Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          6PsBrkfn9ufMCEvNLzJ1lf7ibsr2Gi2FPVfIcLM1QDI=
Subject key identifier:   F1:9F:83:DA:CD:CA:5E:0C:4C:E2:3B:22:D8:D3:C3:1F:8B:42:BF:C3
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019F190C6989B19DE4DE4B485E1A4F1B50D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 15:01:11 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:11 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:11 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: FEbhbSqMSdiaH2VERDzXgiP4H97nlRNv3fB+wj6zzuU=)
                          2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:69:89:b1:9d:e4:de:4b:48:5e:1a:4f:1b:50:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Jun 30 15:01:11 2026 GMT
            Not After : Jul  1 15:01:11 2026 GMT
        Subject: CN=f19f83dacdca5e0c4ce23b22d8d3c31f8b42bfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c8:b3:e8:51:fc:d6:65:56:b6:6c:b1:ec:d0:
                    79:bf:db:e0:e0:11:88:1a:54:9a:d9:1d:3c:30:a7:
                    10:94:d2:eb:91:53:47:09:a6:d2:f7:9d:09:ea:db:
                    c9:e7:a0:e8:f1:2d:e1:5c:b2:26:c4:0d:c8:84:85:
                    aa:62:0d:1d:b9:a2:05:e1:ca:ba:4f:07:e6:e1:da:
                    4b:28:4d:d7:ff:f0:d0:7c:b8:11:72:6a:4f:99:53:
                    0d:5e:a7:17:be:10:3e:c1:06:e1:71:ce:f4:51:85:
                    d4:9a:dd:b6:5d:3a:2e:b4:4f:1b:8e:17:44:bb:f9:
                    a7:03:a6:e4:71:06:40:39:df:a4:eb:21:05:a3:f7:
                    fd:6f:3f:df:aa:5a:b7:58:d0:18:00:73:0a:bb:a5:
                    62:0e:3d:6d:4f:2a:7f:2d:73:15:aa:f3:d0:a4:b4:
                    e7:c8:d8:56:45:4d:b6:bc:05:dc:6a:86:d3:24:1a:
                    9c:3e:45:51:8f:c7:71:d9:fe:a2:02:24:6e:46:5a:
                    88:0d:19:d6:54:19:7c:e6:a2:a3:f8:56:3c:2c:2e:
                    09:dd:cc:77:62:30:f7:13:77:ff:ea:14:b9:21:e0:
                    74:36:8b:76:93:c2:ba:c3:c0:2e:03:3e:ab:87:db:
                    7f:44:48:d0:87:31:3b:7e:85:a6:c4:60:16:c5:87:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:9F:83:DA:CD:CA:5E:0C:4C:E2:3B:22:D8:D3:C3:1F:8B:42:BF:C3
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:33:7e:06:69:a1:b4:7b:24:7c:51:cc:9d:c6:46:95:f1:45:
         af:e4:bf:f2:bb:31:1e:aa:6f:46:bd:cb:cd:3e:cf:a5:cf:a3:
         eb:0e:33:6f:7a:94:51:00:6c:48:ce:66:61:da:70:ff:2f:5d:
         44:8e:4d:47:ea:5b:7f:31:12:b1:9b:34:7c:2d:2f:a3:c5:b4:
         79:7b:51:d1:22:f9:78:16:d2:06:94:c5:a1:1f:b0:33:ce:6c:
         ad:62:6c:99:0c:d7:9e:8c:68:4c:0b:1e:92:da:f0:ee:2e:0e:
         8c:10:51:17:f7:91:9d:55:ad:73:50:cd:1c:66:93:13:17:9c:
         10:9e:15:09:a3:7d:3d:4d:b6:33:41:3f:ae:3d:fd:29:d7:42:
         33:ea:49:77:e4:bc:aa:72:d1:91:d9:7c:5a:06:83:bf:74:47:
         77:5a:11:73:c9:0d:51:70:e4:96:26:cc:b6:ec:b9:ba:82:97:
         a9:52:54:a5:8f:14:53:14:2d:3f:82:24:8a:e6:0a:c1:88:48:
         65:99:53:7d:7a:e8:49:a9:f6:f8:3d:6e:69:3b:74:1f:46:98:
         a2:78:e4:4f:25:22:d2:08:d5:6f:54:5f:84:6b:e4:2b:45:04:
         5c:d6:c2:ac:77:83:e2:7e:91:c7:cb:41:6e:55:23:47:7d:d7:
         5a:42:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:09:44 2026 by rpki-client