Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
File:                     8YBT6n86t5p16Ph1OGd1VR73Vzk.mft (raw, json)
Hash identifier:          K+r4VLk6IhgZXn38GG8NW6BXR/xElNzcMEKnPaWhvKM=
Subject key identifier:   50:16:E4:45:28:1C:C9:1C:2C:D4:4A:C1:89:94:91:06:04:C6:D7:30
Authority key identifier: F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39
Certificate issuer:       /CN=f18053ea7f3ab79a75e8f875386775551ef75739
Certificate serial:       019F17F961F3201683208ED9313B4F22118B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 10:00:47 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:47 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:47 +0000
Files and hashes:         1: 8YBT6n86t5p16Ph1OGd1VR73Vzk.crl (hash: apkzCz7tNCffrLYYPpnVQ1FJeLz5MBiJyaKzsWG9SAc=)
                          2: 9d3478cw58cpVr8RPYg-kVCTW8E.roa (hash: eGWbc7qwVM8x0TUrSQe47h6Dp40094Xn8HVIhZHxbAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:61:f3:20:16:83:20:8e:d9:31:3b:4f:22:11:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f18053ea7f3ab79a75e8f875386775551ef75739
        Validity
            Not Before: Jun 30 10:00:47 2026 GMT
            Not After : Jul  1 10:00:47 2026 GMT
        Subject: CN=5016e445281cc91c2cd44ac18994910604c6d730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:57:3b:97:d0:f1:ba:51:ed:b2:e4:3c:d5:32:
                    e1:76:d6:75:1b:cb:e5:ed:54:8f:4d:1f:e0:5d:7b:
                    4c:80:3c:18:22:b2:b1:f3:d4:9d:c5:67:37:e6:ea:
                    71:dd:dc:b9:99:09:30:ed:e5:49:cf:25:5a:95:e9:
                    b6:a0:93:ec:52:36:c5:fc:27:6e:31:af:c4:93:3d:
                    50:82:da:ab:8c:0b:e8:9b:1b:8d:74:4d:a8:f6:f6:
                    0d:e6:a2:2f:f3:0f:3e:7b:21:e5:41:04:59:11:95:
                    d8:3b:ed:4a:6c:e7:c6:61:a7:1e:a2:9e:c9:1c:fb:
                    6c:07:75:89:09:a7:bd:1b:d4:3a:1e:48:53:0a:6a:
                    81:94:a7:11:82:d9:6c:81:92:93:97:33:79:e5:77:
                    2f:5b:39:ea:d8:3e:ac:10:f8:5c:74:15:5b:db:e1:
                    de:4f:59:79:e7:06:b1:2b:8c:a8:b4:43:52:fe:9a:
                    81:27:13:f9:5d:dc:a6:15:a8:90:11:93:5e:37:27:
                    15:f6:fe:10:32:94:66:9f:02:a7:66:dd:ec:9b:fe:
                    aa:4f:d1:b9:e0:f7:b1:83:d3:08:52:2d:ed:92:18:
                    97:bc:b5:9c:47:5b:fd:ab:9c:75:ec:d8:d9:91:db:
                    40:b3:61:02:03:86:98:e8:cd:62:c0:00:b0:82:23:
                    3a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:16:E4:45:28:1C:C9:1C:2C:D4:4A:C1:89:94:91:06:04:C6:D7:30
            X509v3 Authority Key Identifier:
                keyid:F1:80:53:EA:7F:3A:B7:9A:75:E8:F8:75:38:67:75:55:1E:F7:57:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YBT6n86t5p16Ph1OGd1VR73Vzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/9d4c0c-158f-4344-9641-747ced0b7486/1/8YBT6n86t5p16Ph1OGd1VR73Vzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f6:6a:eb:35:50:19:63:c7:4e:60:ad:9e:d0:53:64:54:ee:
         f8:50:e6:4d:fd:31:97:88:1d:db:69:32:e7:a3:00:52:4a:2f:
         fc:c0:0c:88:e3:c5:8b:0a:e3:55:7a:24:69:6c:d4:fc:7d:e9:
         12:1c:5b:ad:07:87:fe:e5:73:22:a5:3f:75:ce:06:d0:29:03:
         50:74:01:2d:07:85:f9:0a:85:bc:2f:97:8d:00:8e:be:d1:89:
         cc:ad:8b:00:80:d0:59:6d:d3:e8:32:c2:30:7d:f0:67:cb:94:
         d4:eb:00:8a:c0:65:4c:6e:81:00:23:4c:7f:3c:bb:96:0e:3a:
         ac:74:a4:55:46:5b:6e:55:24:b6:73:ac:9e:72:51:fb:ba:14:
         a6:ad:d6:63:8f:a4:fc:29:d0:8b:1a:c7:a0:0a:5b:4d:e9:d0:
         25:69:c2:d8:26:92:eb:04:59:e4:20:b8:6f:be:85:b4:3b:a4:
         d4:e2:f5:59:16:8a:8b:cd:1b:47:cb:85:e5:75:a7:4b:fb:dc:
         ac:1d:b7:f2:20:41:4e:1e:ab:65:38:bd:e9:30:62:80:c6:a4:
         9c:75:3c:fd:3b:d6:e7:43:4b:56:8b:4a:70:28:a5:58:cc:db:
         ee:3c:7d:4a:0a:3b:7b:f2:f2:18:c0:8d:f8:5d:6d:1d:f2:1e:
         dd:35:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:19:19 2026 by rpki-client