Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          8ugk81y3j3ly7BmZ1aIftN9WLkiZW6pqDyY8DA0awHw=
Subject key identifier:   C0:3B:3D:7D:92:93:4F:54:AD:37:4C:7B:BC:34:DC:B4:8C:34:BE:75
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       019FAA196DF62E973752D83086FD5ACA07A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          1185
Signing time:             Tue 28 Jul 2026 19:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:20 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: KB+WpVSLCCcYkE46peokOr1jrgPyXBIRlGsRTSPEuNk=)
                          2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:6d:f6:2e:97:37:52:d8:30:86:fd:5a:ca:07:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Jul 28 19:00:20 2026 GMT
            Not After : Jul 29 19:00:20 2026 GMT
        Subject: CN=c03b3d7d92934f54ad374c7bbc34dcb48c34be75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:32:8c:fd:0f:5e:c1:de:08:11:46:f3:85:eb:
                    50:fa:65:5a:4e:8f:f3:32:f3:4b:29:39:05:c9:f5:
                    f9:e6:65:ce:f6:e9:57:62:7b:c5:7a:0c:1c:88:53:
                    76:fc:15:bb:38:7f:18:3b:31:1c:10:25:59:5d:ef:
                    91:dc:c6:9a:a9:06:57:2d:70:7d:83:68:95:a7:ea:
                    5a:9c:7a:40:32:ff:eb:cb:6a:33:8a:8d:a3:0c:b1:
                    a4:70:38:d2:f7:16:8d:d9:00:46:07:9b:c2:55:34:
                    f0:f6:29:ab:31:e8:f1:41:8c:c2:3c:15:78:e1:43:
                    9c:ed:da:ed:00:a0:fc:74:e7:86:7b:d6:86:64:2e:
                    64:c5:2b:c1:c7:63:4c:86:ae:a0:e6:74:39:57:4e:
                    3a:d9:63:8e:85:0c:20:34:57:92:de:da:ae:71:db:
                    7b:a0:4e:bb:c4:c2:bd:7a:92:6d:87:19:00:26:22:
                    f1:e6:de:a9:be:15:00:84:c7:a6:58:f9:ef:ae:14:
                    1a:3a:c0:cc:38:bc:65:93:0b:81:be:9d:c4:23:43:
                    24:c3:7a:87:ca:0e:e9:67:19:48:b8:18:41:56:a2:
                    fa:e8:c5:6f:76:db:34:01:a2:9a:91:c9:75:53:cc:
                    5e:8e:06:94:b4:48:bb:56:0b:df:91:fc:f2:e0:4f:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:3D:7D:92:93:4F:54:AD:37:4C:7B:BC:34:DC:B4:8C:34:BE:75
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8e:f6:5d:82:bb:5f:69:f6:fd:37:14:b2:d7:56:ca:27:5c:
         32:2b:a1:95:a5:0f:d2:39:dd:fc:d5:8a:f9:a6:dd:2e:b2:27:
         c2:5d:aa:9f:cb:fd:07:ae:34:65:95:4f:01:82:bd:f2:0b:2a:
         d4:2e:ef:77:c8:41:5c:84:2b:9c:b1:10:91:ac:8c:04:b0:65:
         33:56:25:ef:58:28:84:f9:a0:89:38:3f:e1:e8:b7:21:18:03:
         c8:ae:9c:e0:eb:05:1a:bd:79:36:3f:70:b1:08:24:d5:eb:9f:
         57:8f:a8:3b:04:0d:bf:36:fc:a6:3d:bf:87:f8:db:21:9c:94:
         56:c6:f0:e6:85:15:f0:d5:8b:8a:74:c5:88:dc:41:9a:d9:19:
         7b:e2:94:35:e4:8b:42:e6:23:80:1b:bf:ae:f6:b0:72:39:0b:
         60:8b:0e:db:d1:77:a8:77:36:7d:cd:97:87:6e:51:99:3f:6c:
         66:ed:aa:47:9e:6f:f9:49:4d:54:c2:79:e5:15:43:02:1f:bf:
         ad:73:52:bd:01:70:bb:4a:c7:a6:1c:61:e3:5b:29:3d:97:32:
         19:f9:f0:cd:23:b4:a9:79:01:16:33:9d:dd:2a:7a:3c:d5:38:
         45:89:1d:af:0b:d6:2d:45:02:a1:66:e0:43:c4:ca:84:06:3b:
         a0:83:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:32 2026 by rpki-client