Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          /8H1vGVVgh5sTlbBoluybVAefrMYpkl18CFKt0dQgNg=
Subject key identifier:   29:58:0D:20:F2:8F:90:79:76:EB:81:0F:71:90:90:CD:D1:87:30:5C
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       019EBFC856C9A6CBDA0F09E42D15A4840167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          1680
Signing time:             Sat 13 Jun 2026 07:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:37 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: bVjQJUnLpozvY5sasoqTSRSJmbSMSsJ2EzduTP42sw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:56:c9:a6:cb:da:0f:09:e4:2d:15:a4:84:01:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Jun 13 07:00:37 2026 GMT
            Not After : Jun 14 07:00:37 2026 GMT
        Subject: CN=29580d20f28f907976eb810f719090cdd187305c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dd:c5:8d:f7:26:46:a0:70:de:28:e7:6b:ea:
                    56:5c:dd:67:1b:eb:6b:5f:de:2f:68:94:61:c3:f4:
                    34:2c:85:e9:d1:2d:e8:b2:8b:60:8c:18:0b:fd:14:
                    9f:e9:a0:44:68:d3:8f:ba:e2:30:76:d4:fe:36:39:
                    9b:af:76:51:71:eb:b7:8a:c7:62:85:ee:d5:56:05:
                    3b:45:47:35:26:32:db:6b:7c:a6:12:cd:a7:0b:89:
                    5c:d2:27:da:04:f8:8f:b6:59:36:5a:4a:2e:b8:a4:
                    b1:ff:04:84:26:4c:62:07:e7:a1:aa:3c:d1:fc:fe:
                    83:6e:af:79:3c:c0:67:50:a0:86:67:58:ff:9e:ad:
                    a8:be:1d:ed:01:2d:88:4a:b9:b6:83:17:ff:3a:9e:
                    ec:20:35:07:48:57:02:60:ca:ae:e3:ec:48:e6:eb:
                    66:e7:af:e9:d0:c4:b2:dc:df:1f:7c:84:e7:28:d4:
                    04:d1:dd:93:94:e1:35:55:2e:c9:a2:7a:df:b0:e0:
                    39:bd:ea:5a:a5:fc:43:34:a2:39:81:07:49:07:47:
                    9d:ef:54:76:52:24:d2:6a:99:c6:2c:42:ab:da:1a:
                    7e:cd:f9:55:b1:f0:29:02:8d:d8:e9:81:8e:4d:51:
                    ff:88:da:60:66:2f:b2:42:1a:e0:32:21:fb:81:8c:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:0D:20:F2:8F:90:79:76:EB:81:0F:71:90:90:CD:D1:87:30:5C
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:0e:37:49:da:2b:d3:8d:2c:92:55:5d:1e:f5:f3:f6:d2:bc:
         86:d8:54:1c:c7:54:ba:de:7a:7f:f5:8d:c6:0e:ad:1b:d5:0b:
         37:1a:ee:e7:8f:31:9d:c3:da:c2:dd:e3:ab:9c:91:71:1d:82:
         db:2e:21:f6:dc:cd:c1:33:4d:47:17:cd:5a:7c:e2:d3:ee:c1:
         bc:15:33:72:83:0a:92:e7:a0:88:0e:58:d3:04:6b:29:0a:11:
         fd:a0:41:52:d5:7e:68:6b:e9:8b:16:cb:22:82:ee:a8:f9:70:
         0c:40:32:ec:83:b2:f4:70:bc:82:56:19:96:d1:a4:0f:15:c5:
         99:38:d3:da:ff:2f:73:a8:57:ce:a4:f2:7f:8a:b0:c1:a9:6f:
         e6:a8:4f:49:be:27:a0:c6:52:99:c5:6e:ac:d4:77:eb:eb:b6:
         a4:fc:9e:78:e1:54:18:e7:bd:ee:40:1d:52:3c:35:20:fc:d6:
         b6:45:ee:d3:3c:fe:a8:be:61:ea:1e:b7:a8:4f:92:92:93:ef:
         0c:2d:5e:bc:96:3a:5c:38:fa:28:b0:a4:65:c4:4b:a0:a6:78:
         0c:8e:09:13:02:7a:36:62:96:ec:00:af:2a:1b:7e:99:b7:5a:
         f6:18:d3:61:5d:2f:aa:7a:ba:b6:7a:1d:b8:60:45:b2:6d:7f:
         d7:95:57:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yFbJpsvaDwnkLRWkhAFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjYwNjEzMDcwMDM3WhcNMjYwNjE0MDcwMDM3WjAzMTEwLwYDVQQD
EygyOTU4MGQyMGYyOGY5MDc5NzZlYjgxMGY3MTkwOTBjZGQxODczMDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt3FjfcmRqBw3ijna+pWXN1nG+tr
X94vaJRhw/Q0LIXp0S3osotgjBgL/RSf6aBEaNOPuuIwdtT+Njmbr3ZRceu3isdi
he7VVgU7RUc1JjLba3ymEs2nC4lc0ifaBPiPtlk2WkouuKSx/wSEJkxiB+ehqjzR
/P6Dbq95PMBnUKCGZ1j/nq2ovh3tAS2ISrm2gxf/Op7sIDUHSFcCYMqu4+xI5utm
56/p0MSy3N8ffITnKNQE0d2TlOE1VS7JonrfsOA5vepapfxDNKI5gQdJB0ed71R2
UiTSapnGLEKr2hp+zflVsfApAo3Y6YGOTVH/iNpgZi+yQhrgMiH7gYy95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClYDSDyj5B5duuBD3GQkM3RhzBcMB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADA43Sdor
040sklVdHvXz9tK8hthUHMdUut56f/WNxg6tG9ULNxru548xncPawt3jq5yRcR2C
2y4h9tzNwTNNRxfNWnzi0+7BvBUzcoMKkuegiA5Y0wRrKQoR/aBBUtV+aGvpixbL
IoLuqPlwDEAy7IOy9HC8glYZltGkDxXFmTjT2v8vc6hXzqTyf4qwwalv5qhPSb4n
oMZSmcVurNR36+u2pPyeeOFUGOe97kAdUjw1IPzWtkXu0zz+qL5h6h63qE+SkpPv
DC1evJY6XDj6KLCkZcRLoKZ4DI4JEwJ6NmKW7ACvKht+mbda9hjTYV0vqnq6tnod
uGBFsm1/15VXhw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:28:30 2026 by rpki-client