Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
File:                     8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft (raw, json)
Hash identifier:          2SV0IkJwEjxFnBeIa8xvshHT8Sl8PqES/Nd0DM/ASZE=
Subject key identifier:   88:2C:2F:AA:41:EF:F3:E5:8E:3F:6A:0B:0A:81:7C:EC:11:26:74:81
Authority key identifier: F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6
Certificate issuer:       /CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
Certificate serial:       019FA9AB9EA541046EE8125D4C57965B416D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
Manifest number:          024E
Signing time:             Tue 28 Jul 2026 17:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:24 +0000
Files and hashes:         1: 8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl (hash: JUkr09If1yJ1glntFYr7kMcvCClRdZWwwSlajfWlp+M=)
                          2: EPvkL8piSSQ9uedZU3p5-gYLLvs.asa (hash: iOhIXBWMwjEpPwoTvVkGY5NnEG2KU6lxnOBhex5jXAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:9e:a5:41:04:6e:e8:12:5d:4c:57:96:5b:41:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bb7eb97c8130f887dbe696b579662cf9aa06a6
        Validity
            Not Before: Jul 28 17:00:24 2026 GMT
            Not After : Jul 29 17:00:24 2026 GMT
        Subject: CN=882c2faa41eff3e58e3f6a0b0a817cec11267481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:81:a5:ce:ae:eb:1b:4c:97:db:b4:d4:de:94:
                    c8:ff:67:1c:ac:e9:8f:88:bd:f7:bf:70:f2:5d:27:
                    12:1c:4f:14:1a:a2:30:80:a4:9f:c7:13:b5:c8:0d:
                    ad:47:44:d1:9c:e7:92:56:22:f7:f7:9e:6f:84:f7:
                    2e:ec:bd:a1:79:3a:d3:18:00:db:94:5c:80:30:9a:
                    49:65:03:30:35:49:f9:70:79:17:e6:bf:76:44:4e:
                    d1:dc:70:9c:ed:bc:9b:6e:27:29:21:35:4b:d2:65:
                    57:d3:6f:63:2d:16:33:4b:ba:6c:f3:99:17:f3:f3:
                    7d:5c:e2:d0:07:eb:68:e4:6d:34:74:6e:f5:a2:40:
                    b4:85:93:15:97:84:ac:c6:f8:4a:4e:5a:9d:8f:d3:
                    81:6c:e6:84:9f:62:0b:1e:a2:44:f2:93:5c:c4:1d:
                    f6:13:14:ca:6f:4a:8a:37:23:5d:c6:87:f2:aa:fb:
                    10:d1:64:44:ca:eb:d9:99:9b:87:ea:6d:cf:b7:22:
                    50:91:32:24:8e:86:cc:45:c0:58:78:97:a4:2f:92:
                    94:af:30:c4:a9:a1:b3:78:6f:cd:ff:f7:cf:e2:9e:
                    95:4e:7f:10:0c:23:fa:4e:e9:4b:7f:26:4e:25:d2:
                    76:2f:2c:58:ac:f0:39:ce:f8:37:81:3c:98:66:b1:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2C:2F:AA:41:EF:F3:E5:8E:3F:6A:0B:0A:81:7C:EC:11:26:74:81
            X509v3 Authority Key Identifier:
                keyid:F2:BB:7E:B9:7C:81:30:F8:87:DB:E6:96:B5:79:66:2C:F9:AA:06:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rt-uXyBMPiH2-aWtXlmLPmqBqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/166ae4-09ce-4660-b69b-836c92963037/1/8rt-uXyBMPiH2-aWtXlmLPmqBqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ff:9e:bf:ec:43:d1:3f:fd:c7:2c:0f:91:5d:a2:c1:20:b3:
         b2:14:16:5f:b2:f3:8f:b9:b4:16:24:c7:c5:6d:65:f4:ca:ee:
         b1:8d:13:07:83:95:53:ad:3b:9b:76:b1:c6:fa:5f:36:bf:3a:
         27:63:1d:7c:e3:9b:de:62:63:2c:21:99:f9:ae:04:9e:78:37:
         72:b4:fe:22:7b:00:fc:ad:23:a8:87:28:fe:a6:66:24:9c:64:
         23:06:fa:fc:1d:d7:84:fb:a9:14:b0:cc:de:59:d1:73:ef:89:
         72:b2:4a:ac:a7:b4:07:dc:0d:0f:72:79:bc:f7:ca:8d:ff:6a:
         4e:18:7f:db:56:a7:24:0b:d7:98:eb:29:9c:e8:5e:ee:f5:14:
         a4:37:4b:0f:22:70:a6:2c:fc:35:fa:b2:1f:33:d6:05:f8:a2:
         00:da:e3:6f:22:4c:61:9a:8b:7a:f6:59:fd:ef:0a:12:f3:77:
         ba:d2:ad:28:e9:13:7c:d1:4b:9a:98:97:cd:90:57:ef:aa:9b:
         06:09:38:09:46:01:8f:82:b9:2a:44:26:90:3e:7a:88:67:b6:
         ed:51:63:91:ac:24:bc:ba:40:32:88:85:fd:62:24:e5:6b:fd:
         f4:d4:a4:fe:8f:e5:b0:9a:e9:98:ff:d3:11:c5:b9:c8:54:83:
         bb:d8:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:11:47 2026 by rpki-client