Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File:                     8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier:          WopiRmSaDCQI8emqPz6a8vAcij7OtA+QhFzz9VGqWos=
Subject key identifier:   10:F4:37:AC:67:57:52:18:CC:0A:2B:DE:BF:5F:4F:2A:B2:BD:E5:C2
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer:       /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial:       019FCD4AD3C68517B49DC856E713882B7592
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number:          0F30
Signing time:             Tue 04 Aug 2026 15:01:00 +0000
Manifest this update:     Tue 04 Aug 2026 15:01:00 +0000
Manifest next update:     Wed 05 Aug 2026 15:01:00 +0000
Files and hashes:         1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: NRR6vvFRECVAghqQlbWNn31uN6rs3lfeS3MziyBLrMo=)
                          2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cd:4a:d3:c6:85:17:b4:9d:c8:56:e7:13:88:2b:75:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
        Validity
            Not Before: Aug  4 15:01:00 2026 GMT
            Not After : Aug  5 15:01:00 2026 GMT
        Subject: CN=10f437ac67575218cc0a2bdebf5f4f2ab2bde5c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:b1:3a:78:04:62:52:38:cd:f7:f8:69:6c:
                    23:dc:5c:f8:26:e7:d6:18:8e:41:ed:bc:78:a6:4a:
                    6c:41:c8:f6:7f:fb:30:02:d6:f7:2e:2d:a2:3a:f5:
                    a2:95:57:90:c7:0e:ff:7a:0d:a3:a7:e9:11:3b:67:
                    23:9d:fb:4b:36:e4:76:74:34:a1:92:d2:78:a3:0c:
                    fe:6b:68:1b:63:de:c5:71:c9:b6:78:8f:05:ef:fb:
                    87:94:68:f3:2c:5b:67:73:cd:6a:b6:9b:b8:12:e6:
                    2f:78:58:59:f8:59:64:1d:5f:d7:b3:80:c2:1b:37:
                    74:75:70:ba:60:aa:d1:c7:70:1a:f8:e1:c0:20:f7:
                    7d:60:42:5a:34:af:0d:be:ee:af:b1:95:39:d3:1d:
                    7c:f4:3c:ec:be:bf:73:ee:1a:1b:2e:77:e9:33:43:
                    d8:c9:e9:10:37:a6:7a:67:27:31:30:d9:6b:2a:03:
                    b3:82:6a:43:59:61:54:fe:96:8b:bc:cf:d8:5e:c9:
                    94:5e:94:42:b3:e2:cb:ca:2a:3f:a8:44:4e:ab:bb:
                    38:ae:49:ca:03:c8:da:48:47:81:00:88:87:b7:65:
                    b7:fa:9a:90:c5:3e:50:8d:70:f7:56:4e:4a:d1:1d:
                    ce:32:9f:ee:32:99:99:b0:86:48:8b:a0:f2:3e:c8:
                    6f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F4:37:AC:67:57:52:18:CC:0A:2B:DE:BF:5F:4F:2A:B2:BD:E5:C2
            X509v3 Authority Key Identifier:
                keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:33:a6:e7:37:a9:16:30:48:73:64:ff:0c:f9:9d:8a:2a:
         f7:b7:af:67:b9:ae:25:8b:af:e5:f9:40:45:5a:26:1a:81:c7:
         0d:3f:0b:21:78:c5:ba:55:3c:1a:35:94:5b:83:0c:43:2f:61:
         8f:f0:11:67:1d:b8:bd:c2:1e:98:bf:f5:45:e9:5d:9d:13:c7:
         a8:e5:b5:8a:e0:0e:70:b7:38:2d:f4:46:de:d7:1c:9f:b4:07:
         86:72:ad:50:1e:c9:44:06:bb:e3:fa:76:19:21:b4:37:c2:3f:
         ed:83:dd:6a:47:d5:d9:55:31:20:f2:7f:4b:19:a2:8c:6f:e9:
         11:d6:54:4d:fb:5a:e0:0c:6e:8e:87:88:b1:08:75:74:d3:c6:
         fe:4c:38:59:11:73:97:30:8c:02:49:34:ac:29:be:6b:57:16:
         2b:10:63:7c:ed:89:be:32:71:17:ef:e5:bf:a7:4c:9e:ab:83:
         05:b6:80:71:34:38:70:d0:f2:ee:d5:c0:d1:d4:55:28:e9:58:
         a6:50:d6:18:a4:31:aa:ab:b3:58:a6:75:b0:4c:17:b1:3a:13:
         ff:fb:60:ed:59:3d:19:73:ec:73:c0:a1:e4:4e:35:66:a3:9b:
         59:c6:93:b0:f5:04:60:90:30:59:40:18:26:9d:48:56:b0:99:
         8b:43:86:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 19:14:35 2026 by rpki-client