Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File:                     B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier:          PSaIa65FAmUPzMm6VHiVOcpzez80q2M9RqVbimolX5U=
Subject key identifier:   D3:F9:D9:69:58:78:C5:5D:11:17:A9:98:EA:08:BF:A0:1D:20:79:9E
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer:       /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial:       019FAD5214A0ECE4DA88A126222D5F565167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number:          107C
Signing time:             Wed 29 Jul 2026 10:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 10:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 10:01:05 +0000
Files and hashes:         1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
                          2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: QL9kzLF5yP0oPjgaXH4K61uChWoJ2it6tD0bEz0uS+k=)
                          3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:52:14:a0:ec:e4:da:88:a1:26:22:2d:5f:56:51:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
        Validity
            Not Before: Jul 29 10:01:05 2026 GMT
            Not After : Jul 30 10:01:05 2026 GMT
        Subject: CN=d3f9d9695878c55d1117a998ea08bfa01d20799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:aa:01:98:ba:6d:4d:1a:a2:37:1f:1e:45:fc:
                    6e:a8:33:4d:a8:14:c8:a9:db:2c:b0:9b:b2:d2:46:
                    b8:05:55:df:e5:53:b5:59:c3:37:69:85:7a:96:52:
                    01:b2:a7:fa:12:09:e4:51:9e:ca:ac:e0:77:14:e7:
                    f7:40:e4:39:22:ad:7c:e4:96:de:92:2b:6e:7d:91:
                    8a:06:70:f1:38:2b:ce:d9:c7:9b:cd:6b:0c:79:67:
                    dc:d8:b6:db:7c:14:95:a2:2e:51:85:9e:35:6a:38:
                    3f:c3:de:07:f3:1e:3a:3c:14:f7:81:b0:e7:80:d7:
                    d9:d0:a6:cf:26:96:23:8f:3d:ab:90:c6:28:b6:83:
                    c0:8f:c7:e4:5a:8b:e1:9c:70:79:ad:b5:d5:3f:a0:
                    c8:db:03:4c:30:ac:78:52:83:c3:8f:72:af:ad:5f:
                    be:93:24:a8:e5:c6:b3:f7:7d:9c:e0:80:40:61:a2:
                    9a:ae:81:dd:18:30:11:3d:49:5b:d2:0f:64:45:f7:
                    0a:63:7a:73:da:58:ed:87:8f:cc:6a:fe:88:c1:ac:
                    cb:3c:39:65:4c:4d:db:65:34:57:36:1c:10:ef:f1:
                    e4:07:fb:5c:09:54:3d:d4:e3:f7:c0:5a:77:89:6b:
                    4d:88:91:ef:85:3b:d1:aa:e7:50:de:42:74:25:75:
                    b5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F9:D9:69:58:78:C5:5D:11:17:A9:98:EA:08:BF:A0:1D:20:79:9E
            X509v3 Authority Key Identifier:
                keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:0a:7f:69:ba:85:e5:c6:0a:ca:8e:f9:94:16:5f:c7:f1:
         53:af:9d:28:1e:76:c0:79:63:d3:99:51:99:fb:b1:bc:78:37:
         e3:80:01:8b:67:c3:eb:7c:45:2f:14:d0:84:de:04:ad:8f:43:
         1d:b9:31:d4:d6:0e:22:44:eb:13:3c:14:67:07:9a:b7:ff:ae:
         e2:ac:e0:45:bd:9f:56:44:66:da:d9:6c:4a:6c:9a:5c:67:0a:
         d6:c2:2a:e0:19:11:19:a5:cc:5a:ea:1e:c0:cb:31:e9:a5:ff:
         b2:4b:fa:bd:2c:e8:cb:60:da:c5:60:63:21:d3:cf:34:8b:2d:
         c8:66:dc:28:00:46:bd:76:3c:fc:95:c7:7f:cc:a2:68:6b:e7:
         b5:c0:e6:7f:37:29:d2:34:6d:95:52:7c:af:b9:ef:28:c7:1a:
         41:fa:5f:1c:18:11:7b:2c:3c:e0:c5:e2:66:66:86:46:d4:be:
         26:c8:7c:c1:90:e2:0e:ca:ba:fe:22:26:35:1f:f7:84:79:29:
         ec:da:bc:21:38:4a:fc:a7:bb:39:5b:1a:4d:64:bb:af:ae:b6:
         42:dc:4a:1e:41:18:b7:3f:f8:da:da:56:80:5f:47:94:3b:47:
         47:f0:bc:22:57:51:a2:c4:e9:5f:19:4a:28:6b:f0:60:3b:84:
         b3:2d:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:15 2026 by rpki-client