Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File:                     8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier:          Kc2uEI1kd3IFyC0NVvo5GieuZ5bUkYkjKkknWbPOoco=
Subject key identifier:   99:91:16:97:52:00:75:92:C7:5F:6E:BA:EA:D5:A1:37:91:3F:CC:19
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer:       /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial:       019F189E5C860E623DF13C7455C8B7D3B64D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number:          198A
Signing time:             Tue 30 Jun 2026 13:00:59 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:59 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:59 +0000
Files and hashes:         1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: K3oMTH/2rXWWdAKWptP9AgGx6uo0L76Sr+vtzVn8M64=)
                          2: Uhh2a08gwiDaMSROk1rK4331Chw.roa (hash: 8oJqf3hEnDAqhg+fdWdx5w+WvA2GyWV10zwFhqN5lCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:5c:86:0e:62:3d:f1:3c:74:55:c8:b7:d3:b6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
        Validity
            Not Before: Jun 30 13:00:59 2026 GMT
            Not After : Jul  1 13:00:59 2026 GMT
        Subject: CN=9991169752007592c75f6ebaead5a137913fcc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:59:cf:14:21:3f:31:31:10:e6:8d:d9:b4:
                    fd:c5:9d:17:26:c2:a5:f8:a6:18:64:82:c0:b8:5e:
                    39:ad:70:42:f3:80:93:b1:51:31:c8:88:20:b6:3f:
                    79:fc:12:b1:9a:bd:ef:16:e5:4b:c2:db:4a:5b:d8:
                    13:48:fa:b5:fc:44:02:8f:12:ac:72:f5:cb:e0:c9:
                    21:ee:c0:59:1f:08:ec:83:aa:6f:58:d9:46:05:dd:
                    75:e0:7a:95:de:1e:b8:e2:4a:0b:7f:22:d7:2c:c7:
                    b8:15:4c:fe:73:2c:6a:e7:a6:8f:50:16:9d:c4:57:
                    71:db:49:e6:be:5d:91:75:31:a0:c3:79:73:e8:24:
                    d7:cc:e5:d3:97:a4:80:74:52:29:9b:6a:c2:33:a8:
                    3d:db:08:ec:d0:cd:b4:76:f0:cc:8f:a8:e9:d3:28:
                    a1:95:ae:f1:85:82:16:07:ca:56:66:44:4f:50:e8:
                    6f:92:25:95:0c:3d:c8:fa:6c:18:88:14:ad:a6:5f:
                    52:6e:73:39:60:32:14:b1:ce:d8:16:d9:4f:66:38:
                    35:62:b6:4c:e2:ba:de:e7:91:59:49:52:f4:cd:e9:
                    ca:cf:c2:87:67:af:32:32:77:29:20:1c:06:71:5c:
                    16:d2:e7:9e:de:7a:3a:ff:ff:8b:b6:31:ab:4e:2d:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:91:16:97:52:00:75:92:C7:5F:6E:BA:EA:D5:A1:37:91:3F:CC:19
            X509v3 Authority Key Identifier:
                keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:45:e0:27:6d:c2:93:89:78:7a:25:6f:c5:67:1b:5a:30:37:
         57:b8:88:3b:6e:92:f5:0f:4a:67:b7:05:a8:eb:61:82:f4:ec:
         04:da:a7:46:7c:a6:48:a2:63:af:d7:ce:03:08:1a:44:16:b0:
         0a:fc:7d:ec:6a:25:51:16:c8:29:81:26:06:10:2c:a3:c3:af:
         f0:fa:75:57:4c:75:95:8c:ce:98:d4:4c:2d:22:38:94:d4:34:
         14:36:d9:48:a9:10:5b:9d:fb:d3:ca:37:dc:f9:a6:a4:1f:83:
         f8:83:f5:bc:6e:bb:8b:8b:c8:41:32:25:03:7f:76:70:2c:c8:
         23:cb:18:7e:24:63:69:02:cf:a8:da:5a:8f:33:3a:d1:e5:9b:
         44:83:08:74:3f:42:20:7c:34:14:9b:12:8e:7c:24:4b:87:b3:
         e9:49:a3:53:71:9a:6a:07:f3:dd:73:84:17:26:10:9d:7f:e7:
         0a:16:fb:c7:4e:8e:a8:67:8e:63:11:75:78:91:97:8b:fb:f2:
         f4:9c:8b:aa:cf:2c:14:2b:c8:26:bd:e4:6d:c0:b4:0d:d1:5d:
         18:ec:e7:0c:7d:90:37:30:b2:76:44:d2:8a:f8:b7:57:69:74:
         b2:ed:20:1c:fc:18:7b:d2:e6:98:ea:33:4d:89:75:77:1a:e0:
         79:99:42:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:52 2026 by rpki-client