Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File:                     8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier:          ukhQbwr+leYRtW0nvC4G5E76BmrlWkCX0sUOMQzz/LE=
Subject key identifier:   DA:08:B0:8A:ED:E1:FC:3D:BD:03:BF:45:4C:D5:AD:4A:14:AA:36:D6
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer:       /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial:       01A0FD59A5AEECC1912ADE265ECE82198395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number:          06F3
Signing time:             Fri 02 Oct 2026 16:01:45 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:45 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:45 +0000
Files and hashes:         1: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: 802TVLFMOd2Fkm0F5FnbpLzMvP9r/3UtiPXtPhgT6ug=)
                          2: EkaMEHFXzVXgvijJ-hXSC2h-u7I.roa (hash: JZppuXOA54xhCxrPeBXaCqhSYeNgkIyj6hJkt7FdiSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:a5:ae:ec:c1:91:2a:de:26:5e:ce:82:19:83:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
        Validity
            Not Before: Oct  2 16:01:45 2026 GMT
            Not After : Oct  3 16:01:45 2026 GMT
        Subject: CN=da08b08aede1fc3dbd03bf454cd5ad4a14aa36d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1e:15:bf:5d:6a:12:02:d1:7f:84:f2:d6:fc:
                    35:c1:9e:dd:2b:d1:9c:c8:05:e3:70:db:5f:2c:a9:
                    b0:04:80:fe:49:e0:6c:7a:f9:af:3b:46:50:cd:63:
                    47:7f:6e:6f:8c:3f:dd:84:7f:69:47:37:01:e7:3e:
                    24:a4:1d:0d:da:fb:01:84:e8:cf:89:21:85:09:55:
                    c2:9c:38:4c:e0:a9:64:1c:e2:b4:96:9b:42:b5:ca:
                    aa:32:c1:f2:84:82:35:ca:07:f6:62:60:37:98:01:
                    26:63:98:8c:a3:ae:c2:c4:82:66:4b:f0:ca:8a:06:
                    22:4b:b0:c0:fa:22:71:ac:ae:bc:b0:53:93:20:6e:
                    bf:e3:fd:a3:09:51:d1:b2:9b:2c:45:da:81:f9:c6:
                    af:97:5d:f8:70:fd:e5:72:df:37:f4:eb:06:28:d9:
                    9d:17:7e:d0:e4:57:fb:e7:19:a5:59:a1:90:26:2d:
                    50:c4:f7:eb:d6:71:bf:e4:a1:2c:37:8e:4a:3b:81:
                    b2:ca:d2:21:12:56:2b:76:15:77:eb:f5:32:d0:16:
                    b4:c7:82:39:c8:93:85:5d:c9:d9:08:39:42:53:fb:
                    7b:5d:aa:b9:43:d7:39:03:23:93:83:ba:2e:85:fb:
                    86:a4:aa:c8:de:c5:41:05:45:d2:12:c9:a9:27:76:
                    17:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:B0:8A:ED:E1:FC:3D:BD:03:BF:45:4C:D5:AD:4A:14:AA:36:D6
            X509v3 Authority Key Identifier:
                keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:e2:aa:31:e8:cd:f0:7c:47:2d:c3:aa:bb:95:ad:7d:16:
         66:f4:03:c2:62:d6:ea:1f:09:04:5c:60:d0:fc:30:2b:12:dd:
         52:15:1d:19:e1:01:8b:39:12:8b:dd:0a:60:2f:ee:33:55:ed:
         51:ef:94:7a:4c:2d:89:a8:fc:7e:c1:fd:41:a1:9a:ba:61:b1:
         24:06:7f:d9:2a:78:66:c8:91:a8:39:4c:df:df:88:70:36:1a:
         c8:0f:da:12:c2:65:a0:c5:c2:d0:79:0c:43:fb:1d:ae:3d:19:
         94:1a:91:57:8a:c6:12:96:ea:61:57:2e:5e:69:96:6a:a2:82:
         b4:5f:36:40:e8:ea:d2:ad:a0:96:a2:49:91:8c:9a:a8:96:49:
         08:fb:74:23:44:f5:db:74:79:53:6d:c9:f2:dc:fc:cd:73:90:
         c9:87:9f:d2:31:0c:01:01:5f:c6:7c:b6:78:1f:92:42:4f:02:
         6d:12:90:e6:5f:c0:22:ff:fa:7b:bd:99:e6:00:1f:0b:4e:a1:
         0c:15:fb:d5:c0:9b:77:7e:cf:f6:03:1c:ab:e4:a5:06:33:23:
         d0:19:bc:3e:17:b1:09:2e:e9:55:14:54:e7:16:9d:33:1f:11:
         79:70:0f:bf:2f:44:48:b9:62:e2:4e:62:6d:6c:e6:69:44:f4:
         cb:57:d6:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD9WaWu7MGRKt4mXs6CGYOVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMWZmYjU0Y2FjN2Y1YjU3Njg1NjllNDE5N2Q0MWQ3NDQ2
YmYxZmMwHhcNMjYxMDAyMTYwMTQ1WhcNMjYxMDAzMTYwMTQ1WjAzMTEwLwYDVQQD
EyhkYTA4YjA4YWVkZTFmYzNkYmQwM2JmNDU0Y2Q1YWQ0YTE0YWEzNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh4Vv11qEgLRf4Ty1vw1wZ7dK9Gc
yAXjcNtfLKmwBID+SeBsevmvO0ZQzWNHf25vjD/dhH9pRzcB5z4kpB0N2vsBhOjP
iSGFCVXCnDhM4KlkHOK0lptCtcqqMsHyhII1ygf2YmA3mAEmY5iMo67CxIJmS/DK
igYiS7DA+iJxrK68sFOTIG6/4/2jCVHRspssRdqB+cavl134cP3lct839OsGKNmd
F37Q5Ff75xmlWaGQJi1QxPfr1nG/5KEsN45KO4GyytIhElYrdhV36/Uy0Ba0x4I5
yJOFXcnZCDlCU/t7Xaq5Q9c5AyOTg7ouhfuGpKrI3sVBBUXSEsmpJ3YXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNoIsIrt4fw9vQO/RUzVrUoUqjbWMB8GA1UdIwQY
MBaAFPMf+1TKx/W1doVp5Bl9QddEa/H8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEt
YzAzODRmZTFiMDA3LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS82YzM3MDItMTE3OC00Y2JkLThlYmEtYzAzODRmZTFiMDA3
LzEvOHhfN1ZNckg5YlYyaFdua0dYMUIxMFJyOGZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnLiqjHo
zfB8Ry3DqruVrX0WZvQDwmLW6h8JBFxg0PwwKxLdUhUdGeEBizkSi90KYC/uM1Xt
Ue+Uekwtiaj8fsH9QaGaumGxJAZ/2Sp4ZsiRqDlM39+IcDYayA/aEsJloMXC0HkM
Q/sdrj0ZlBqRV4rGEpbqYVcuXmmWaqKCtF82QOjq0q2glqJJkYyaqJZJCPt0I0T1
23R5U23J8tz8zXOQyYef0jEMAQFfxny2eB+SQk8CbRKQ5l/AIv/6e72Z5gAfC06h
DBX71cCbd37P9gMcq+SlBjMj0Bm8PhexCS7pVRRU5xadMx8ReXAPvy9ESLli4k5i
bWzmaUT0y1fWzQ==
-----END CERTIFICATE-----
Generated at Sat Oct 3 03:32:28 2026 by rpki-client