Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File:                     8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier:          IafJ9IMXzY3Fi+lpCBWmkGK2+UjWqF/qOg83Rl8jNoU=
Subject key identifier:   44:F4:81:E4:A2:10:D7:0A:44:D4:BA:B7:88:22:3F:A2:E3:DA:EE:C5
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer:       /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial:       019FA9074DE23696DA7D6BF10999D243C75B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number:          1647
Signing time:             Tue 28 Jul 2026 14:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:55 +0000
Files and hashes:         1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: BmTWU8AL1c+lyH7RN8ghxcfC1Ga7y0lg0GwCiYEFUi8=)
                          2: sizGPo8KqP7LWpt91yMVuV_G2qY.roa (hash: LlMndqzEsit0QQGqlcQ6a+BkfwsI2hJIMaOg8c0+sWY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:4d:e2:36:96:da:7d:6b:f1:09:99:d2:43:c7:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
        Validity
            Not Before: Jul 28 14:00:55 2026 GMT
            Not After : Jul 29 14:00:55 2026 GMT
        Subject: CN=44f481e4a210d70a44d4bab788223fa2e3daeec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:87:28:5c:91:25:55:92:77:b2:c6:bd:36:85:
                    81:89:1b:17:79:98:f2:ec:b9:9a:d9:df:f6:17:8f:
                    f8:1a:66:79:80:b9:51:13:d9:69:d8:12:08:df:58:
                    a0:cb:c9:f9:35:a1:62:56:1e:9f:06:a3:af:84:85:
                    dc:c6:8d:a9:a5:73:5e:2d:08:42:5f:86:75:4a:47:
                    7b:0f:91:fd:97:cd:7a:60:fa:06:13:e4:dc:4a:a9:
                    2b:18:8f:70:b3:b0:6a:58:af:50:44:7f:1c:01:54:
                    cc:c5:da:43:c6:77:da:57:45:f0:06:e4:a5:dd:f8:
                    57:0e:d1:ca:20:93:e7:f6:7e:03:4e:b1:4d:d5:da:
                    78:d8:3b:d4:d4:dd:16:2e:39:ba:b2:fb:b7:f6:de:
                    ee:5a:2d:7e:01:15:7d:93:83:b4:d6:bf:64:94:fb:
                    b6:38:e4:6c:b2:af:84:7a:a9:b0:93:6f:4a:e0:58:
                    79:07:45:70:7a:ef:76:c6:48:c0:7a:b2:45:be:2e:
                    4e:8b:ef:a9:62:4f:dd:1b:aa:f6:c1:86:b0:68:fc:
                    f3:89:9f:ab:fb:f5:20:46:29:70:76:c0:1e:dc:18:
                    5a:9b:a1:1f:7c:90:b4:96:08:0f:03:bc:1e:02:15:
                    a4:48:01:27:dd:45:c5:e7:dd:d3:32:f7:3c:4c:72:
                    65:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:81:E4:A2:10:D7:0A:44:D4:BA:B7:88:22:3F:A2:E3:DA:EE:C5
            X509v3 Authority Key Identifier:
                keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:18:68:ec:22:9c:22:7e:71:b5:5f:e5:dc:e3:2f:56:35:
         c8:64:2f:af:93:88:d5:10:a1:1a:04:a7:11:ce:fc:81:23:86:
         41:36:c1:82:fe:c3:f1:33:ee:4c:20:9e:dd:9d:7c:09:e7:bf:
         39:f4:3e:b0:23:41:bc:e1:86:35:79:f1:10:e6:73:ea:9a:6a:
         14:40:b3:07:6b:61:c3:d8:fb:29:7f:e3:76:2b:9e:c4:62:2e:
         1c:d8:62:fe:39:77:63:5e:9d:3e:37:57:33:4c:bc:5a:8c:bf:
         54:ab:24:79:c7:dc:94:8a:f0:2c:db:54:24:79:e8:fa:f7:ef:
         82:4b:ba:38:2e:ab:04:27:77:a4:3c:15:90:16:2a:cf:0a:e1:
         8b:e6:f6:c2:3f:da:42:d3:7d:37:37:34:a7:35:8e:c1:b9:cb:
         11:49:ca:94:5f:ba:e7:80:58:58:86:ec:38:0b:7a:92:08:39:
         1d:ff:fb:b1:5e:7f:28:27:40:61:c1:97:15:79:c1:5d:3c:ca:
         f9:67:10:84:46:9e:95:a7:97:e5:91:65:34:ee:16:ea:0f:b9:
         8f:78:ed:bf:65:b8:40:58:8f:15:b9:ee:d3:3d:b4:c6:d4:af:
         a0:da:1e:e2:66:c3:54:68:b1:cd:5a:2f:3d:23:e2:ec:2f:63:
         38:27:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:14:24 2026 by rpki-client