Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File:                     8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier:          YmrsP/Ol27ju8FexXanW+qjispvaYZkMrTX2u8z9McU=
Subject key identifier:   77:F7:DF:CB:D2:8C:99:03:69:ED:AF:78:77:E6:E7:E3:E2:DB:FC:61
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer:       /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial:       019E1E35985DFC2BF75F4BF01029FBDC920F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number:          0D8B
Signing time:             Tue 12 May 2026 22:01:29 +0000
Manifest this update:     Tue 12 May 2026 22:01:29 +0000
Manifest next update:     Wed 13 May 2026 22:01:29 +0000
Files and hashes:         1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: 5HKfvKmnBvf2xR6H17Dk5+JGtIAgE8VI6QRDB3xcIF0=)
                          2: KoNkyGEhQqx3GQv3NXvFVwMfef0.roa (hash: LtXPZaXsrwVyxDRh3HBOcDRrPS3lyLPIJctf5b2s8uw=)
                          3: com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa (hash: MDoGJcJ4G5Krxrk0LLNHmW1LvznE/ooEfQBze5H+eN0=)
                          4: fYeRjU_mc3h2GVmwavyUioK7cxs.roa (hash: 9Bo6zl6wQTTzHhoMoy+vLsVaHVkougsJgOQtEmgZ41Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:98:5d:fc:2b:f7:5f:4b:f0:10:29:fb:dc:92:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
        Validity
            Not Before: May 12 22:01:29 2026 GMT
            Not After : May 13 22:01:29 2026 GMT
        Subject: CN=77f7dfcbd28c990369edaf7877e6e7e3e2dbfc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:3a:25:18:31:84:2f:4b:4c:1d:fb:60:eb:
                    7a:f5:56:fc:49:29:7c:2d:3f:5a:bb:c4:c0:f4:9b:
                    84:da:94:b8:25:5c:ac:ca:f9:67:0b:6a:b6:00:d4:
                    bb:30:a8:d9:6e:83:86:52:f2:a5:eb:02:d6:2e:a0:
                    45:3e:09:94:b0:71:51:a8:2e:fc:1b:d1:50:9f:f1:
                    91:44:db:e6:0a:b9:ae:a1:d0:f2:2d:6d:57:be:1d:
                    94:6f:19:f0:3e:18:64:41:35:9d:6d:d5:2a:04:f8:
                    47:92:4f:25:d8:dc:72:6c:64:e5:fd:c7:30:b6:18:
                    a1:35:d5:4a:df:d1:2c:58:7d:af:8b:ab:a4:40:f6:
                    f8:a3:e2:06:29:5c:13:87:ea:f4:93:c9:a6:eb:da:
                    9a:8f:18:1b:e1:d9:fe:27:0c:c5:d4:3a:d2:92:c4:
                    97:4f:ee:2c:e3:4b:e6:6c:12:7d:f1:77:5c:e0:df:
                    b8:23:fe:f5:73:2e:d7:d4:cf:64:69:52:a7:2c:21:
                    a1:5f:18:8a:e3:43:31:de:39:7f:9f:22:3e:df:bb:
                    c6:6f:0e:a3:97:e6:e3:bc:1f:84:49:4a:d4:9c:bf:
                    a1:64:12:b6:74:cd:8a:3b:95:16:1e:5f:7b:ba:ab:
                    5b:ac:89:e2:8c:42:c1:9c:f3:1e:4a:b6:51:5d:e6:
                    e7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:DF:CB:D2:8C:99:03:69:ED:AF:78:77:E6:E7:E3:E2:DB:FC:61
            X509v3 Authority Key Identifier:
                keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:98:6f:92:7b:9f:7b:70:75:e6:c3:7c:7d:57:d2:13:75:61:
         ba:3e:80:ca:23:e1:5e:59:0f:d1:f8:f9:f3:60:f0:c8:e9:a6:
         c4:f6:be:18:1c:b9:71:a4:55:9a:f2:1a:6e:a6:8d:0b:31:b4:
         d3:69:64:2a:ff:79:b5:f8:6f:47:11:c9:26:86:40:34:00:11:
         22:96:92:f1:92:83:88:a6:fa:b4:72:94:71:7c:a6:89:cf:58:
         ee:be:79:47:ea:1c:b6:cd:87:59:28:77:27:ce:91:30:11:d6:
         18:d4:95:88:b8:16:e9:b0:22:c6:f7:e5:60:c1:fc:41:cf:e8:
         b9:78:df:05:88:48:e8:bd:7a:25:6c:3a:d6:f1:b7:53:cf:af:
         1c:43:38:10:f7:21:ec:95:ae:6a:3f:3d:04:52:9a:f3:85:c6:
         da:df:d9:1d:ed:aa:cd:53:96:b0:c1:3d:6b:c5:13:54:f4:29:
         e3:26:e4:bf:c8:af:e2:3f:1e:bb:f7:52:26:e9:90:f8:f2:de:
         45:07:d4:37:71:17:dd:76:33:1a:41:5f:86:25:ad:9e:cf:96:
         e8:65:85:7d:bf:31:2e:bc:36:7f:fe:c0:4f:39:70:b1:a6:24:
         d2:1d:97:35:82:1f:05:36:81:b9:bb:14:b5:33:83:9a:98:1b:
         c8:eb:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:16:16 2026 by rpki-client