Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File:                     8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier:          opFX2ZO7g7E7D24cJR6M+JCkF2n/ziqD8qmU2bniLXM=
Subject key identifier:   44:C1:E2:C5:1E:85:CA:3B:0D:83:98:62:68:42:62:E8:D3:43:3B:7E
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer:       /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial:       019F9FCD68FCA442A30A0AE8BD6854CC1661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number:          0A2B
Signing time:             Sun 26 Jul 2026 19:01:06 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:06 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:06 +0000
Files and hashes:         1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: yIF3uhYqXcpkoI06za1K7kcbanPBdH/7Us2R6hohCpc=)
                          2: cqVoU67CwExthfXQtnUzx-lv3-A.roa (hash: 5F5B0oJP8h6OFxnMOS4l6tglzKyriTHb6L1MzQyUoV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:68:fc:a4:42:a3:0a:0a:e8:bd:68:54:cc:16:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
        Validity
            Not Before: Jul 26 19:01:06 2026 GMT
            Not After : Jul 27 19:01:06 2026 GMT
        Subject: CN=44c1e2c51e85ca3b0d839862684262e8d3433b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:e4:89:13:f0:e2:a5:c7:b3:a2:ac:58:7b:
                    1c:7d:ce:c1:c7:f4:d9:0c:6b:f6:ec:39:d3:23:8a:
                    6f:a2:61:bd:ed:6e:f0:74:b8:8a:64:a8:18:78:eb:
                    88:6c:9b:79:14:1d:e5:73:96:7e:14:8e:b2:b9:d9:
                    10:c0:73:5c:a1:6b:85:2b:59:19:b9:d0:48:1c:86:
                    2b:f7:26:50:d9:93:2d:49:fc:dc:09:25:02:52:2f:
                    9c:61:21:e0:9d:4e:1d:96:76:8f:bb:bf:6b:44:86:
                    90:3c:70:97:f1:11:29:27:6d:88:68:a2:07:9f:b4:
                    6e:03:34:6f:53:21:88:b3:cf:4b:dd:ba:7b:70:17:
                    db:bd:8b:8c:bf:54:23:b1:6f:bd:32:19:c4:af:fd:
                    ef:65:bb:66:80:4d:ab:db:62:d4:70:e3:25:30:00:
                    d8:f6:39:90:24:4f:18:7a:f0:c0:e3:92:69:c5:6b:
                    44:20:7a:16:aa:07:f8:eb:23:11:0e:5d:59:3e:4b:
                    1d:b7:d6:c3:6a:8d:c9:7d:df:46:a6:18:37:89:5a:
                    87:e6:b9:06:37:40:33:79:f5:60:3d:96:b6:c0:6a:
                    18:3f:f8:df:03:e3:4e:6b:7f:88:e0:e0:e2:db:02:
                    b7:b8:63:ce:a2:f6:bf:43:79:f4:88:a0:2f:c5:6f:
                    48:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C1:E2:C5:1E:85:CA:3B:0D:83:98:62:68:42:62:E8:D3:43:3B:7E
            X509v3 Authority Key Identifier:
                keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a8:3f:36:1f:90:b8:40:d1:5b:51:bd:ec:f5:88:cc:7a:68:
         19:ca:97:a6:f1:75:bd:38:6e:b0:73:31:73:2f:c2:49:12:6e:
         38:81:11:fb:42:2a:8a:20:40:ab:ad:e6:34:19:37:69:7e:0a:
         09:60:36:de:52:37:7a:7e:aa:26:da:30:93:c8:61:ea:73:cd:
         73:fb:d3:80:31:f2:0b:66:c6:11:85:48:a8:80:b6:67:71:ee:
         f9:67:37:2f:b2:d1:b9:7e:86:88:65:c4:00:3d:6f:d4:17:3f:
         6f:c8:d6:4b:d3:3e:61:9f:5e:90:92:5a:f8:d7:a2:2c:1f:02:
         4c:34:71:43:77:df:fd:9f:38:3c:62:15:f2:55:11:f5:83:56:
         94:0a:9d:03:5c:20:e1:7d:c2:a2:ed:d9:4d:b9:05:ab:85:0c:
         5a:73:71:5c:43:25:53:51:70:21:5f:97:e4:79:70:cd:81:e3:
         9e:af:2e:b4:23:9d:25:41:84:0f:a7:b0:b3:01:7e:5e:d3:85:
         ba:64:78:da:64:5e:25:8e:be:b6:3c:55:6f:40:20:78:5c:61:
         61:15:b3:3d:45:7a:c0:08:44:5b:fb:15:66:6b:d9:ba:e7:fc:
         4b:18:8b:88:d4:10:5e:95:5d:5c:52:aa:17:d9:0b:25:1f:01:
         e0:6d:d1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzWj8pEKjCgrovWhUzBZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNDNkMTNjN2JiZDJhYTE1ZjU2NzdjMTM5YWMzM2M4Njc4
NzlmMmMwHhcNMjYwNzI2MTkwMTA2WhcNMjYwNzI3MTkwMTA2WjAzMTEwLwYDVQQD
Eyg0NGMxZTJjNTFlODVjYTNiMGQ4Mzk4NjI2ODQyNjJlOGQzNDMzYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd/kiRPw4qXHs6KsWHscfc7Bx/TZ
DGv27DnTI4pvomG97W7wdLiKZKgYeOuIbJt5FB3lc5Z+FI6yudkQwHNcoWuFK1kZ
udBIHIYr9yZQ2ZMtSfzcCSUCUi+cYSHgnU4dlnaPu79rRIaQPHCX8REpJ22IaKIH
n7RuAzRvUyGIs89L3bp7cBfbvYuMv1QjsW+9MhnEr/3vZbtmgE2r22LUcOMlMADY
9jmQJE8YevDA45JpxWtEIHoWqgf46yMRDl1ZPksdt9bDao3Jfd9Gphg3iVqH5rkG
N0AzefVgPZa2wGoYP/jfA+NOa3+I4ODi2wK3uGPOova/Q3n0iKAvxW9IcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFETB4sUehco7DYOYYmhCYujTQzt+MB8GA1UdIwQY
MBaAFPFD0Tx7vSqhX1Z3wTmsM8hnh58sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQt
YTE0NmExYjAxZjhmLzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy84MzU5Y2UtYmJkNC00MjUzLTk0NjQtYTE0NmExYjAxZjhm
LzEvOFVQUlBIdTlLcUZmVm5mQk9hd3p5R2VIbnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6g/Nh+Q
uEDRW1G97PWIzHpoGcqXpvF1vThusHMxcy/CSRJuOIER+0IqiiBAq63mNBk3aX4K
CWA23lI3en6qJtowk8hh6nPNc/vTgDHyC2bGEYVIqIC2Z3Hu+Wc3L7LRuX6GiGXE
AD1v1Bc/b8jWS9M+YZ9ekJJa+NeiLB8CTDRxQ3ff/Z84PGIV8lUR9YNWlAqdA1wg
4X3Cou3ZTbkFq4UMWnNxXEMlU1FwIV+X5HlwzYHjnq8utCOdJUGED6ewswF+XtOF
umR42mReJY6+tjxVb0AgeFxhYRWzPUV6wAhEW/sVZmvZuuf8SxiLiNQQXpVdXFKq
F9kLJR8B4G3Rdg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:10 2026 by rpki-client