Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File:                     1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier:          6b8J3PlSmN1s5Sz9Ct8VRB6jflt8Wr4QxE6BTbqdrFA=
Subject key identifier:   69:FB:35:F1:9B:D6:1F:BA:85:75:35:D4:2C:1E:CF:22:E4:B3:1D:C5
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer:       /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial:       019FA97591B28B0E0AF82625413912EEFA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number:          09E8
Signing time:             Tue 28 Jul 2026 16:01:22 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:22 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:22 +0000
Files and hashes:         1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: 5ORI+/Pk6ZeegHpLkwkua79qrajRNk22FiZkbjPIkpg=)
                          2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:91:b2:8b:0e:0a:f8:26:25:41:39:12:ee:fa:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
        Validity
            Not Before: Jul 28 16:01:22 2026 GMT
            Not After : Jul 29 16:01:22 2026 GMT
        Subject: CN=69fb35f19bd61fba857535d42c1ecf22e4b31dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:66:8b:97:15:18:db:ff:8f:38:0a:99:8d:14:
                    72:3c:2b:40:98:12:1d:62:79:86:00:23:94:f3:0e:
                    c1:9a:91:ba:9c:f2:e9:43:57:bb:52:4e:0c:fe:99:
                    83:14:b7:bf:2a:93:c7:a4:9e:62:d9:8b:9e:06:82:
                    29:ab:96:65:ca:72:f7:d5:c8:db:d1:59:43:86:f9:
                    36:66:80:da:03:78:31:d9:c4:fb:7e:eb:7b:31:73:
                    d6:bc:7c:b5:71:e0:3c:6c:6d:6b:9f:9a:34:b9:a2:
                    93:6c:72:57:27:9b:f7:92:73:96:f5:a7:80:9d:7c:
                    c5:ec:a3:94:93:89:f6:88:b8:98:6a:00:9b:a9:2b:
                    11:f7:d0:1c:da:58:15:f7:44:02:b0:2d:f7:b8:8b:
                    8d:55:8b:27:dd:55:d7:20:8c:33:b0:b1:7f:e5:86:
                    0d:16:03:9f:7a:09:1b:18:72:91:96:73:32:cc:49:
                    97:19:b9:a6:14:4b:b0:a3:bd:e2:3c:0c:08:e8:54:
                    f2:55:28:98:c5:e6:0d:90:be:26:33:ed:29:ad:8c:
                    98:8e:71:f4:99:0e:e4:4c:cc:2a:e3:16:1b:90:cb:
                    2d:c5:f3:28:c5:1f:ed:e1:45:0a:25:29:60:df:4c:
                    5c:b8:46:33:d4:81:db:a5:95:6f:16:0f:4c:43:8a:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:35:F1:9B:D6:1F:BA:85:75:35:D4:2C:1E:CF:22:E4:B3:1D:C5
            X509v3 Authority Key Identifier:
                keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:fe:4a:ef:6d:b7:18:71:45:b1:11:a1:5e:55:7a:06:06:4a:
         eb:ed:10:4d:c3:9e:29:10:09:3f:af:20:06:c1:e2:e0:bb:4f:
         f8:dd:74:e6:16:41:81:1d:1c:ef:03:d6:0d:de:92:73:a7:d5:
         34:83:0a:7c:b7:ca:06:d2:8a:f9:18:7f:2d:3b:69:0e:3e:10:
         c7:c9:87:4a:03:10:aa:8d:f5:19:ec:64:0a:b6:fa:f2:fb:18:
         fd:b4:0e:f5:69:a5:12:97:8a:8e:11:0d:0f:a2:78:8c:3c:b1:
         22:58:ca:f2:4f:3e:9f:84:29:86:f5:c8:77:c5:55:65:f0:86:
         86:b8:ce:5b:77:d0:d2:df:17:9d:90:c3:ce:1b:65:30:bf:f3:
         3a:85:2b:58:65:07:83:f9:8d:ba:a4:ba:bd:7c:9b:cb:c0:56:
         a6:9e:10:12:b3:c7:e2:65:d6:32:d6:7e:d6:7f:ea:10:36:6c:
         b4:79:65:72:37:05:5e:08:bd:ed:2f:7e:ea:d7:e2:09:73:b9:
         c0:4b:a3:79:0b:a2:c2:36:02:14:e7:dd:e6:7e:24:92:68:2e:
         a9:71:75:f7:28:a7:8f:77:b2:a7:a2:78:70:ba:2a:de:b4:0d:
         4c:b8:56:f9:fa:10:34:b6:80:c9:b1:fd:54:1e:bc:22:a0:f2:
         3e:fd:17:30
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+pdZGyiw4K+CYlQTkS7vo0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjYwNzI4MTYwMTIyWhcNMjYwNzI5MTYwMTIyWjAzMTEwLwYDVQQD
Eyg2OWZiMzVmMTliZDYxZmJhODU3NTM1ZDQyYzFlY2YyMmU0YjMxZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmaLlxUY2/+POAqZjRRyPCtAmBId
YnmGACOU8w7BmpG6nPLpQ1e7Uk4M/pmDFLe/KpPHpJ5i2YueBoIpq5ZlynL31cjb
0VlDhvk2ZoDaA3gx2cT7fut7MXPWvHy1ceA8bG1rn5o0uaKTbHJXJ5v3knOW9aeA
nXzF7KOUk4n2iLiYagCbqSsR99Ac2lgV90QCsC33uIuNVYsn3VXXIIwzsLF/5YYN
FgOfegkbGHKRlnMyzEmXGbmmFEuwo73iPAwI6FTyVSiYxeYNkL4mM+0prYyYjnH0
mQ7kTMwq4xYbkMstxfMoxR/t4UUKJSlg30xcuEYz1IHbpZVvFg9MQ4pkpQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGn7NfGb1h+6hXU11CwezyLksx3FMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACf5K
7223GHFFsRGhXlV6BgZK6+0QTcOeKRAJP68gBsHi4LtP+N105hZBgR0c7wPWDd6S
c6fVNIMKfLfKBtKK+Rh/LTtpDj4Qx8mHSgMQqo31GexkCrb68vsY/bQO9WmlEpeK
jhEND6J4jDyxIljK8k8+n4QphvXId8VVZfCGhrjOW3fQ0t8XnZDDzhtlML/zOoUr
WGUHg/mNuqS6vXyby8BWpp4QErPH4mXWMtZ+1n/qEDZstHllcjcFXgi97S9+6tfi
CXO5wEujeQuiwjYCFOfd5n4kkmguqXF19yinj3eyp6J4cLoq3rQNTLhW+foQNLaA
ybH9VB68IqDyPv0XMA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:37 2026 by rpki-client