Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
File:                     8DBljxbS2I00FkWS_NTeExMfFpU.mft (raw, json)
Hash identifier:          74IcqMO8ogFl0OWxRdRZSiWjgkgYkkIY2T4zDSXjHXI=
Subject key identifier:   8A:A7:7E:4A:C4:67:E1:10:37:9D:2A:9A:E0:A0:D0:FF:B8:DA:0B:E1
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Certificate issuer:       /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial:       019F0BF573EAD444C93306BBB913A0ADBFE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
Manifest number:          0F4B
Signing time:             Sun 28 Jun 2026 02:01:03 +0000
Manifest this update:     Sun 28 Jun 2026 02:01:03 +0000
Manifest next update:     Mon 29 Jun 2026 02:01:03 +0000
Files and hashes:         1: 8DBljxbS2I00FkWS_NTeExMfFpU.crl (hash: rojPZ83wB6wif/XtqD3UTyr8ZDWvIj+JGx99sXi6FuM=)
                          2: gHzzrFjQIf1BnANrNt41xIyuTAI.roa (hash: gdosIj1Y84eNGwiRZ4XKtJBxF5aZNg2EDodOpabV+bc=)
                          3: qbcRyHpM1CjtLF8A8oEnsD79w1E.roa (hash: Z4p1smZj2qkNMUZ5G62ALv7SxS1dQGFfDFqEOgUC9rM=)
                          4: uV7OQJTuC4kYWor682k9f-C0_5I.roa (hash: q4UJtdgviUqdDZKlm/WdXXX7eWbJCWOwGJBJFpte8C4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 29 Jun 2026 02:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:0b:f5:73:ea:d4:44:c9:33:06:bb:b9:13:a0:ad:bf:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
        Validity
            Not Before: Jun 28 02:01:03 2026 GMT
            Not After : Jun 29 02:01:03 2026 GMT
        Subject: CN=8aa77e4ac467e110379d2a9ae0a0d0ffb8da0be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:17:12:05:56:70:af:0f:2a:7f:c4:1c:55:
                    db:a5:a4:47:9a:67:bf:06:a3:13:fd:2b:33:83:57:
                    74:cf:33:32:9c:9c:dc:57:14:b1:0c:d5:4f:91:04:
                    20:72:3d:06:bc:12:0b:d4:57:f6:c8:59:e7:ea:15:
                    cb:aa:a3:1a:aa:b2:93:14:2a:25:6e:5a:5f:37:0f:
                    ed:ab:77:81:21:87:15:95:87:e9:41:3f:b9:d0:e3:
                    01:21:4d:8b:48:85:4e:77:2b:7f:53:a4:b7:16:39:
                    a7:38:8f:76:63:b4:b5:87:61:dc:79:65:b7:8b:db:
                    10:d1:07:19:15:7f:3e:29:09:ff:6f:57:10:04:52:
                    51:af:7d:05:97:e8:ee:98:ff:ae:46:1b:9f:11:1a:
                    5b:93:9f:69:8a:aa:3e:33:ea:09:84:92:60:c7:c9:
                    a7:6c:35:bd:11:72:21:72:03:76:e6:1e:af:ac:7d:
                    e1:5d:1e:ce:91:47:0a:8f:94:8d:3f:15:39:ad:29:
                    a4:f9:25:7a:1a:64:63:f1:1d:3f:08:1a:a2:8d:14:
                    22:da:22:28:5c:72:ca:68:60:23:70:7d:37:6e:d7:
                    56:db:76:20:70:93:f9:14:34:bb:33:50:97:46:c7:
                    3b:40:07:8d:de:09:bb:b3:18:67:c3:66:8e:30:3b:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A7:7E:4A:C4:67:E1:10:37:9D:2A:9A:E0:A0:D0:FF:B8:DA:0B:E1
            X509v3 Authority Key Identifier:
                keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bf:9b:44:e5:85:1a:5b:7c:b1:a7:68:5c:97:4d:9e:0e:2f:
         e2:e5:6e:a5:1d:06:9c:52:ad:dc:c7:90:22:03:7a:3d:13:70:
         b8:d5:67:d1:0c:15:65:88:0e:86:26:fd:3a:93:46:35:22:ff:
         b4:d2:53:fc:18:7d:54:4b:85:63:9b:4e:dc:32:ca:53:e6:b3:
         71:f4:fb:5b:f0:cb:73:38:b9:b7:46:11:ae:85:16:1f:39:74:
         8f:63:cf:2f:f9:86:4a:5d:ff:ab:0e:df:e7:8f:1e:a7:b4:c4:
         a0:1a:e1:3e:fb:8e:54:a5:28:cd:e6:98:ed:fb:95:63:a9:5f:
         d2:f1:22:27:97:ef:cb:46:0c:a6:2b:c0:b3:50:86:88:76:23:
         4f:1d:61:5d:36:d5:53:25:80:53:05:d8:52:0b:53:8a:2d:a1:
         76:53:66:99:e3:78:43:fc:0e:96:1b:4d:d2:c6:45:17:21:b6:
         9c:67:8d:d4:77:3d:4c:8a:bd:16:c2:30:c1:04:d9:45:2b:d4:
         f6:93:1b:8c:33:fa:48:26:1d:e3:6b:8f:d4:66:8e:9b:cd:59:
         cc:37:d7:ed:1d:48:16:08:89:2c:71:4c:88:05:0f:d3:7c:d4:
         a1:3b:7d:f9:28:9a:4f:9d:02:ce:ea:5c:69:e6:5d:9b:cb:12:
         bb:49:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 12:12:36 2026 by rpki-client