Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File:                     8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier:          /7hiS8ZcAY2FIwIZ+pxdZJL6cH8r2oRZRuomavADY1g=
Subject key identifier:   2F:BB:B7:ED:ED:AC:DA:97:D7:98:97:52:D3:23:87:E6:33:14:D3:8D
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer:       /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial:       019FA9748BFB9AEC98960E88750687592EF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 16:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:15 +0000
Files and hashes:         1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: ZI336sr1c5gYUYItlZTnl5gUdqp5HRCg527Lk3brYVg=)
                          2: D0hPX_cQdsaP42kw__DQw0Fz_yc.roa (hash: LtUEAUpBvXQgL6TVsY4N5ahD34Iyyko8ridz4ffMENc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:8b:fb:9a:ec:98:96:0e:88:75:06:87:59:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
        Validity
            Not Before: Jul 28 16:00:15 2026 GMT
            Not After : Jul 29 16:00:15 2026 GMT
        Subject: CN=2fbbb7ededacda97d7989752d32387e63314d38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:13:66:f2:66:c0:8b:11:ff:af:b5:8f:01:7f:
                    5a:a3:64:ac:b0:0c:57:bc:2c:86:57:5e:55:07:f7:
                    3a:42:52:bd:94:c6:a1:85:f2:31:40:a0:71:82:df:
                    b4:4c:56:3e:91:c6:e6:c4:32:5b:35:52:7c:3b:64:
                    64:49:7e:db:63:d8:0c:b7:0f:6f:64:90:2d:a8:d1:
                    fd:47:ab:56:b9:24:f1:6e:42:6b:29:99:3b:52:3f:
                    10:c5:48:d3:d6:2b:f7:d6:50:a2:b5:d8:09:7e:6a:
                    f4:17:32:90:d1:50:37:01:6c:94:13:a4:32:f1:5b:
                    06:36:8c:fb:43:35:e5:53:81:f8:ec:fc:7d:90:a0:
                    0a:1c:e6:90:0a:9f:75:51:c0:1c:45:3c:a1:0b:29:
                    7a:65:8e:7b:c9:19:da:cb:7c:85:72:4a:32:d3:43:
                    dd:27:6e:8f:cd:c9:c5:2e:41:46:2e:f8:47:50:9b:
                    61:0c:ab:2a:64:e1:9d:c1:45:6b:1a:39:da:79:60:
                    e6:ad:0b:32:33:94:a7:bf:07:e0:d9:fc:67:05:14:
                    19:52:95:d8:cf:99:be:c5:ba:b9:cb:2a:1b:e2:40:
                    82:7d:c2:a4:69:45:91:f4:32:fc:0d:58:46:52:bb:
                    c2:e2:56:6e:d8:82:25:79:c0:79:3c:03:c2:e3:f2:
                    33:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:BB:B7:ED:ED:AC:DA:97:D7:98:97:52:D3:23:87:E6:33:14:D3:8D
            X509v3 Authority Key Identifier:
                keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5f:86:ea:4d:31:88:b0:f6:45:0e:95:47:bd:44:2f:93:db:
         f1:c3:42:7d:e0:5b:df:07:69:65:06:72:61:70:60:5a:82:07:
         b5:3d:3a:f0:4c:a0:d0:dd:5c:f3:11:d5:2e:6b:81:c2:c8:da:
         39:11:4e:23:3d:15:14:b2:f8:6e:36:35:ff:72:9d:c9:b0:25:
         4b:97:16:6e:b9:e6:81:88:0e:dd:e4:71:b6:8a:15:03:a9:6c:
         10:97:5e:6a:08:91:27:da:88:fd:ea:b7:f6:86:4c:b4:d5:f3:
         99:41:e4:d7:7d:2e:c5:5d:e6:c6:5c:1a:42:12:3c:89:bf:e4:
         f7:db:c1:74:4f:d7:ea:6c:21:9b:98:3a:3d:3c:b0:16:9c:fd:
         15:5c:34:6a:6d:35:f2:d6:5a:c0:6c:82:e5:9d:1b:46:b9:3d:
         35:ce:3e:b5:22:a1:54:f6:2d:62:44:d1:c1:e6:92:44:86:dd:
         fa:ee:fa:b3:b1:2d:66:8f:76:e4:33:4c:4d:68:25:b4:8c:19:
         e7:a3:92:ff:a1:a6:58:67:98:81:04:91:db:a8:e3:70:92:f1:
         a0:36:85:0e:67:b2:92:f3:aa:a3:f9:4f:07:75:a8:f6:a6:f4:
         d4:4e:26:f2:10:ce:32:06:73:ea:0a:7e:1f:8b:df:60:2f:fd:
         4f:de:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:39 2026 by rpki-client