Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
File:                     b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft (raw, json)
Hash identifier:          77w+00YL9/+PWKWwhYYJa0lMtFH7FbtPfuDE2DaCxi0=
Subject key identifier:   DA:2C:22:6F:38:F4:DF:AC:68:8D:49:BD:75:78:CF:91:00:22:4E:3F
Authority key identifier: 6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B
Certificate issuer:       /CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
Certificate serial:       019EFD60240BE0AD7FE4913B50DE911838CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
Manifest number:          016A
Signing time:             Thu 25 Jun 2026 06:03:16 +0000
Manifest this update:     Thu 25 Jun 2026 06:03:16 +0000
Manifest next update:     Fri 26 Jun 2026 06:03:16 +0000
Files and hashes:         1: 4wo1dq-Efi_1fpQmUUaWK8oTx3E.asa (hash: bvw71MHh0GCvQdivbbAJLSQJYxAa+8FLArPZcPrCVAE=)
                          2: b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl (hash: n+QTZ/3JUyEbN6sJct4mleXMSNVu/ogQ7Mp5zisCnLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fd:60:24:0b:e0:ad:7f:e4:91:3b:50:de:91:18:38:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc333de2d8e7037134254c27ce1c42bf475a28b
        Validity
            Not Before: Jun 25 06:03:16 2026 GMT
            Not After : Jun 26 06:03:16 2026 GMT
        Subject: CN=da2c226f38f4dfac688d49bd7578cf9100224e3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:43:92:ca:5a:7d:38:ed:af:da:fd:25:5b:
                    fd:3f:1e:0a:e8:96:0c:df:6a:b3:60:44:8a:1b:65:
                    39:22:22:3f:db:eb:44:52:21:71:a7:cc:a2:fd:3e:
                    12:77:4b:0b:3b:08:c2:ba:f2:fa:b7:c1:a5:56:95:
                    ea:64:1e:a5:e1:0c:83:8c:f0:bc:56:e9:8d:32:fc:
                    e7:f8:a3:37:62:51:29:ea:9e:58:af:9f:36:29:7c:
                    d2:8f:19:b8:5b:79:8f:41:a7:a5:c8:45:a4:3b:93:
                    17:66:41:1b:68:33:94:0c:f9:08:3e:2a:fc:cd:e1:
                    f3:d2:43:78:f6:6b:d6:48:43:d6:59:79:fd:86:a5:
                    02:6c:dd:3b:6a:0f:10:62:7b:2c:a7:fe:04:c9:cd:
                    83:6f:9f:83:53:b2:68:22:60:2e:99:4b:b2:d7:5d:
                    21:a2:bc:17:c6:e0:ae:44:1c:51:07:05:2a:be:38:
                    43:e9:82:b7:15:5f:96:e3:1a:02:eb:90:2b:b3:59:
                    4e:70:73:95:34:87:e7:5c:d8:c7:00:fd:6d:50:c0:
                    b5:5a:38:8b:14:00:87:1e:4c:c6:ad:be:f1:48:b3:
                    e9:10:24:68:21:73:d0:c0:a0:a1:5f:76:19:b8:92:
                    88:de:07:76:ae:ac:a1:b8:f8:41:e4:1f:9b:0f:0d:
                    9b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2C:22:6F:38:F4:DF:AC:68:8D:49:BD:75:78:CF:91:00:22:4E:3F
            X509v3 Authority Key Identifier:
                keyid:6F:C3:33:DE:2D:8E:70:37:13:42:54:C2:7C:E1:C4:2B:F4:75:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8Mz3i2OcDcTQlTCfOHEK_R1oos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/cf2298-4314-4d30-954b-aa746cab5415/1/b8Mz3i2OcDcTQlTCfOHEK_R1oos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:67:d2:a4:65:f8:22:f7:7d:ea:4c:6c:86:13:87:15:92:62:
         3b:02:cd:17:71:c1:57:3c:54:d5:ba:d6:67:99:f9:98:ec:00:
         11:76:ba:15:e9:7a:de:bc:0a:6b:ea:b6:aa:72:7a:69:a4:ce:
         9b:c3:fe:99:9a:c9:b5:fc:35:e9:10:7d:06:a2:a9:31:fc:c3:
         d5:29:bc:6c:d6:da:e5:c0:c4:ce:ba:dd:f1:e3:63:29:32:f7:
         e2:02:9d:84:04:b3:d4:4d:d7:99:02:f6:54:cd:d4:90:a0:85:
         5e:52:bd:fb:97:f7:69:39:f7:7b:09:9c:f2:85:b0:b9:ce:ba:
         b6:01:44:a6:ca:90:5c:ec:84:ae:40:b6:3b:c8:a9:2d:56:87:
         48:ca:60:c0:6b:be:4b:f6:7e:e7:81:51:be:0c:cc:bf:1c:09:
         69:93:b9:08:98:a6:f6:f5:ff:fc:93:1a:37:16:f6:82:0c:11:
         2e:18:ed:86:bb:b1:0b:a6:d5:49:7c:19:06:ff:8b:d6:5e:6f:
         c5:b7:a5:6f:ca:31:d3:0a:d6:d7:63:75:a2:1c:6f:85:ef:b2:
         cc:a0:20:5f:60:59:4c:4e:d5:2d:33:a2:70:c5:ac:e4:bf:01:
         bd:69:4f:8b:5f:12:58:5d:46:14:0d:d7:6f:0c:de:eb:17:3d:
         32:3c:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 09:38:17 2026 by rpki-client