Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
File:                     8rwR5uzToK8-5DlNy7ez75AYfTA.mft (raw, json)
Hash identifier:          gC8obHh+529gDVzEhkmVkMECMH1IaDOIEEYjW1SMkMQ=
Subject key identifier:   41:D5:0A:61:E7:E3:DF:7C:BC:D5:10:3A:29:0B:FF:58:6F:8D:A0:39
Authority key identifier: F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30
Certificate issuer:       /CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
Certificate serial:       019F90C7C670B6E7B7D923859D049D50EAD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
Manifest number:          0D49
Signing time:             Thu 23 Jul 2026 21:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:39 +0000
Files and hashes:         1: 0GtHSCiaQJFiDwKeyKhxviPbL4M.roa (hash: nhw++IeOTGTOw+566EuGYf99+61Y7CRqE1zkmgOdkhw=)
                          2: 8rwR5uzToK8-5DlNy7ez75AYfTA.crl (hash: OcXguxC1TUXWhcAd11RBFUNk9bp8u/Jp7dWYacpXS2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:c6:70:b6:e7:b7:d9:23:85:9d:04:9d:50:ea:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc11e6ecd3a0af3ee4394dcbb7b3ef90187d30
        Validity
            Not Before: Jul 23 21:00:39 2026 GMT
            Not After : Jul 24 21:00:39 2026 GMT
        Subject: CN=41d50a61e7e3df7cbcd5103a290bff586f8da039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:26:6f:c5:3e:28:64:cf:ab:8f:23:6f:3b:
                    82:11:31:bd:df:7d:93:2b:1d:f3:4f:67:b2:7c:75:
                    39:b3:a9:2d:c0:fc:91:f2:c4:c2:60:d9:0c:f0:27:
                    ca:b8:19:f0:0d:0d:86:42:1b:91:a6:0b:44:a5:88:
                    4d:cf:51:c8:1e:48:28:60:3a:d9:c3:04:24:00:22:
                    34:e6:ef:07:50:cf:8c:31:f7:8a:9c:ee:17:55:4a:
                    67:3f:c9:3a:ec:4d:72:a2:5e:58:80:2c:e3:22:ef:
                    8b:b4:24:91:9a:27:de:7d:5b:72:47:5f:1f:a5:be:
                    bf:d0:4a:40:40:b6:9c:6c:cb:cd:f7:83:9d:84:8b:
                    dc:fb:7e:d2:bc:9c:88:6d:af:63:1c:0c:44:89:e7:
                    6b:22:cb:6a:c6:61:ae:69:c6:d0:62:c7:ab:83:fa:
                    28:b8:14:e9:ad:17:dd:4d:15:15:e9:81:0e:6f:48:
                    bb:03:c8:0b:5d:5b:3e:ab:ef:c1:1c:9f:ed:5b:92:
                    b2:c3:b4:37:c2:6c:3b:93:86:09:a4:d4:f4:11:d3:
                    77:6d:44:aa:f4:11:09:57:c6:32:84:df:b4:9f:a8:
                    d6:8c:56:2b:92:3c:48:db:88:98:09:e1:6e:f6:9f:
                    0d:1d:ef:11:00:79:62:9e:11:c9:e3:61:1b:34:1f:
                    32:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D5:0A:61:E7:E3:DF:7C:BC:D5:10:3A:29:0B:FF:58:6F:8D:A0:39
            X509v3 Authority Key Identifier:
                keyid:F2:BC:11:E6:EC:D3:A0:AF:3E:E4:39:4D:CB:B7:B3:EF:90:18:7D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rwR5uzToK8-5DlNy7ez75AYfTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0d2344-99d7-4313-b1b6-7c4247ae5c1b/1/8rwR5uzToK8-5DlNy7ez75AYfTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:c7:9a:4a:3c:a4:a7:b8:4c:6e:54:8d:67:de:47:71:ee:6b:
         63:69:41:aa:ea:51:f3:a7:12:05:21:f0:08:6b:c8:59:48:c5:
         b3:ca:8d:aa:5c:95:95:56:b5:7e:52:fa:00:2c:72:8f:d8:0b:
         7b:95:5a:84:16:ea:18:01:a0:2f:16:21:92:c8:71:b5:db:ca:
         fc:35:2d:30:97:c2:18:10:e2:64:c2:86:4c:60:58:09:80:ff:
         15:06:26:15:01:72:d5:76:7e:01:65:f7:28:57:40:98:fe:4b:
         5f:6e:8c:a5:26:ac:35:b4:d2:66:c9:56:15:11:0b:4d:b6:77:
         18:38:99:56:ff:3f:fb:35:4f:22:f7:65:b8:5f:8f:d2:4e:fc:
         6f:72:73:23:11:14:16:a6:91:d2:4a:56:e4:4c:9e:3f:30:aa:
         eb:6b:23:02:0f:fa:e1:3f:a9:58:90:fe:44:35:8f:97:17:d2:
         fa:97:ac:ae:e7:d5:7e:b7:25:fc:97:24:8f:2e:12:0b:b2:e0:
         71:92:d2:b2:48:00:e3:48:eb:a0:4c:66:23:4c:98:2d:4c:63:
         36:d2:04:cc:a3:ac:38:f8:b0:9a:73:cc:e5:3b:d0:38:8c:8b:
         4b:20:8a:48:90:94:c6:c9:b5:b3:8e:e4:6e:7d:0e:b9:28:db:
         7b:2f:c9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:43 2026 by rpki-client