7:
                    3b:b3:1c:b6:03:57:0b:64:bf:86:8f:0b:a9:b2:02:
                    57:55:b7:64:4d:35:28:b5:95:03:f6:18:34:88:d8:
                    07:0e:47:55:8d:08:69:40:96:98:bf:6e:be:c8:22:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DE:46:45:28:97:57:6F:33:BC:34:72:35:56:C5:FF:45:7C:62:DA
            X509v3 Authority Key Identifier:
                keyid:63:42:60:0B:F1:CC:92:16:AE:6F:E1:69:A1:E9:D5:41:8A:D9:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y0JgC_HMkhaub-FpoenVQYrZOiI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f076d-f0e9-42b4-ad5f-7312063ffa7f/1/Y0JgC_HMkhaub-FpoenVQYrZOiI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9a:09:28:98:e4:72:30:bc:f2:0d:5f:5d:82:f5:cc:75:73:
         53:ab:f9:8a:0b:98:76:96:07:cb:54:64:96:9f:16:a3:39:3a:
         91:60:0b:32:a9:f0:a2:71:34:3f:f2:bd:19:85:96:23:9f:60:
         58:62:52:10:eb:b2:f3:14:4c:48:35:1d:65:19:7e:27:c3:da:
         15:31:7f:36:26:f3:4b:54:ad:98:fc:6c:fd:bf:7d:09:e1:24:
         e7:5f:06:5a:2e:ff:9d:a2:12:0a:bb:8f:bd:53:9b:81:eb:83:
         fb:a4:d5:a7:f2:17:20:a6:fb:69:3a:e2:b9:2b:58:65:89:04:
         63:a0:49:7b:1f:c4:04:a7:92:ad:63:3b:b9:c7:13:da:91:31:
         0c:49:1b:28:72:bd:ad:37:d6:0d:c6:69:55:f5:4a:32:6c:e5:
         f0:8d:a6:01:42:1a:67:99:20:95:12:93:af:8b:85:30:85:38:
         f9:06:3a:5a:be:46:b1:83:67:ce:74:67:9b:ed:74:0f:1d:78:
         1a:23:26:38:0e:3e:54:5c:7e:b6:8a:67:96:26:c6:b9:37:0c:
         14:45:27:5b:c2:f4:ad:70:29:71:4a:91:6b:c3:62:15:17:5c:
         a2:e3:06:ac:a4:4d:91:c4:07:66:2e:b2:ce:27:ec:e3:d0:2a:
         b4:bc:57:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:37:15 2026 by rpki-client