Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          QNFaa7x/KRIM5bk13jGFoiOC8Gx74B9oo0CiPHVa66Y=
Subject key identifier:   48:D1:2D:B4:FC:F8:E1:7A:C3:F3:16:85:4D:15:2D:3E:59:89:1F:63
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019F91355D0D8BB39AC2AF79AE18C78C13C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0FCC
Signing time:             Thu 23 Jul 2026 23:00:21 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:21 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:21 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: jb08NWNzz3ZH0m5AmHIyN29qCNebj3R6OaEM/pcKt+w=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:5d:0d:8b:b3:9a:c2:af:79:ae:18:c7:8c:13:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Jul 23 23:00:21 2026 GMT
            Not After : Jul 24 23:00:21 2026 GMT
        Subject: CN=48d12db4fcf8e17ac3f316854d152d3e59891f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:6b:bf:be:51:9c:b0:3a:04:04:a5:7b:f2:
                    cf:3f:96:0a:a3:93:2c:9b:34:95:03:37:bb:1f:ed:
                    d0:ed:22:7e:ed:b3:79:c2:ee:b7:b6:18:a3:3a:ad:
                    9f:f0:f8:c7:26:21:ef:5b:5c:35:e1:4c:98:eb:34:
                    c9:1d:ba:e8:f8:fe:96:48:b6:79:7c:a5:85:ad:ea:
                    f6:0d:57:93:f6:26:53:03:43:92:c1:d7:fc:24:60:
                    71:20:37:ff:e9:1e:3a:cf:1f:35:71:3f:6b:08:68:
                    24:be:bd:49:e7:01:b6:8e:72:2e:ec:ab:8e:e3:6d:
                    eb:ac:c3:dd:6e:cb:73:6e:75:20:2e:47:92:14:52:
                    ab:59:f6:55:02:99:07:74:41:2a:b9:d9:23:7b:a9:
                    88:8e:45:07:2a:1b:63:1f:bd:f5:75:48:90:85:bc:
                    21:64:9f:cc:94:5f:32:d4:61:1b:ff:5d:70:6c:c4:
                    b1:b5:5e:2f:da:0b:12:59:32:bf:95:8e:e3:72:d5:
                    db:eb:83:f6:3f:43:32:ef:7d:5b:78:94:29:bf:2c:
                    1b:95:09:e6:33:18:7c:36:10:96:84:a3:1a:8b:b3:
                    d0:1d:84:eb:24:ee:fd:2c:1d:3e:e9:aa:c3:ef:3b:
                    93:7b:5c:70:73:2d:e2:fc:18:ec:e4:84:12:95:98:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:2D:B4:FC:F8:E1:7A:C3:F3:16:85:4D:15:2D:3E:59:89:1F:63
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:56:33:6c:17:e3:cf:99:74:2b:87:67:53:c6:ae:17:fc:
         21:a4:76:84:94:43:42:6a:54:bc:f6:3f:04:70:e5:52:f7:3a:
         13:d2:d2:c4:bc:50:5f:5b:e7:2e:69:5f:c6:8d:20:e4:41:2c:
         2f:7d:41:ae:2d:c8:ef:08:5e:bf:e1:86:58:85:90:fa:0e:35:
         db:e0:39:04:52:ec:d0:5e:b0:37:33:2c:0d:6e:a6:5f:8c:fa:
         dd:b7:30:f3:8d:d5:58:35:cf:8c:c5:98:bc:65:ba:b7:d7:73:
         69:4c:09:a8:ec:0e:cc:8d:67:0e:b1:c5:44:41:03:27:67:43:
         c7:a7:54:d9:2a:9f:bc:a5:2a:61:90:57:5e:a4:cb:73:16:b4:
         2f:8c:49:b0:50:2e:3e:88:22:cc:53:9a:40:a8:fb:12:5d:5d:
         66:5f:a3:18:ff:50:c3:a5:b3:85:d1:36:fd:34:3b:f0:ba:d8:
         d0:a4:0a:1c:09:46:0a:68:02:9b:c7:19:4e:a2:71:35:b8:54:
         bc:06:1e:45:6e:83:83:c0:19:eb:e1:2c:5f:03:88:2c:16:88:
         6a:9c:a4:80:39:1c:0f:69:95:0f:94:8b:79:ae:28:3e:fb:a2:
         20:af:a9:5c:6a:0b:30:5e:94:94:d2:1c:f4:a5:3d:37:5e:23:
         bc:ee:38:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNV0Ni7Oawq95rhjHjBPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNTA5NmZlMzM5MDQ0OWM5MzZlODU3MDYxZDRhNjk2NWQ0
MDhhMzEwHhcNMjYwNzIzMjMwMDIxWhcNMjYwNzI0MjMwMDIxWjAzMTEwLwYDVQQD
Eyg0OGQxMmRiNGZjZjhlMTdhYzNmMzE2ODU0ZDE1MmQzZTU5ODkxZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovRrv75RnLA6BASle/LPP5YKo5Ms
mzSVAze7H+3Q7SJ+7bN5wu63thijOq2f8PjHJiHvW1w14UyY6zTJHbro+P6WSLZ5
fKWFrer2DVeT9iZTA0OSwdf8JGBxIDf/6R46zx81cT9rCGgkvr1J5wG2jnIu7KuO
423rrMPdbstzbnUgLkeSFFKrWfZVApkHdEEqudkje6mIjkUHKhtjH731dUiQhbwh
ZJ/MlF8y1GEb/11wbMSxtV4v2gsSWTK/lY7jctXb64P2P0My731beJQpvywblQnm
Mxh8NhCWhKMai7PQHYTrJO79LB0+6arD7zuTe1xwcy3i/Bjs5IQSlZiN/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjRLbT8+OF6w/MWhU0VLT5ZiR9jMB8GA1UdIwQY
MBaAFPFQlv4zkESck26FcGHUppZdQIoxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYt
NTgxNWZkM2RhMjk3LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81ZDZkNjktODg4MC00YTkyLTg3NTYtNTgxNWZkM2RhMjk3
LzEvOFZDV19qT1FSSnlUYm9Wd1lkU21sbDFBaWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrxWM2wX
48+ZdCuHZ1PGrhf8IaR2hJRDQmpUvPY/BHDlUvc6E9LSxLxQX1vnLmlfxo0g5EEs
L31Bri3I7whev+GGWIWQ+g412+A5BFLs0F6wNzMsDW6mX4z63bcw843VWDXPjMWY
vGW6t9dzaUwJqOwOzI1nDrHFREEDJ2dDx6dU2SqfvKUqYZBXXqTLcxa0L4xJsFAu
PogizFOaQKj7El1dZl+jGP9Qw6WzhdE2/TQ78LrY0KQKHAlGCmgCm8cZTqJxNbhU
vAYeRW6Dg8AZ6+EsXwOILBaIapykgDkcD2mVD5SLea4oPvuiIK+pXGoLMF6UlNIc
9KU9N14jvO44GA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:34 2026 by rpki-client