Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File:                     8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier:          /z/YZ2jB0quQ0jC+6Jd6Wnw55cLgUe5ydH17ORlTYU8=
Subject key identifier:   CD:FD:D6:8D:A8:BC:50:5B:A0:45:6C:F4:0F:A3:BB:B4:9C:2C:CC:D2
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer:       /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial:       01A0CCA359FE9818B5C52DDE5D68F2D30C7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number:          0EEF
Signing time:             Wed 23 Sep 2026 05:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:52 +0000
Files and hashes:         1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: UpqZjnkCdRKhMvSlOFQx7lmwhv3pT7skUDRBM2/6zuw=)
                          2: GkhLBKyXd_2_TAAIDkb9-78tRyw.roa (hash: YA9SCWRSChUXka0qzLVmh8TguQnI9NGmd8B8uSQKI9M=)
                          3: KoNkyGEhQqx3GQv3NXvFVwMfef0.roa (hash: LtXPZaXsrwVyxDRh3HBOcDRrPS3lyLPIJctf5b2s8uw=)
                          4: com7AGbcg6rq-RMKjJZb9Yd9Nmk.roa (hash: MDoGJcJ4G5Krxrk0LLNHmW1LvznE/ooEfQBze5H+eN0=)
                          5: fYeRjU_mc3h2GVmwavyUioK7cxs.roa (hash: 9Bo6zl6wQTTzHhoMoy+vLsVaHVkougsJgOQtEmgZ41Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:59:fe:98:18:b5:c5:2d:de:5d:68:f2:d3:0c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
        Validity
            Not Before: Sep 23 05:00:52 2026 GMT
            Not After : Sep 24 05:00:52 2026 GMT
        Subject: CN=cdfdd68da8bc505ba0456cf40fa3bbb49c2cccd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:64:c0:1b:0f:9e:9c:85:e9:c6:aa:21:a0:
                    30:27:56:60:0e:aa:fe:b8:a3:66:70:20:e0:19:e0:
                    89:ec:1a:3d:f4:12:89:e2:7e:8a:b6:90:22:a1:f6:
                    a5:c2:d3:96:21:be:4e:71:ad:20:50:c0:a2:61:87:
                    d1:b2:56:52:80:f7:72:bc:8e:57:9f:62:b6:eb:6c:
                    3c:99:8a:a7:fc:0d:f0:fc:fe:c5:e9:07:31:8a:ac:
                    36:b0:4e:02:77:6a:49:cf:73:67:a5:72:b1:af:e1:
                    a5:94:4f:4e:b5:67:4c:4f:c7:39:4d:c7:b5:c1:8c:
                    b2:6e:5c:cc:30:0d:aa:0d:88:e8:d3:76:9b:d6:3c:
                    e8:bb:de:2b:03:f1:87:a5:31:3f:0b:21:ba:9c:44:
                    db:32:1a:98:69:5b:4f:6c:4b:37:f3:ef:5c:0c:c8:
                    75:73:29:c4:9f:00:86:c6:b1:07:c5:54:48:b8:d4:
                    ab:09:46:6d:9f:e0:19:c0:17:50:6d:3a:5f:d6:e7:
                    8c:8f:d1:e7:5e:30:15:f0:4a:06:08:57:cf:cd:4f:
                    08:37:f5:09:06:ae:55:6a:93:fe:26:21:ee:e2:8b:
                    26:1b:4f:09:80:a5:8e:ce:6c:86:f7:cc:00:40:de:
                    fe:ea:1f:f4:c8:e1:61:c8:83:e8:a8:0b:8e:3e:74:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FD:D6:8D:A8:BC:50:5B:A0:45:6C:F4:0F:A3:BB:B4:9C:2C:CC:D2
            X509v3 Authority Key Identifier:
                keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:bf:d6:91:c3:25:36:1c:25:c7:f1:91:33:cd:db:b9:5d:dd:
         4f:ad:99:a7:ae:9b:95:97:98:6a:25:49:e6:18:41:26:e9:8a:
         60:5e:79:65:1a:d9:db:56:f7:b4:20:41:ad:97:a5:d9:10:2f:
         74:ec:06:ea:a0:a5:0e:95:9c:42:2d:a4:d0:a2:8c:d8:b7:35:
         35:65:c5:fd:42:de:1c:bf:b8:48:d4:38:3b:0e:84:de:7d:69:
         a8:b3:f2:8c:e2:37:49:ca:d2:e3:ba:18:62:e6:82:cc:85:25:
         1b:52:e2:b8:ca:59:15:35:03:13:22:ac:15:da:32:fc:d7:db:
         42:47:4f:f5:82:1d:ff:14:08:85:38:a5:a2:6f:35:18:f1:59:
         26:ab:18:e8:c4:48:3b:fe:3d:de:da:70:7c:bc:75:26:7d:53:
         cd:40:f4:29:a7:d9:12:04:6f:fc:34:b8:46:98:12:2a:97:85:
         1f:8f:3b:d3:0c:13:a6:bb:80:f0:28:e4:a2:24:0a:e3:3f:10:
         32:9d:8a:2a:17:54:5a:2b:6b:15:b7:bf:a3:2c:d7:70:c2:30:
         85:be:ca:02:7d:cf:3a:a0:96:49:47:a1:27:b0:2d:5e:b7:a2:
         32:5c:ef:22:5f:18:b9:52:fc:d0:cd:8c:b7:1b:46:57:28:e3:
         5f:3d:a9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:14:17 2026 by rpki-client