Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
File:                     8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft (raw, json)
Hash identifier:          DI6p26uY9wOdb78aN0nKTfKweN4iYG0ecy5cqC9xTKU=
Subject key identifier:   FE:B3:85:96:C0:BF:CB:05:4A:C2:E6:44:3E:3D:1F:83:EB:2D:E4:7C
Authority key identifier: F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2
Certificate issuer:       /CN=f1bb5228e6740755a3226ee32c8531a175457bc2
Certificate serial:       019F9EF17FD0A86AB711081A8BABED389792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
Manifest number:          47
Signing time:             Sun 26 Jul 2026 15:00:54 +0000
Manifest this update:     Sun 26 Jul 2026 15:00:54 +0000
Manifest next update:     Mon 27 Jul 2026 15:00:54 +0000
Files and hashes:         1: 8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl (hash: PrsZhjRCusRFTEgfkDI+9dgApwz75aRhOZWapzoXBMk=)
                          2: jyJWlzyZ1vX6PJ6bDoA7JzTaum8.roa (hash: tR46ai3C4TAvLUk9BEjJ8S6Zo8lFI3KVbuM5/C/MToI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f1:7f:d0:a8:6a:b7:11:08:1a:8b:ab:ed:38:97:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bb5228e6740755a3226ee32c8531a175457bc2
        Validity
            Not Before: Jul 26 15:00:54 2026 GMT
            Not After : Jul 27 15:00:54 2026 GMT
        Subject: CN=feb38596c0bfcb054ac2e6443e3d1f83eb2de47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:03:46:33:44:0d:75:c3:5c:09:ae:e9:36:26:
                    0a:64:85:a3:12:98:5f:26:5d:50:90:8e:69:76:bd:
                    e1:0e:99:29:2c:64:9f:49:21:c3:26:b5:d3:ef:59:
                    63:2d:75:2b:58:0a:f4:ec:64:d9:02:71:f1:97:cf:
                    59:80:85:93:3f:55:a2:43:e4:21:19:51:b7:c5:d6:
                    64:93:a5:bd:a6:c0:66:ac:b1:39:14:05:31:88:e0:
                    d7:79:d9:10:0a:63:f6:45:83:d3:36:d3:e7:d9:4a:
                    98:09:d4:7c:2c:8b:b0:f1:d0:79:44:68:bd:13:aa:
                    fa:5a:8c:a6:7e:5c:b1:0f:f7:d1:29:92:3a:c1:b6:
                    50:ef:19:fd:ba:af:19:d1:69:09:4a:e0:40:68:2f:
                    06:fd:78:e8:c3:a2:41:be:02:9d:25:09:83:5a:f4:
                    28:71:8b:eb:fa:c8:3f:0e:c0:60:49:48:4f:10:34:
                    60:37:e3:ed:98:f8:ef:65:5f:ce:66:44:79:d6:f1:
                    82:53:5e:84:c3:c7:17:d0:98:ab:07:d9:72:94:f4:
                    17:8f:93:95:b7:c4:74:99:8d:02:62:a0:5e:0c:d3:
                    a7:e4:82:dc:38:ea:eb:f2:6d:db:db:c5:10:7b:f4:
                    40:7c:00:90:49:ce:ac:f3:60:df:6b:e3:a9:5b:8c:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B3:85:96:C0:BF:CB:05:4A:C2:E6:44:3E:3D:1F:83:EB:2D:E4:7C
            X509v3 Authority Key Identifier:
                keyid:F1:BB:52:28:E6:74:07:55:A3:22:6E:E3:2C:85:31:A1:75:45:7B:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8btSKOZ0B1WjIm7jLIUxoXVFe8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c8f6e1-46c8-4e12-8ce6-95b9e362f077/1/8btSKOZ0B1WjIm7jLIUxoXVFe8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f4:6e:78:fd:f9:5e:80:fa:d3:f6:17:8c:a2:d4:ef:8e:4c:
         14:d9:30:79:0a:73:a6:85:40:8c:0e:cf:ec:2f:20:89:70:a2:
         79:29:72:f0:25:72:96:93:ba:c8:d4:a2:8d:13:3d:9c:8c:3d:
         45:de:08:5c:2e:45:3a:3b:a7:43:cd:1c:14:8e:66:2f:f1:07:
         65:d4:12:31:ab:cf:45:37:ec:e0:6b:81:6f:66:ba:ea:98:2c:
         9d:73:ec:e4:1a:dd:48:a8:c4:72:b5:ae:92:a4:56:8d:16:4a:
         d3:58:7f:15:b0:47:10:b3:91:2b:79:62:a1:13:c8:7e:8b:69:
         bc:87:3d:e7:a9:be:0e:53:23:bf:23:f4:05:bb:2d:9c:6d:3e:
         2f:72:53:e6:f4:5c:46:26:04:68:35:da:54:28:28:65:d0:a4:
         fb:fc:80:41:0d:03:71:5f:0d:eb:28:40:f5:09:e7:a0:db:7c:
         f4:3a:fc:76:08:fa:b8:83:d9:85:bd:29:d7:d3:1e:99:32:0f:
         c2:50:e8:06:cd:62:31:b5:ec:b6:ef:91:4d:3a:57:f0:72:0b:
         2f:75:08:a3:ee:d4:de:d9:7a:25:2d:19:8d:2d:a2:c1:01:c2:
         de:75:f2:21:6a:36:c8:d3:64:95:d5:fd:86:92:77:e0:f6:4a:
         79:9c:0e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:51:21 2026 by rpki-client