Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File:                     8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier:          8UvyCg3vO/qHY6cIuFkdviz8T0cPGecfaNULhnUifgg=
Subject key identifier:   F1:50:8C:02:24:F9:F4:B3:4C:F4:BE:12:1A:80:E3:27:08:EB:FD:A6
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer:       /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial:       019FA899D503E39BA283832E70A4F77CADB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 12:01:21 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:21 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:21 +0000
Files and hashes:         1: 1-c2ltkv81E7EaN3If-RGRVyYa_4.roa (hash: qSMZzei9N2ZpotVQ68DijxfquLxjFkRKA3l/57HyNug=)
                          2: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: osa5bwIoKJxmGOGeHGjxu/7mJ1OBybkRl3cOge1Ghy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d5:03:e3:9b:a2:83:83:2e:70:a4:f7:7c:ad:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
        Validity
            Not Before: Jul 28 12:01:21 2026 GMT
            Not After : Jul 29 12:01:21 2026 GMT
        Subject: CN=f1508c0224f9f4b34cf4be121a80e32708ebfda6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:f3:ef:72:e8:56:bc:b8:2e:3b:59:07:f5:
                    3d:13:7a:70:8f:9a:5a:e9:09:49:c9:c9:a7:8c:e6:
                    9f:d8:f7:72:94:5a:f0:9b:15:36:0e:f6:8d:a7:3f:
                    2c:05:72:8a:8e:57:38:59:43:2a:ef:4c:0b:4e:0f:
                    8c:59:cb:ca:40:ed:2b:89:01:d0:5c:2f:e0:85:95:
                    c6:7f:f7:98:9c:d8:9e:16:2f:9b:59:05:1a:8a:6a:
                    a4:f0:51:c5:dc:1f:22:91:69:c4:93:63:15:12:ea:
                    13:0d:36:61:bf:a7:9e:c6:dd:f9:d4:44:1a:58:75:
                    9b:50:8d:3b:8a:b8:38:7d:da:4e:78:04:45:52:c6:
                    83:55:f9:6b:fd:16:ef:b2:b5:5b:74:d9:e9:a6:a0:
                    c0:c1:78:ad:aa:82:c9:9e:57:b0:13:a2:ea:6d:41:
                    72:b7:f7:15:5d:72:ba:62:f5:f3:7d:e3:ba:ee:fa:
                    7e:b0:b9:c8:28:58:9a:db:64:a3:a3:4d:d0:08:b7:
                    b9:aa:22:78:35:29:cb:3e:e6:d7:b0:d4:37:20:5a:
                    d2:cc:79:17:e2:4d:38:ba:93:52:2f:d5:9f:97:92:
                    b8:4f:06:19:88:51:45:04:f4:24:21:a6:44:5d:c8:
                    19:29:e0:50:fb:de:4b:ee:a6:e5:86:ef:3d:d5:a5:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:50:8C:02:24:F9:F4:B3:4C:F4:BE:12:1A:80:E3:27:08:EB:FD:A6
            X509v3 Authority Key Identifier:
                keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:b3:6a:2e:f4:ce:d7:03:06:95:79:17:d2:b3:61:7b:fa:
         14:ff:bd:7f:04:28:ee:f7:18:15:db:a3:74:94:99:dd:88:74:
         f6:ee:7f:8c:24:f9:6e:e6:f4:1a:26:5c:e7:51:4a:bd:81:00:
         63:60:6d:89:40:2e:fb:1e:f5:1c:74:ee:66:6f:26:b8:2a:22:
         14:c7:7a:4d:55:4d:d0:40:1d:23:12:60:24:4e:a4:52:4d:bc:
         4f:ee:e4:4d:1e:dc:30:81:aa:53:d7:a5:bd:f8:fd:b6:3a:4b:
         56:6d:49:07:ec:c5:41:ab:ed:cf:73:30:4c:e3:a0:57:5d:66:
         b2:b5:a6:87:6d:36:e7:94:7b:fc:57:86:fd:bd:0e:4e:b4:ce:
         0b:bb:03:c8:fa:6e:23:36:e8:94:5e:39:4f:f8:ad:fa:29:63:
         c7:d7:6b:17:79:3e:59:62:53:3c:8b:b0:65:01:2a:93:cb:63:
         9c:e7:3f:c9:d1:6d:cb:ca:24:07:d5:d9:d3:6c:2f:97:b4:d3:
         1c:b6:c0:6c:da:fc:6d:a1:53:ce:8b:28:f1:7d:df:8e:38:f5:
         a7:74:75:63:0b:cf:02:51:40:c5:29:b4:c3:92:fc:2c:80:59:
         89:1f:d6:a7:b5:bc:18:96:d5:b8:15:cb:f5:b7:86:5e:50:a4:
         5b:14:ac:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omdUD45uig4MucKT3fK2xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyMTVhMjc3OTQ5NzExYjJjMDFjZGM2NjllNDBlMTcxMzk1
ODU1YmIwHhcNMjYwNzI4MTIwMTIxWhcNMjYwNzI5MTIwMTIxWjAzMTEwLwYDVQQD
EyhmMTUwOGMwMjI0ZjlmNGIzNGNmNGJlMTIxYTgwZTMyNzA4ZWJmZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL/z73LoVry4LjtZB/U9E3pwj5pa
6QlJycmnjOaf2PdylFrwmxU2DvaNpz8sBXKKjlc4WUMq70wLTg+MWcvKQO0riQHQ
XC/ghZXGf/eYnNieFi+bWQUaimqk8FHF3B8ikWnEk2MVEuoTDTZhv6eext351EQa
WHWbUI07irg4fdpOeARFUsaDVflr/RbvsrVbdNnppqDAwXitqoLJnlewE6LqbUFy
t/cVXXK6YvXzfeO67vp+sLnIKFia22Sjo03QCLe5qiJ4NSnLPubXsNQ3IFrSzHkX
4k04upNSL9Wfl5K4TwYZiFFFBPQkIaZEXcgZKeBQ+95L7qblhu891aW+SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFQjAIk+fSzTPS+EhqA4ycI6/2mMB8GA1UdIwQY
MBaAFPIVoneUlxGywBzcZp5A4XE5WFW7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgt
OTAzYzE5ODU5MGZhLzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9mMDhkNDUtNTQzYy00OWY3LTllNzgtOTAzYzE5ODU5MGZh
LzEvOGhXaWQ1U1hFYkxBSE54bW5rRGhjVGxZVmJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFryzai70
ztcDBpV5F9KzYXv6FP+9fwQo7vcYFdujdJSZ3Yh09u5/jCT5bub0GiZc51FKvYEA
Y2BtiUAu+x71HHTuZm8muCoiFMd6TVVN0EAdIxJgJE6kUk28T+7kTR7cMIGqU9el
vfj9tjpLVm1JB+zFQavtz3MwTOOgV11msrWmh20255R7/FeG/b0OTrTOC7sDyPpu
IzbolF45T/it+iljx9drF3k+WWJTPIuwZQEqk8tjnOc/ydFty8okB9XZ02wvl7TT
HLbAbNr8baFTzoso8X3fjjj1p3R1YwvPAlFAxSm0w5L8LIBZiR/Wp7W8GJbVuBXL
9beGXlCkWxSsHA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:14:30 2026 by rpki-client