Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File:                     MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier:          cCkHGdPoK8G9wLuWNmyHGXsDRfHHbnHrPKI3UbRuuE0=
Subject key identifier:   D3:B8:70:85:CB:C9:22:29:50:3A:31:85:00:46:0A:52:F9:EB:FC:76
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer:       /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial:       019FAC75DA5CFAF7E0770D13AE9D4A785761
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number:          0B4A
Signing time:             Wed 29 Jul 2026 06:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:32 +0000
Files and hashes:         1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: MFQyECz36btWQ4hETj2+U4E/VvylElFdOUE/rw28dr4=)
                          2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=)
                          3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=)
                          4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:da:5c:fa:f7:e0:77:0d:13:ae:9d:4a:78:57:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
        Validity
            Not Before: Jul 29 06:00:32 2026 GMT
            Not After : Jul 30 06:00:32 2026 GMT
        Subject: CN=d3b87085cbc92229503a318500460a52f9ebfc76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:80:6c:10:92:a0:4e:d2:05:37:fd:2e:c6:a8:
                    fa:ce:97:1b:2f:19:f4:19:4c:d4:d8:5d:05:b4:f5:
                    69:97:1b:b5:36:12:e5:46:f6:c5:0c:04:9d:b7:52:
                    f1:9c:08:44:6b:44:42:9f:9b:1f:56:5e:63:7e:c8:
                    bf:df:83:21:d6:d2:fb:97:50:ea:07:9e:21:f2:6f:
                    dd:16:af:22:ae:21:a5:4f:f6:3c:c9:10:20:18:59:
                    02:da:11:b9:3d:43:1c:ec:eb:51:e3:60:9c:d3:c0:
                    be:66:cf:15:ed:6a:e2:bd:9c:a2:86:87:df:0f:b2:
                    70:f8:2c:97:f2:f3:16:a7:ba:72:87:44:ff:47:3d:
                    cf:d4:30:df:ab:cd:ae:50:9d:ae:b2:31:48:53:c5:
                    d2:79:7a:ec:e9:56:b6:a4:71:06:81:27:46:b0:96:
                    fa:32:f2:ef:5d:f1:8c:65:b1:bf:9a:82:eb:26:83:
                    3e:ae:ce:28:1a:9e:96:98:9a:5a:2e:27:5c:a1:24:
                    cb:b2:f3:d9:ab:3a:30:32:da:24:fe:ac:e9:90:08:
                    23:36:58:f3:29:0a:13:ef:fa:ee:6c:ef:99:08:ea:
                    da:51:be:61:a2:e3:22:4a:b6:19:08:3b:3a:5d:e4:
                    24:50:94:43:30:1f:e0:22:15:9a:02:f8:dc:51:cd:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:70:85:CB:C9:22:29:50:3A:31:85:00:46:0A:52:F9:EB:FC:76
            X509v3 Authority Key Identifier:
                keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c5:4f:f5:af:46:e1:1a:29:9f:20:23:0e:16:c9:45:7c:7f:
         60:6e:e7:7d:01:18:11:a1:8b:35:16:aa:20:83:de:3f:bd:49:
         82:be:ac:2d:45:18:cb:51:50:18:8f:66:6f:c9:68:14:52:f9:
         c2:21:cc:b9:ca:6f:ab:f3:50:33:19:ad:ab:3f:b7:00:85:5b:
         17:9e:ac:3e:0a:31:9e:f9:49:73:d5:fd:2f:d9:1e:b8:dc:aa:
         85:09:62:d1:2e:e8:c1:11:e3:4d:a3:4a:0f:1a:04:2d:01:9f:
         3d:77:b0:d5:1d:35:85:c3:c8:8e:f8:78:fb:fa:f3:38:01:65:
         ff:25:65:99:a6:cd:e3:44:c4:03:0e:0e:5c:1f:47:a5:30:22:
         a8:68:5a:ef:2e:0e:1b:11:ed:b9:31:1b:a8:fe:b3:28:d0:99:
         29:60:f4:8c:67:42:bd:13:2c:c2:ac:d8:72:8a:e2:d2:da:d9:
         9b:0d:22:76:9c:16:b4:3e:73:d6:39:53:56:52:8e:3f:a3:fd:
         10:ac:5d:e6:28:bc:27:1b:c0:43:40:f0:bd:6f:11:56:99:b6:
         ff:17:c1:48:8b:50:a3:14:c1:14:3e:78:79:ac:f9:12:4c:43:
         95:2c:d9:69:0f:9c:be:1c:d4:87:9e:8d:70:0f:1f:f7:7e:bf:
         47:d4:0c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sddpc+vfgdw0Trp1KeFdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh
NWEwZmEwHhcNMjYwNzI5MDYwMDMyWhcNMjYwNzMwMDYwMDMyWjAzMTEwLwYDVQQD
EyhkM2I4NzA4NWNiYzkyMjI5NTAzYTMxODUwMDQ2MGE1MmY5ZWJmYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooBsEJKgTtIFN/0uxqj6zpcbLxn0
GUzU2F0FtPVplxu1NhLlRvbFDASdt1LxnAhEa0RCn5sfVl5jfsi/34Mh1tL7l1Dq
B54h8m/dFq8iriGlT/Y8yRAgGFkC2hG5PUMc7OtR42Cc08C+Zs8V7WrivZyihoff
D7Jw+CyX8vMWp7pyh0T/Rz3P1DDfq82uUJ2usjFIU8XSeXrs6Va2pHEGgSdGsJb6
MvLvXfGMZbG/moLrJoM+rs4oGp6WmJpaLidcoSTLsvPZqzowMtok/qzpkAgjNljz
KQoT7/rubO+ZCOraUb5houMiSrYZCDs6XeQkUJRDMB/gIhWaAvjcUc3w/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO4cIXLySIpUDoxhQBGClL56/x2MB8GA1UdIwQY
MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct
M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0
LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOsVP9a9G
4RopnyAjDhbJRXx/YG7nfQEYEaGLNRaqIIPeP71Jgr6sLUUYy1FQGI9mb8loFFL5
wiHMucpvq/NQMxmtqz+3AIVbF56sPgoxnvlJc9X9L9keuNyqhQli0S7owRHjTaNK
DxoELQGfPXew1R01hcPIjvh4+/rzOAFl/yVlmabN40TEAw4OXB9HpTAiqGha7y4O
GxHtuTEbqP6zKNCZKWD0jGdCvRMswqzYcori0trZmw0idpwWtD5z1jlTVlKOP6P9
EKxd5ii8JxvAQ0DwvW8RVpm2/xfBSItQoxTBFD54eaz5EkxDlSzZaQ+cvhzUh56N
cA8f936/R9QMPg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:49 2026 by rpki-client