Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
File:                     8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft (raw, json)
Hash identifier:          Uvfxbb+2B9lCc8iCWeCbeOsU1jO/vvJxH6ur6vWILaE=
Subject key identifier:   3F:94:AB:75:31:92:EA:6D:82:26:69:83:27:E6:41:A3:4F:26:B3:3E
Authority key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Certificate issuer:       /CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Certificate serial:       019EC1B6C418FB01DA39E11F0713CB8C146B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
Manifest number:          08DB
Signing time:             Sat 13 Jun 2026 16:00:40 +0000
Manifest this update:     Sat 13 Jun 2026 16:00:40 +0000
Manifest next update:     Sun 14 Jun 2026 16:00:40 +0000
Files and hashes:         1: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl (hash: Nw9k2nb3KSA8YGebl2Nb+MRogqNv6DblX0Zooi6BHdw=)
                          2: RG6yqiKkRhz8lYMy2eaNN51T1FA.roa (hash: lUsy6MxM/FnhLx9vJglsPl+zWcJ7Y2MIMoaSU4GgA5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b6:c4:18:fb:01:da:39:e1:1f:07:13:cb:8c:14:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
        Validity
            Not Before: Jun 13 16:00:40 2026 GMT
            Not After : Jun 14 16:00:40 2026 GMT
        Subject: CN=3f94ab753192ea6d8226698327e641a34f26b33e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bf:46:13:d4:f0:e5:1e:98:b5:a3:e9:ed:e6:
                    75:4e:e6:65:3f:4d:5f:50:ba:ec:24:9b:41:c7:9e:
                    bb:37:90:8e:e3:9f:86:e6:8b:f5:39:fb:8e:fb:44:
                    2b:f2:08:46:2f:64:2c:00:07:48:f0:d0:57:3f:ad:
                    25:f5:fe:10:a7:fe:a1:dc:74:1f:a9:8e:1c:d5:05:
                    80:41:dc:b4:cd:00:8b:7e:57:fa:69:60:71:6b:4f:
                    38:35:f2:ed:b1:a3:18:69:96:b6:3d:f5:59:e6:d4:
                    a6:38:ba:e1:53:25:77:4a:5d:bd:02:f6:bb:c9:ce:
                    81:2a:a4:ea:90:d2:e3:1b:d9:ba:a5:f3:1a:b6:1e:
                    58:8b:4d:0d:66:79:73:6a:33:27:6a:17:15:9e:0f:
                    9c:67:80:c1:fb:e2:f5:09:f7:32:ac:a4:04:a1:c7:
                    d5:7a:46:1e:ad:96:49:a7:a8:c5:81:01:74:1d:a5:
                    49:c4:7d:19:ed:4f:3a:19:fc:2d:a1:ff:86:ac:80:
                    02:d5:12:c8:7d:68:64:ca:d7:52:5b:ac:07:b6:9c:
                    ad:e4:aa:4f:6a:95:bf:f5:f9:7f:5c:cc:1c:c9:b3:
                    86:25:f6:c0:84:55:a4:b9:39:64:3d:34:b7:18:79:
                    29:fc:98:21:c3:fd:66:ee:62:88:95:80:c7:f1:d2:
                    38:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:94:AB:75:31:92:EA:6D:82:26:69:83:27:E6:41:A3:4F:26:B3:3E
            X509v3 Authority Key Identifier:
                keyid:F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c0:a5:b5:3a:44:41:4d:70:96:35:02:0e:f3:90:3c:c3:0f:
         17:45:20:70:9b:c5:4f:26:15:e9:f8:41:dd:f8:25:b7:eb:61:
         d4:79:bf:fe:c7:5e:4d:8d:f7:1a:27:e5:57:97:14:26:4a:f6:
         5d:54:d1:7e:29:85:8e:0d:8f:b0:29:6e:93:6e:1e:a8:eb:64:
         0b:95:d3:ff:43:ac:14:7b:3a:1b:6a:45:e1:d8:6e:46:73:4f:
         9f:0d:19:49:61:76:3e:64:ad:01:da:fa:1a:05:6c:67:ef:4e:
         38:32:f6:82:6c:3d:e1:fd:50:f2:ac:dd:75:2c:de:ed:01:c5:
         d8:96:07:75:3c:70:61:6e:9e:54:35:bf:91:0f:07:51:ac:67:
         eb:12:2d:92:22:fe:29:b8:8e:65:85:f4:82:3d:8d:38:a3:77:
         d5:64:b2:cb:7a:9e:51:64:80:8e:ae:ba:08:fd:7e:aa:84:95:
         dc:b0:08:f5:64:ff:9f:fc:86:d9:9c:fa:b7:58:4f:43:3b:a5:
         32:0e:8a:5f:89:a8:4c:2a:b7:e0:1a:f0:46:80:73:f4:52:c2:
         61:ae:f7:57:e2:ca:18:84:52:81:12:98:f7:c2:64:68:64:50:
         cd:05:68:7c:90:30:2a:0c:d1:f9:af:b8:50:01:c9:cf:df:81:
         43:c7:d6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:32:59 2026 by rpki-client