Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
File:                     8WIlpQBFTmLx0lJTunotjB4lRCk.mft (raw, json)
Hash identifier:          rkcSVULIxH3uT7Wd1foCk3ZphgAFMQAt3CYbvJKeQVs=
Subject key identifier:   55:9B:23:E1:E2:7D:D4:A4:6B:AF:72:5B:B8:0C:F1:5D:61:3A:94:43
Authority key identifier: F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29
Certificate issuer:       /CN=f16225a500454e62f1d25253ba7a2d8c1e254429
Certificate serial:       019EBE10D82C09FA2A5EDAF6F5EB1F0CCBB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
Manifest number:          0AD8
Signing time:             Fri 12 Jun 2026 23:00:35 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:35 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:35 +0000
Files and hashes:         1: 8WIlpQBFTmLx0lJTunotjB4lRCk.crl (hash: 0pwm1a7+x5HTtSYLINRtyANWAzIhkp2pFE90RDO0fM8=)
                          2: VK0aXUAVFuqP7ZxYJCeKoudyERE.roa (hash: nczxVA8wDdfpaucIcO6lPht5uU64MijcaAxUaPX7bMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:10:d8:2c:09:fa:2a:5e:da:f6:f5:eb:1f:0c:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16225a500454e62f1d25253ba7a2d8c1e254429
        Validity
            Not Before: Jun 12 23:00:35 2026 GMT
            Not After : Jun 13 23:00:35 2026 GMT
        Subject: CN=559b23e1e27dd4a46baf725bb80cf15d613a9443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b6:87:0c:8b:4b:6f:25:82:75:8f:e5:95:05:
                    dd:7c:2d:2d:5f:17:e8:4d:2a:b4:86:4a:ac:6d:74:
                    f3:7e:ed:e6:2e:88:3e:9e:e9:41:b0:24:29:50:db:
                    ec:f7:8b:61:fa:fb:19:1f:72:35:d5:c3:79:b9:f2:
                    c4:18:ad:ef:49:ca:c2:e5:8e:18:f3:6a:1c:a1:86:
                    ea:9a:67:01:0c:db:ef:9e:c6:9f:34:7d:4e:4c:96:
                    d0:d2:33:99:d4:41:f4:12:8b:76:8a:a9:93:0f:34:
                    ba:ff:69:02:4c:db:76:f6:33:40:8c:d2:20:1f:51:
                    6d:0d:88:13:b2:4f:d4:33:42:bb:f7:70:e9:57:f4:
                    a1:1c:49:2c:30:1e:48:66:4c:08:63:65:c8:50:14:
                    9b:45:75:62:56:1d:fa:40:a2:73:98:80:53:f7:1c:
                    d4:d6:2b:25:f0:56:75:8f:3f:51:55:86:fa:f5:80:
                    70:14:cb:79:7f:85:cc:54:4c:b4:f0:80:fb:9d:57:
                    96:14:fc:42:c0:e7:51:84:dc:d8:8c:3b:b1:64:d4:
                    0c:eb:6a:2e:e2:6f:85:b0:07:11:5d:07:b0:f8:da:
                    b5:4e:0c:94:94:e7:60:d1:63:44:c9:d8:b1:2f:5c:
                    b1:63:6b:0a:36:a7:43:6d:fe:85:bd:ee:b9:ba:27:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:23:E1:E2:7D:D4:A4:6B:AF:72:5B:B8:0C:F1:5D:61:3A:94:43
            X509v3 Authority Key Identifier:
                keyid:F1:62:25:A5:00:45:4E:62:F1:D2:52:53:BA:7A:2D:8C:1E:25:44:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WIlpQBFTmLx0lJTunotjB4lRCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/384645-618a-45b2-9d2b-56fadc92e400/1/8WIlpQBFTmLx0lJTunotjB4lRCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:b5:17:7a:d0:b8:69:3d:64:2f:b5:18:a5:95:e0:51:c9:
         b8:b6:25:69:84:be:8b:0c:6c:0e:5a:38:03:37:18:5d:36:c0:
         00:52:d2:47:13:98:10:e2:81:e9:89:5d:b1:be:8d:c7:d0:92:
         01:7a:05:a8:df:44:2a:74:e4:7b:09:47:4e:dc:39:aa:b5:a4:
         55:99:36:1e:cf:f1:00:c7:64:dc:cc:90:27:54:99:19:93:c1:
         de:04:31:ae:b7:ae:7f:bf:48:d5:f1:4c:b7:72:c0:99:69:27:
         d6:44:8b:f6:84:d3:e5:69:75:80:ec:10:09:2e:1a:02:aa:bc:
         a3:fa:8e:54:15:d5:7f:d0:00:fb:05:09:9e:00:20:6f:03:48:
         4a:5e:68:b7:c4:d5:d3:83:0c:d9:b6:05:df:65:91:69:6a:e6:
         cb:6c:29:3c:f2:b0:b1:8f:15:48:e4:48:22:90:c2:48:ab:29:
         6d:64:58:43:50:84:a8:10:cc:bd:e7:ba:a4:85:bf:85:33:32:
         89:ef:a7:97:9f:24:b8:dd:29:c0:d8:86:b6:a1:06:61:87:b8:
         93:49:2c:bc:69:38:3b:30:c2:33:c8:ed:c4:f8:09:39:9d:b5:
         a5:68:4a:30:5e:01:82:0a:4a:a3:63:9b:31:7e:1f:8a:c3:1f:
         a8:6f:0f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:29 2026 by rpki-client