Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
File:                     x_o8rcpOExoPvhueQNujg4M89Io.mft (raw, json)
Hash identifier:          Vdr/nUvhjQyLs3NG+p6aqFlqbBNNtvQne5nNZZpn0DI=
Subject key identifier:   6B:50:91:DD:6B:C8:15:E3:28:1D:CF:FA:98:07:60:AE:C8:23:97:C1
Authority key identifier: C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A
Certificate issuer:       /CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
Certificate serial:       019FACE4A26A7508F9657148F3B934F94244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
Manifest number:          199E
Signing time:             Wed 29 Jul 2026 08:01:32 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:32 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:32 +0000
Files and hashes:         1: 8nT5rb3UrAJDsICwRbRykN-JOS0.roa (hash: DT7HhfSPZrLtcCVQk42JiiDF/rCVVpx9BUd5IvtgTOU=)
                          2: x_o8rcpOExoPvhueQNujg4M89Io.crl (hash: b2cLqRlvaMb0PNaQq6fgZX5b+NIEsEhQBHJpOFPKelw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:a2:6a:75:08:f9:65:71:48:f3:b9:34:f9:42:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7fa3cadca4e131a0fbe1b9e40dba383833cf48a
        Validity
            Not Before: Jul 29 08:01:32 2026 GMT
            Not After : Jul 30 08:01:32 2026 GMT
        Subject: CN=6b5091dd6bc815e3281dcffa980760aec82397c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:86:12:d3:1f:a6:94:fb:d4:fe:57:55:95:5c:
                    89:a0:f3:c8:63:91:68:1c:24:ae:ab:f5:74:2f:95:
                    27:23:04:28:5e:81:ac:a3:6b:96:d1:f4:31:74:3b:
                    a1:64:00:fb:3c:3b:81:17:20:02:63:fa:3c:76:10:
                    22:72:17:2f:99:0e:21:b9:d9:2a:df:c6:e7:18:28:
                    f5:53:ee:46:2e:4c:f0:47:32:84:a8:56:37:fc:03:
                    da:ed:90:62:b5:7b:6b:1c:e3:cd:bd:3e:ef:ab:ca:
                    e3:9b:17:7c:62:db:88:0b:3b:fb:f5:5a:66:44:e0:
                    bb:09:91:a1:73:1a:13:c6:de:8e:7a:61:28:df:0f:
                    57:37:70:d8:74:f3:0e:c8:78:44:17:79:d8:26:7c:
                    f0:17:3f:81:32:0c:8d:09:19:3b:79:92:6a:70:ee:
                    b0:8f:e1:75:37:04:a8:6c:1b:2c:fc:f2:51:1c:9a:
                    96:f8:89:ce:9b:c9:0f:66:d5:57:1d:85:05:fe:ef:
                    3f:67:cf:ec:9b:55:b4:49:18:e5:42:a8:f1:b0:1c:
                    30:b5:94:b7:c2:c3:70:3b:d3:24:bc:76:75:f2:7e:
                    f6:8d:64:cd:a3:2e:41:bd:b6:0f:08:6b:6f:40:77:
                    eb:96:d0:3f:23:09:36:a7:80:2c:50:07:b7:d7:d9:
                    56:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:50:91:DD:6B:C8:15:E3:28:1D:CF:FA:98:07:60:AE:C8:23:97:C1
            X509v3 Authority Key Identifier:
                keyid:C7:FA:3C:AD:CA:4E:13:1A:0F:BE:1B:9E:40:DB:A3:83:83:3C:F4:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_o8rcpOExoPvhueQNujg4M89Io.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b72592-5961-4c5e-a20f-f1d456869f97/1/x_o8rcpOExoPvhueQNujg4M89Io.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:28:2f:3d:db:51:f5:b0:3c:30:0e:47:f1:c9:25:a3:2c:c6:
         ce:c1:9f:6f:b0:35:cf:0f:98:3d:8f:c6:1e:8f:92:92:92:5b:
         18:6e:70:82:cd:70:51:e5:33:28:8f:3a:36:a8:1b:7f:f1:4f:
         66:03:e9:2f:1a:a8:6c:84:0f:e0:05:cc:68:92:ef:2a:50:b4:
         13:50:2b:77:88:c1:61:11:0a:d7:c1:e6:9f:99:97:a9:1f:c5:
         bc:74:8f:e5:2b:89:1c:99:db:5b:a4:35:da:34:6f:34:1a:55:
         f8:b1:79:50:2f:a0:4a:14:b2:e4:32:56:18:f3:90:36:81:09:
         0c:2b:90:4e:9d:69:1a:4a:d3:2b:eb:2b:19:dd:24:7b:4f:20:
         12:76:35:40:ac:43:d8:8f:c7:7d:6a:ee:29:45:19:03:af:d2:
         4a:cd:a7:40:de:78:04:ef:8b:ec:a1:a8:6c:50:d2:d7:76:47:
         8a:ed:9e:c6:2a:fd:d2:35:63:35:c8:0e:1e:a4:31:90:d1:a0:
         0a:08:b7:fa:36:69:7f:a1:78:bb:f9:9a:37:a2:b4:b6:b2:0c:
         6b:6d:30:17:8e:1c:20:6e:bf:69:6b:e2:d0:b1:b9:f7:53:e0:
         06:27:83:21:63:b2:07:eb:6c:43:4e:ae:6e:9d:5c:24:a2:06:
         93:96:0c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:38:45 2026 by rpki-client