Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
File:                     8VzG8-5-0llTHW0Izp4JNztxYGI.mft (raw, json)
Hash identifier:          da1zjfebRaueUjGj4+cS0bBygxo9beKazB++uTjL2Ro=
Subject key identifier:   28:C1:F1:34:DE:E0:76:D3:08:81:64:96:57:40:DC:72:0F:84:58:DB
Authority key identifier: F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62
Certificate issuer:       /CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
Certificate serial:       019EBF23D86B98405FFA8EC76B8A4EFA8CC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
Manifest number:          06F6
Signing time:             Sat 13 Jun 2026 04:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:57 +0000
Files and hashes:         1: 8VzG8-5-0llTHW0Izp4JNztxYGI.crl (hash: t1nJp0OpVbvx1aaG6JxxRbYUSZF3troi8PQFM1dwawU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:d8:6b:98:40:5f:fa:8e:c7:6b:8a:4e:fa:8c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15cc6f3ee7ed259531d6d08ce9e09373b716062
        Validity
            Not Before: Jun 13 04:00:57 2026 GMT
            Not After : Jun 14 04:00:57 2026 GMT
        Subject: CN=28c1f134dee076d3088164965740dc720f8458db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3b:8e:58:e7:8b:23:91:8e:d8:b8:4f:57:3c:
                    f5:52:8a:ff:08:17:01:bd:0b:7e:1a:b2:a8:63:57:
                    16:77:8b:dd:1b:4a:0b:c3:e4:0d:16:e4:94:c6:f7:
                    3e:35:d1:d4:a2:89:90:b5:0e:0e:23:f0:41:ec:a9:
                    8b:a8:8d:ff:be:1c:20:73:6b:04:17:5f:2e:f3:53:
                    30:4a:bc:36:4c:40:84:10:73:50:93:12:8c:7d:51:
                    a5:fc:90:5e:4e:29:31:da:c6:4a:2b:8b:ee:64:6e:
                    5b:7f:b7:e6:d8:16:2a:76:de:8e:18:a2:d7:a7:fa:
                    5c:68:29:d6:51:a2:71:0b:50:1f:85:d5:09:d7:e5:
                    03:27:fb:84:18:8b:57:ad:08:79:28:f9:83:4f:68:
                    31:cc:24:f6:65:7c:7d:2f:d8:ef:2b:8f:8f:bf:74:
                    5b:c3:d7:2c:16:27:10:bd:16:81:4d:d9:92:16:9d:
                    58:35:22:7a:58:c0:78:72:b0:ab:41:43:05:2b:cc:
                    b4:20:82:6e:ee:8d:03:31:b9:aa:43:03:c9:65:ad:
                    60:60:46:5d:46:23:6a:4b:8d:0e:59:46:51:fd:52:
                    74:49:74:bd:46:54:cf:53:8a:22:97:ac:a9:d4:3d:
                    13:e7:5c:bc:2d:e8:a0:91:8f:07:a6:10:1d:72:3d:
                    b8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C1:F1:34:DE:E0:76:D3:08:81:64:96:57:40:DC:72:0F:84:58:DB
            X509v3 Authority Key Identifier:
                keyid:F1:5C:C6:F3:EE:7E:D2:59:53:1D:6D:08:CE:9E:09:37:3B:71:60:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VzG8-5-0llTHW0Izp4JNztxYGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/87e9b7-ead4-4b5b-bc88-691ee41a6014/1/8VzG8-5-0llTHW0Izp4JNztxYGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:28:ac:24:c2:a3:71:d8:b3:74:ee:c1:3c:10:58:cd:ef:09:
         8f:f4:83:d7:8c:50:e4:a7:c2:70:d0:fa:9d:86:7c:09:02:7d:
         51:94:6b:9f:df:69:43:9e:81:c1:1f:e7:87:46:75:e7:14:17:
         dd:69:3e:48:64:b4:70:da:c6:ca:d5:8b:83:3d:1a:3b:2d:76:
         10:7d:b3:4b:d7:e9:cc:ee:14:f6:98:8b:d6:eb:e7:cf:88:11:
         c4:f2:4d:44:d7:f6:c2:7a:3e:64:52:82:aa:cd:25:39:4c:36:
         f1:2f:a4:13:bd:e1:1c:13:d8:1c:b3:84:6f:ff:5f:9e:84:6c:
         0a:2a:99:0e:40:b4:21:89:11:f9:82:bb:b1:39:dc:cb:fe:0a:
         5e:33:36:04:a0:1a:65:01:31:c8:7c:6a:b8:ee:7f:a6:ff:3c:
         9a:63:7d:71:de:c9:97:e8:d9:00:fa:5f:ee:a9:b7:d7:83:c4:
         2c:aa:97:a5:a8:2a:ad:be:cc:c3:f9:c6:06:4f:81:33:dd:3f:
         40:21:89:78:ae:b8:76:c6:1b:94:72:65:63:dd:81:bc:d7:74:
         45:2e:27:90:59:a2:24:91:31:75:7c:a0:75:4d:2f:21:72:f8:
         39:9c:45:92:84:52:38:bd:31:b5:1c:4f:2f:2a:6c:11:63:85:
         95:e8:e7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:38 2026 by rpki-client