Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
File:                     MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft (raw, json)
Hash identifier:          y/zG8EeFPJbvmDgGeJlXgBLjzTDwJjqdyJkv3CcrKAs=
Subject key identifier:   0A:B2:42:0E:D4:6B:21:BB:7A:D5:71:9F:A4:7D:4E:80:0B:0B:D8:F9
Authority key identifier: 30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA
Certificate issuer:       /CN=302f09f265e9b278f8073d6982ff175713a5a0fa
Certificate serial:       019FA0E0718321351F2580DFA8D1EAAF9168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
Manifest number:          0B44
Signing time:             Mon 27 Jul 2026 00:01:31 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:31 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:31 +0000
Files and hashes:         1: MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl (hash: CIqreU2XKtvd3iOTECLxHvraPlXhIcK5fJz5wFJYgGs=)
                          2: RPrBbEnoUjqZ5cz7T7a5GYWXCcM.roa (hash: CRq+pDZeUDRucY39aQu9W9dJZ2hkbZK+EIWSe9Ksg/E=)
                          3: _No3AaXXRlHLcpFNSmUWopTAJdg.roa (hash: EJSEOoxCaCh+aZvxqJVPw2pAxsLbMiGabHj8Ve+PjSE=)
                          4: swGFUTWOXUe99AW4UAnyiW3gY2Q.roa (hash: m5rwzGfEVZaEpVcuRJk6LpH2JpmpgTyQJgllQOQrn/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:71:83:21:35:1f:25:80:df:a8:d1:ea:af:91:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302f09f265e9b278f8073d6982ff175713a5a0fa
        Validity
            Not Before: Jul 27 00:01:31 2026 GMT
            Not After : Jul 28 00:01:31 2026 GMT
        Subject: CN=0ab2420ed46b21bb7ad5719fa47d4e800b0bd8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c7:23:1d:40:fe:b4:ee:b4:50:4a:dd:de:20:
                    c5:28:4d:48:15:8f:d8:b8:93:86:29:cc:da:8b:33:
                    d9:d9:fd:17:e3:b0:7c:f5:0a:c9:52:09:51:35:97:
                    4b:b6:b6:83:18:b6:c4:b9:fd:62:a4:39:cc:ce:f4:
                    ed:da:a2:68:a8:d1:ea:fa:6d:95:51:e2:a2:12:a0:
                    37:47:83:e9:a6:b7:09:18:66:5a:5b:c8:b9:21:ab:
                    8c:38:f7:60:11:20:8c:10:08:e5:27:65:cd:6d:a0:
                    58:dc:55:99:39:cb:4f:d3:4a:e5:01:34:41:a6:cb:
                    a1:d9:e0:b0:bd:ec:82:12:b1:ea:9d:30:61:cf:ae:
                    66:d0:3c:b2:90:3c:e8:94:3e:4c:de:c7:41:d2:8a:
                    6e:ca:11:7e:a9:e9:ae:45:bc:21:3f:ad:ed:c8:10:
                    bd:ba:ac:c0:97:d6:a8:98:d8:0f:70:7e:4b:00:3a:
                    2a:63:29:a8:a0:7d:8a:09:6a:73:11:69:94:ed:dd:
                    2e:66:4f:a0:eb:d2:7b:45:64:9a:f0:83:0d:6a:fb:
                    77:b4:78:9a:4e:59:94:d0:2b:f9:d2:fa:b5:4c:4d:
                    cb:00:92:ae:38:b0:53:2c:90:68:65:f1:43:4a:05:
                    ac:2c:59:8d:91:b1:d1:a8:61:15:cd:fa:48:d5:b7:
                    8b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B2:42:0E:D4:6B:21:BB:7A:D5:71:9F:A4:7D:4E:80:0B:0B:D8:F9
            X509v3 Authority Key Identifier:
                keyid:30:2F:09:F2:65:E9:B2:78:F8:07:3D:69:82:FF:17:57:13:A5:A0:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC8J8mXpsnj4Bz1pgv8XVxOloPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e75ad2-1e30-455e-9787-3b55f2327b34/1/MC8J8mXpsnj4Bz1pgv8XVxOloPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fe:49:52:ab:dd:e1:21:71:36:2c:12:8f:ba:dd:20:db:ea:
         2d:4f:ee:71:1b:b8:75:5f:b9:46:c1:1e:bb:03:6b:a3:04:64:
         fb:d1:1c:1d:3d:e8:f9:90:1d:a1:bb:48:47:19:d7:ab:d7:f8:
         c2:62:7e:43:f6:f1:f3:9f:c3:a1:9b:61:c7:29:2f:f2:56:1c:
         83:1d:bf:ef:33:4b:7f:00:a9:c5:c0:cc:a8:40:9b:0c:e5:f9:
         3d:e5:ae:1c:f0:0a:a5:cf:1f:d3:51:6b:2e:28:b5:0c:ab:43:
         a0:37:76:93:17:6e:2f:b6:24:7e:ab:44:4d:82:ed:1a:cd:74:
         9b:e2:09:d7:55:be:c6:a2:d1:4f:b7:9f:5a:b4:a0:91:e7:a5:
         05:c5:38:29:db:25:a3:a1:0e:6b:85:5a:04:18:42:13:79:51:
         40:90:e0:f3:09:16:ce:d5:27:7f:dd:6b:ec:59:d3:a2:45:c3:
         0d:e6:7e:db:c3:df:6b:eb:f7:a5:cf:6c:af:aa:e6:ef:9d:f2:
         da:8e:27:0a:15:87:e8:86:40:26:9d:0d:06:e3:6f:86:bf:d2:
         55:c6:f0:36:d6:ed:16:1b:bc:d7:66:c7:76:22:5e:6d:5f:56:
         ed:1a:30:b4:2f:38:d7:34:23:cf:0a:ab:13:a4:50:a7:82:22:
         cc:6d:8e:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4HGDITUfJYDfqNHqr5FoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmYwOWYyNjVlOWIyNzhmODA3M2Q2OTgyZmYxNzU3MTNh
NWEwZmEwHhcNMjYwNzI3MDAwMTMxWhcNMjYwNzI4MDAwMTMxWjAzMTEwLwYDVQQD
EygwYWIyNDIwZWQ0NmIyMWJiN2FkNTcxOWZhNDdkNGU4MDBiMGJkOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8cjHUD+tO60UErd3iDFKE1IFY/Y
uJOGKczaizPZ2f0X47B89QrJUglRNZdLtraDGLbEuf1ipDnMzvTt2qJoqNHq+m2V
UeKiEqA3R4PpprcJGGZaW8i5IauMOPdgESCMEAjlJ2XNbaBY3FWZOctP00rlATRB
psuh2eCwveyCErHqnTBhz65m0DyykDzolD5M3sdB0opuyhF+qemuRbwhP63tyBC9
uqzAl9aomNgPcH5LADoqYymooH2KCWpzEWmU7d0uZk+g69J7RWSa8IMNavt3tHia
TlmU0Cv50vq1TE3LAJKuOLBTLJBoZfFDSgWsLFmNkbHRqGEVzfpI1beL1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqyQg7UayG7etVxn6R9ToALC9j5MB8GA1UdIwQY
MBaAFDAvCfJl6bJ4+Ac9aYL/F1cTpaD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODct
M2I1NWYyMzI3YjM0LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lNzVhZDItMWUzMC00NTVlLTk3ODctM2I1NWYyMzI3YjM0
LzEvTUM4SjhtWHBzbmo0QnoxcGd2OFhWeE9sb1BvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArP5JUqvd
4SFxNiwSj7rdINvqLU/ucRu4dV+5RsEeuwNrowRk+9EcHT3o+ZAdobtIRxnXq9f4
wmJ+Q/bx85/DoZthxykv8lYcgx2/7zNLfwCpxcDMqECbDOX5PeWuHPAKpc8f01Fr
Lii1DKtDoDd2kxduL7YkfqtETYLtGs10m+IJ11W+xqLRT7efWrSgkeelBcU4Kdsl
o6EOa4VaBBhCE3lRQJDg8wkWztUnf91r7FnTokXDDeZ+28Pfa+v3pc9sr6rm753y
2o4nChWH6IZAJp0NBuNvhr/SVcbwNtbtFhu812bHdiJebV9W7RowtC841zQjzwqr
E6RQp4IizG2Ovg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:11 2026 by rpki-client