Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
File:                     jHFLbLK61OdjmoqicQKPWqG8asI.mft (raw, json)
Hash identifier:          NxXqelLgF+UGE5HlhR0KnT4u719erK2X0GHGbEoiLyQ=
Subject key identifier:   38:16:EB:58:44:B3:B2:21:64:48:56:D4:15:0E:FF:7E:5A:BE:83:92
Authority key identifier: 8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Certificate issuer:       /CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Certificate serial:       019FA297093FAD532CAA8D711820F5B88333
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
Manifest number:          0981
Signing time:             Mon 27 Jul 2026 08:00:35 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:35 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:35 +0000
Files and hashes:         1: 6OOD29aIeaHAx0qgJpTJ6KDT3u0.roa (hash: 8J2WJB/VLvKQOK6i31tcBc6LXb3vL5N57PAT8PQdxP8=)
                          2: jHFLbLK61OdjmoqicQKPWqG8asI.crl (hash: oyQq/HxA/5rVQz9idMYR82Xx84dWN1b0B6hsTcQv8aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:09:3f:ad:53:2c:aa:8d:71:18:20:f5:b8:83:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
        Validity
            Not Before: Jul 27 08:00:35 2026 GMT
            Not After : Jul 28 08:00:35 2026 GMT
        Subject: CN=3816eb5844b3b221644856d4150eff7e5abe8392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:83:d8:28:f7:3d:18:3e:38:9e:5b:7a:aa:
                    c8:75:86:dd:7e:8f:59:46:a9:b5:96:e1:a6:f7:0c:
                    67:f7:5b:25:b4:f3:5b:a2:20:ba:5c:3c:b0:b8:58:
                    2f:67:9f:27:5e:6b:43:b7:29:77:1f:7f:42:44:03:
                    79:33:90:56:1c:90:56:26:f2:a7:15:f3:b4:3d:5c:
                    aa:07:3e:7f:d6:09:d8:27:1f:79:2b:c2:3c:f8:89:
                    10:67:3d:18:4b:f2:1d:47:5a:21:2a:a9:d2:71:38:
                    05:5a:42:e6:48:c5:52:d6:0a:99:5b:69:f1:c0:e5:
                    b9:93:ac:c4:de:d6:41:2f:3b:2c:31:fe:3d:ed:de:
                    cd:39:19:5c:09:94:60:ed:0b:68:75:ef:33:73:c1:
                    2a:c7:6a:b4:e2:9f:af:f6:54:af:ed:ca:c3:7b:bc:
                    83:be:c5:4a:fd:b1:c3:51:20:a9:eb:6e:61:71:38:
                    4d:8e:c5:0f:10:ce:4b:9a:33:10:2b:c5:c1:65:fb:
                    c5:ad:20:33:01:2b:2f:ff:8c:14:2a:52:c7:6d:8b:
                    71:fd:54:f0:1d:62:80:e5:95:ae:b5:d8:ea:42:44:
                    c7:c2:7b:56:8f:a8:e3:19:9c:2c:54:c0:02:50:cd:
                    c1:70:6b:87:e8:70:44:d0:44:04:fd:61:f7:89:19:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:16:EB:58:44:B3:B2:21:64:48:56:D4:15:0E:FF:7E:5A:BE:83:92
            X509v3 Authority Key Identifier:
                keyid:8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:9d:54:45:02:d4:fb:46:55:8c:15:ff:09:17:ae:fa:95:42:
         86:3d:0d:a9:4d:7a:c8:8a:56:9f:f3:36:b9:15:1c:6f:7f:0c:
         b0:f0:47:4d:5c:0b:39:0d:06:7e:0c:89:47:42:a6:72:a9:44:
         82:07:4b:b2:84:31:04:d4:6f:46:8e:05:86:96:8d:84:01:61:
         e2:6e:64:9c:aa:cc:b7:58:04:16:55:62:bd:89:a5:87:b0:85:
         e4:8e:27:88:1c:bd:e8:d5:20:ea:13:87:b6:b7:2a:62:8d:ca:
         66:a0:d8:b9:49:9e:4b:b6:79:a8:7b:0e:f0:1a:f3:f7:c3:49:
         30:c9:3d:20:4c:24:4b:9a:3f:ab:07:6a:68:ee:b9:e3:1c:34:
         de:38:b8:0c:9a:dd:ed:94:36:e2:47:f4:26:89:8d:b6:00:74:
         e2:12:f2:b7:e6:35:64:ae:10:60:08:11:b1:45:03:8d:1f:f8:
         ca:8b:8b:cf:ed:c2:bc:4f:80:79:3e:dd:a8:f7:30:d2:6b:97:
         6b:95:f3:09:4d:20:25:f9:30:dd:c2:d3:96:47:53:96:5a:bb:
         12:b9:ec:bf:8b:ce:08:07:41:be:91:88:c2:64:12:89:83:41:
         ad:f6:d9:64:84:4c:0a:b9:18:64:4f:b9:f4:e5:a8:e7:92:90:
         f2:8d:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:48:59 2026 by rpki-client