Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File:                     8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier:          iDUjaL+N9oSv49GKQ8ogqkHQV6mUY8N2oh6LW3/8jsM=
Subject key identifier:   BD:45:A4:51:1C:3A:42:95:6F:71:3C:C4:13:40:1E:EE:AA:1C:63:CC
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer:       /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial:       019EB8EA22848112C87496E350D576DF6AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number:          1841
Signing time:             Thu 11 Jun 2026 23:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:12 +0000
Files and hashes:         1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: Y+xFdobiAeKm6EZOLPZHxmQCxKsoYL2089uCaf67mHo=)
                          2: BmNLDCfpNhMuta2ovEkjhRgE3XE.roa (hash: 8pxnmm0DlGNm9U9Ei6IyeVDeTXCLFrg3l4BtLYG1QcE=)
                          3: yS5UEuhVvuTniTo0Rp3QBfAIY2w.roa (hash: EwvpzM71As4QzkpNR7WlLGyGWJ5qcNqZIHlrR3sWFGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 23:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:22:84:81:12:c8:74:96:e3:50:d5:76:df:6a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
        Validity
            Not Before: Jun 11 23:00:12 2026 GMT
            Not After : Jun 12 23:00:12 2026 GMT
        Subject: CN=bd45a4511c3a42956f713cc413401eeeaa1c63cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:aa:c2:86:04:bc:3c:ee:34:41:34:a2:27:37:
                    36:af:19:73:de:a4:e5:e4:9d:77:0a:0d:a3:d3:5e:
                    91:a5:0c:5b:b6:70:ee:6b:ed:23:7b:3b:d0:1f:c2:
                    57:c7:93:3d:fd:4e:95:bb:dd:5d:e7:df:b7:1e:72:
                    90:2a:ee:b2:2c:3d:fe:c6:6d:d6:ae:d8:63:77:47:
                    0c:19:cc:c7:26:96:56:76:12:95:df:c3:fb:8a:5f:
                    a4:df:f2:77:65:73:aa:52:59:34:4b:71:dd:e4:bb:
                    c9:af:10:16:cd:54:f4:8d:44:32:ed:e1:cb:14:dc:
                    18:84:61:76:2b:70:cf:b1:a6:a2:a4:09:7a:99:7e:
                    a8:18:2b:3b:55:ab:b2:f8:c2:be:76:16:6d:a7:58:
                    41:e8:2d:18:b0:ea:57:80:5b:03:68:55:3c:57:4f:
                    f2:c6:57:55:a4:72:e0:26:7f:fa:d7:18:8a:c6:4e:
                    e1:2c:45:17:73:a6:37:ba:44:4e:3b:66:57:ab:66:
                    9b:24:90:d5:82:91:c1:a8:12:d0:13:4a:90:e2:17:
                    40:0f:b0:be:c1:5a:81:84:72:e3:33:c8:cc:f8:5b:
                    df:ad:bd:f0:c4:98:fc:b5:d7:e3:16:16:04:67:55:
                    83:cd:0d:3f:77:0e:eb:c4:2c:2a:19:f9:0b:6f:44:
                    06:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:A4:51:1C:3A:42:95:6F:71:3C:C4:13:40:1E:EE:AA:1C:63:CC
            X509v3 Authority Key Identifier:
                keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:1c:90:39:34:f9:b9:dc:db:7c:41:59:e6:de:bf:88:01:91:
         7f:bf:57:02:8b:16:92:42:dd:79:76:34:fe:67:67:99:f3:69:
         b3:c0:b8:31:cb:ef:56:23:24:f1:7a:e2:de:63:fc:80:3b:b9:
         a1:b2:fd:4f:1a:7a:28:c4:f5:fc:56:0c:1e:f8:e1:93:90:8d:
         0d:c5:51:76:5f:19:4f:e5:0e:f9:17:76:29:eb:53:a4:62:f7:
         cc:e3:93:43:09:4c:1e:5c:e2:b3:f0:fd:0f:6d:ea:29:ef:17:
         27:e2:8c:88:a1:a1:c5:d8:b0:f6:e9:5d:6a:8b:62:cf:b5:51:
         d1:31:f1:88:19:ca:ac:57:e6:26:d9:9b:22:d4:bf:b4:6a:fe:
         53:a7:ab:7a:08:da:ef:1e:ed:66:3a:ef:ad:6c:29:a0:7e:ec:
         aa:e1:07:76:ff:53:8e:85:69:a0:09:bb:d8:97:8a:03:00:11:
         0c:d2:aa:d8:52:f5:7f:85:68:11:ab:33:99:e3:7d:75:6e:9b:
         d9:6e:ed:91:eb:bb:ce:a2:44:2d:b3:74:60:7e:e6:39:7e:ea:
         9e:e1:29:4b:35:2c:dd:a4:4a:9c:15:db:d1:c7:b3:56:cb:18:
         27:bb:c9:5a:9e:98:95:ea:2c:eb:7d:4f:45:af:a2:33:33:ea:
         18:4d:59:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:26:49 2026 by rpki-client