Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          T4bstW5rgkZBJnPvd+I2l5a/eyUrIxiOrWDzYIku9/s=
Subject key identifier:   84:37:C9:8B:FB:19:45:B2:8D:2C:F7:95:E9:A8:2A:D2:36:94:40:63
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       019FA97572DFAF4BB6259F9E8167F41E5F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          05C2
Signing time:             Tue 28 Jul 2026 16:01:14 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:14 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:14 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: QuVtCw7po50N2XuWItboRKKMA5L+7MKEYhymaqKumR0=)
                          2: B9dQBunPgCxrLiUL8opifDj2bOM.roa (hash: fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:72:df:af:4b:b6:25:9f:9e:81:67:f4:1e:5f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Jul 28 16:01:14 2026 GMT
            Not After : Jul 29 16:01:14 2026 GMT
        Subject: CN=8437c98bfb1945b28d2cf795e9a82ad236944063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:cd:fa:1b:e3:71:3f:77:0c:60:3b:2b:7b:
                    40:48:e0:0e:e3:ee:7e:46:b5:73:d6:25:95:cc:5c:
                    ef:06:bc:65:b9:fa:eb:7c:e7:bf:cf:0c:96:4f:dc:
                    e5:47:07:94:4c:e1:7c:8e:3c:d6:b8:87:46:ee:1c:
                    11:40:db:18:9b:e5:b9:d2:85:96:b0:4c:a2:b1:fb:
                    6a:0b:1e:d8:a8:b9:99:26:e7:dc:38:a4:a3:5f:69:
                    da:b9:3b:5f:f9:50:a5:10:c9:6f:a2:2c:09:05:05:
                    35:3e:0a:5c:68:8f:99:29:d5:52:81:33:92:39:72:
                    8c:b8:34:1e:70:70:f8:c1:dd:d2:d4:5c:36:c1:6f:
                    6f:22:45:fe:49:34:3e:af:97:15:0f:90:f5:e9:bd:
                    09:05:ce:1d:d9:f3:8a:73:39:86:8b:72:a0:36:83:
                    a6:e3:44:af:10:ff:24:c7:27:af:12:3a:ab:d8:b5:
                    f9:90:0f:90:d5:90:b3:a5:48:79:9e:99:20:8d:38:
                    9a:52:3a:f3:d6:db:e2:0c:ff:55:c0:f4:c6:58:6f:
                    12:54:01:b5:cd:e4:bf:c4:6d:53:ff:4d:26:6f:50:
                    95:a0:7c:e7:80:0d:f5:c7:40:b0:49:c3:98:1e:54:
                    ec:39:70:b5:70:47:9b:e5:f8:f0:7c:b6:99:99:ac:
                    82:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:37:C9:8B:FB:19:45:B2:8D:2C:F7:95:E9:A8:2A:D2:36:94:40:63
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:91:d7:23:58:f4:eb:f4:55:1d:d1:a4:3a:4a:91:df:39:02:
         9d:9d:e9:a7:47:af:ce:6b:00:61:00:39:74:3b:ea:a9:c5:24:
         74:d7:fb:85:62:47:97:5e:6d:48:3d:58:b8:42:e6:2c:fc:df:
         89:52:01:fb:df:58:39:2d:34:b3:80:07:00:45:bc:fa:c9:4f:
         fb:2d:6f:7c:54:82:5e:d1:a5:27:d3:01:60:70:e3:c7:7b:6c:
         bd:19:bb:b1:e1:81:e8:a3:66:6b:52:09:fa:30:77:a0:47:c5:
         72:48:d0:e7:85:dc:a6:8e:24:24:75:cb:47:58:86:eb:19:ff:
         9a:4b:cc:33:2a:46:2a:e5:a7:9c:e2:d5:26:9e:6c:ef:41:c6:
         6f:ad:02:f8:5c:db:9d:92:e0:16:68:88:e7:6f:da:00:10:57:
         9b:cc:41:54:c2:3c:36:2f:01:b5:fc:bb:ac:fb:e2:fc:d6:e8:
         36:27:92:65:e3:a6:f6:a4:73:6f:74:35:ff:56:0e:91:ba:c1:
         c2:d0:89:87:d9:64:ff:b9:64:a1:18:f6:6b:9c:d5:c4:c1:38:
         93:07:ba:d4:b0:63:40:74:47:14:c2:eb:89:1d:9e:06:3f:8d:
         4e:d9:3a:42:e5:d6:eb:2b:f5:15:64:11:2a:12:9f:78:95:8e:
         b1:fc:71:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdXLfr0u2JZ+egWf0Hl9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjI0MDY1Zjg2YjRjZjk4NDhkZWM3ZGFiODZhNGRiODZj
MTVlMTEwHhcNMjYwNzI4MTYwMTE0WhcNMjYwNzI5MTYwMTE0WjAzMTEwLwYDVQQD
Eyg4NDM3Yzk4YmZiMTk0NWIyOGQyY2Y3OTVlOWE4MmFkMjM2OTQ0MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLPN+hvjcT93DGA7K3tASOAO4+5+
RrVz1iWVzFzvBrxlufrrfOe/zwyWT9zlRweUTOF8jjzWuIdG7hwRQNsYm+W50oWW
sEyisftqCx7YqLmZJufcOKSjX2nauTtf+VClEMlvoiwJBQU1PgpcaI+ZKdVSgTOS
OXKMuDQecHD4wd3S1Fw2wW9vIkX+STQ+r5cVD5D16b0JBc4d2fOKczmGi3KgNoOm
40SvEP8kxyevEjqr2LX5kA+Q1ZCzpUh5npkgjTiaUjrz1tviDP9VwPTGWG8SVAG1
zeS/xG1T/00mb1CVoHzngA31x0CwScOYHlTsOXC1cEeb5fjwfLaZmayCTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ3yYv7GUWyjSz3lemoKtI2lEBjMB8GA1UdIwQY
MBaAFPJiQGX4a0z5hI3sfauGpNuGwV4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEt
ZTU0NzBjNTJkNGRkLzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84MTg0OTEtZDY1Ny00MmM4LWJjOWEtZTU0NzBjNTJkNGRk
LzEvOG1KQVpmaHJUUG1FamV4OXE0YWsyNGJCWGhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipHXI1j0
6/RVHdGkOkqR3zkCnZ3pp0evzmsAYQA5dDvqqcUkdNf7hWJHl15tSD1YuELmLPzf
iVIB+99YOS00s4AHAEW8+slP+y1vfFSCXtGlJ9MBYHDjx3tsvRm7seGB6KNma1IJ
+jB3oEfFckjQ54Xcpo4kJHXLR1iG6xn/mkvMMypGKuWnnOLVJp5s70HGb60C+Fzb
nZLgFmiI52/aABBXm8xBVMI8Ni8Btfy7rPvi/NboNieSZeOm9qRzb3Q1/1YOkbrB
wtCJh9lk/7lkoRj2a5zVxME4kwe61LBjQHRHFMLriR2eBj+NTtk6QuXW6yv1FWQR
KhKfeJWOsfxxrA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:43 2026 by rpki-client