Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
File:                     8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft (raw, json)
Hash identifier:          7BREjA0hnyuV9kzWCoGLFKacvr6B9ZUQYmbE1WIdwCY=
Subject key identifier:   B9:EF:C7:AF:B9:C8:E1:D7:CD:CA:B8:FC:4A:B7:22:3B:5C:66:14:53
Authority key identifier: F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C
Certificate issuer:       /CN=f0a9005423147453909366c6b4d09c31958acc1c
Certificate serial:       019FA229273B2529C3572445C424C8F30089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
Manifest number:          0369
Signing time:             Mon 27 Jul 2026 06:00:33 +0000
Manifest this update:     Mon 27 Jul 2026 06:00:33 +0000
Manifest next update:     Tue 28 Jul 2026 06:00:33 +0000
Files and hashes:         1: 8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl (hash: LXN7gSBgHwonayu7bjPflYZwFo2ct9SQp6/kREkN0EM=)
                          2: XcFf7Up-3gxNLfYQhK3orqJHx2g.roa (hash: QLiEavcgMLadSiCowCkkaoXoMEv3eEuB33IWa6r1pTA=)
                          3: dHpkVz1qG-AF-2ObL_WKlgFCa5A.roa (hash: pDto/Hqi4osJfNZa1fOxjtdmxoHJy3MfMIgMhgvqHY8=)
                          4: i2pSpEnVtokJriFjoKmVIGfuRJo.roa (hash: D+Hmz9bjiSh22qk0mMxyTTXET+bcUl31CAB7ub4kHU4=)
                          5: w3Ce4TCDal1nhbZgs86uVw-EDHA.roa (hash: Y1YtZuc0ZO1egV90xVGx2//JBR2jEYUzSnwVAWKeAz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:29:27:3b:25:29:c3:57:24:45:c4:24:c8:f3:00:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0a9005423147453909366c6b4d09c31958acc1c
        Validity
            Not Before: Jul 27 06:00:33 2026 GMT
            Not After : Jul 28 06:00:33 2026 GMT
        Subject: CN=b9efc7afb9c8e1d7cdcab8fc4ab7223b5c661453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:28:5e:00:ad:6d:5a:24:33:e3:69:e5:a1:
                    f8:07:74:ec:4f:0a:fc:cf:fa:ff:99:af:f3:02:41:
                    39:88:4c:19:33:f5:69:07:f0:40:d0:e5:46:70:90:
                    5f:79:7e:f6:9e:c4:2e:c5:5c:4a:93:3d:39:df:88:
                    72:c4:95:dd:34:53:28:cc:77:9b:bc:97:03:24:33:
                    33:83:d8:17:f6:f1:73:80:7c:d1:fd:41:0b:77:e6:
                    9d:ca:4b:d6:97:b7:0f:8a:9b:74:7f:65:35:27:e2:
                    df:49:23:d3:34:23:c3:2d:a5:44:41:7f:1e:92:66:
                    ce:5d:e2:87:cf:fa:11:1f:5b:c5:bb:ad:58:32:9f:
                    d9:64:50:d8:27:6e:4a:c1:14:af:47:25:27:a6:9a:
                    ac:3f:d9:fd:d5:9e:90:4c:b6:d5:d2:8a:bb:3a:7c:
                    6c:03:81:74:c0:36:1a:e0:d6:12:61:99:3b:7e:4b:
                    a0:a8:6d:b0:41:cb:88:29:28:08:59:c9:9f:31:fb:
                    12:c3:9e:36:1b:57:10:2f:d4:21:2b:b1:d1:95:31:
                    bc:44:88:e4:d5:6d:cc:42:ce:3f:10:59:32:12:8f:
                    8e:52:84:f1:39:4b:04:a7:28:7f:ec:2d:31:12:92:
                    43:4e:4e:3b:59:53:14:2e:3f:67:ed:b7:23:3c:63:
                    0e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EF:C7:AF:B9:C8:E1:D7:CD:CA:B8:FC:4A:B7:22:3B:5C:66:14:53
            X509v3 Authority Key Identifier:
                keyid:F0:A9:00:54:23:14:74:53:90:93:66:C6:B4:D0:9C:31:95:8A:CC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KkAVCMUdFOQk2bGtNCcMZWKzBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/157af6-cce2-4e6d-bc23-30d79f9aa877/1/8KkAVCMUdFOQk2bGtNCcMZWKzBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b5:7a:2d:39:09:2a:6b:3a:10:77:72:ab:b5:13:4b:eb:c7:
         16:81:c2:22:7d:14:6f:4f:fc:fa:d9:ce:a3:c9:d8:d9:8c:6d:
         eb:fe:3b:27:d5:93:06:89:7d:7e:07:25:c3:bb:e3:38:d0:02:
         96:6c:8d:c3:ec:2e:42:47:f4:5d:43:d5:6b:38:e3:9f:e0:7e:
         68:9d:46:e1:04:e7:67:18:7a:23:a9:88:d1:fa:cb:69:6a:70:
         95:d2:c9:f8:cc:a9:61:98:cc:92:a4:c9:13:2d:24:1b:69:3e:
         e1:25:27:53:71:ea:18:43:54:df:78:3e:4e:b8:cc:02:21:71:
         3a:e0:be:8f:35:49:90:0f:97:ff:01:b9:11:9c:7e:7e:c9:72:
         aa:67:2d:27:0d:0b:a8:e6:80:53:13:89:6d:bd:4a:3d:fb:99:
         14:8a:4a:cf:f3:cb:33:b5:9f:85:23:47:36:04:68:c2:13:e5:
         f1:6f:c9:91:6c:de:89:15:37:4b:b9:ca:7a:fb:e3:c0:7a:f0:
         c6:ea:6b:75:b4:06:20:00:0e:f1:5c:7c:d5:6b:9a:01:a3:e6:
         5b:c3:8a:13:42:11:5e:c0:5a:73:b6:04:97:b8:12:18:ed:50:
         d1:2b:03:97:f8:32:72:08:9e:69:49:cf:09:41:c2:5a:a5:35:
         8f:6d:29:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:37 2026 by rpki-client