Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File:                     0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier:          jLYO1YmBwdd8/OIcLthOBks1hkRFbjfekTx179GAbqw=
Subject key identifier:   B8:04:44:C9:CD:7A:69:75:71:7B:F6:FD:0E:BB:EC:18:B9:1B:CE:99
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer:       /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial:       019F18305E5F3DDDCCA020DF7838A93B3434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number:          120A
Signing time:             Tue 30 Jun 2026 11:00:50 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:50 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:50 +0000
Files and hashes:         1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: ERpNFWQLlyXWUKCA1DdOrysXV1UztJkuWgk+7BCLzT8=)
                          2: ZJfd2bM3zI3ej_61TAwH8lmhHLc.roa (hash: duIN3E5E9I7c9rAgU9yjUM0YccPt4nRq25usPFTIyKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:5e:5f:3d:dd:cc:a0:20:df:78:38:a9:3b:34:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
        Validity
            Not Before: Jun 30 11:00:50 2026 GMT
            Not After : Jul  1 11:00:50 2026 GMT
        Subject: CN=b80444c9cd7a6975717bf6fd0ebbec18b91bce99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ec:85:ef:7b:2b:0f:72:a1:c9:a1:e7:8d:19:
                    59:ab:a4:48:bd:78:7f:74:70:86:62:db:5a:42:b3:
                    d6:79:ad:7a:18:77:7f:5d:56:99:01:b3:2d:43:22:
                    26:f5:89:41:04:8a:24:54:cc:4b:1c:03:35:c1:68:
                    e8:1a:07:57:78:ce:b5:62:e4:0a:f9:d5:00:78:76:
                    d9:02:8c:3e:54:46:a5:f6:2d:cc:b1:84:3b:23:39:
                    16:90:80:2c:20:e5:5b:e1:9b:b8:7e:fd:c6:70:7c:
                    03:b7:5a:46:5f:d1:26:a9:86:d5:e5:d0:c7:a1:0f:
                    30:7a:53:a0:ec:ce:a6:e5:99:73:29:30:57:f6:12:
                    10:97:fa:6d:83:6c:a0:55:3e:25:9c:61:f5:30:ce:
                    4a:13:31:9d:57:b7:a2:79:20:83:b2:83:c1:40:71:
                    b0:0f:9c:9f:33:3c:21:76:f2:ab:4f:37:ff:df:0a:
                    e3:1e:f6:b8:bd:b0:b2:c2:8c:9f:64:ad:2f:f5:b1:
                    56:66:f4:4e:f0:f4:d2:bf:49:14:35:54:49:6a:d1:
                    7a:9d:3f:2c:8a:5b:1d:c5:22:34:21:ff:1c:dc:8a:
                    14:da:b1:65:1c:e0:dd:c0:86:e0:81:b9:c4:db:54:
                    da:1d:70:08:b4:5c:3e:32:69:1a:63:22:f4:68:e0:
                    e2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:04:44:C9:CD:7A:69:75:71:7B:F6:FD:0E:BB:EC:18:B9:1B:CE:99
            X509v3 Authority Key Identifier:
                keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d9:a8:51:f9:50:a0:95:a2:6d:f4:a0:28:4d:38:0c:00:a0:
         1e:db:cc:24:53:74:5b:a2:c0:de:8c:85:c3:66:e7:1d:7c:c5:
         d0:07:ba:5a:c0:dd:77:ba:3b:ac:1b:dd:bb:c6:7c:bc:d5:20:
         ac:48:f2:82:71:0e:f9:d1:a9:2f:f8:aa:dc:83:38:de:94:3f:
         57:89:1c:e3:8f:3a:a7:63:a1:b5:9a:50:b9:5f:8f:ea:5c:3e:
         7a:8b:e0:50:b2:0a:fa:34:e3:52:be:60:f0:ed:33:38:5f:da:
         f0:b5:24:db:1a:ea:4c:91:31:07:53:70:6d:69:fa:09:b8:d7:
         29:23:77:93:05:69:ac:75:b8:63:79:73:9a:8e:6a:d7:11:d8:
         7e:5e:a9:95:42:0e:27:fc:7e:bd:ef:fc:39:40:0a:c1:42:95:
         6b:6c:f1:61:41:bd:02:45:24:c4:eb:56:82:e7:ec:ca:24:81:
         c6:e3:7e:7d:a0:7a:9e:ed:44:44:ef:7e:3c:ae:9a:b1:53:8c:
         c5:1a:28:d3:1d:e1:a1:9f:4c:37:09:5d:f4:f8:96:ba:5f:67:
         c5:d3:ab:7b:8c:fa:4e:dd:fb:05:c9:d0:35:95:d1:83:c7:47:
         22:ce:d2:e4:e9:e9:4e:16:e2:05:9a:90:dc:4d:4f:af:9a:36:
         35:e0:70:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:59 2026 by rpki-client