Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          mN/sHqAfJMDj4kZHtuskNit+3SdpgLR3zA9YbMjc5Ko=
Subject key identifier:   EF:BE:83:F6:4F:AB:6D:28:7D:57:74:2E:FE:BA:C8:A8:90:DE:B0:0B
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       019F189E65F3744EB91380C8201B43D91523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          0577
Signing time:             Tue 30 Jun 2026 13:01:01 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:01 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:01 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: FMTADDPQpq6PvVA2W/ono4yRHIZ9izt+ZkXEQiiDbDY=)
                          2: B9dQBunPgCxrLiUL8opifDj2bOM.roa (hash: fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:65:f3:74:4e:b9:13:80:c8:20:1b:43:d9:15:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Jun 30 13:01:01 2026 GMT
            Not After : Jul  1 13:01:01 2026 GMT
        Subject: CN=efbe83f64fab6d287d57742efebac8a890deb00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:4a:e9:f7:d3:b4:bb:03:22:44:8b:0b:18:
                    d2:9c:37:88:33:a4:d5:6a:6e:96:18:9d:52:fa:87:
                    97:2a:41:6a:34:0c:07:46:d5:0a:ae:31:b0:38:3b:
                    57:c4:7d:fe:38:81:d4:e0:ff:28:ba:f0:ae:16:c3:
                    6e:a4:0e:09:f2:d2:84:82:3c:dd:59:eb:8f:80:e2:
                    01:b2:d0:fa:a8:00:93:34:29:af:b8:6c:bf:8b:27:
                    ec:fa:3f:6a:16:e7:9d:d7:c7:a0:02:c1:96:f1:80:
                    1b:12:96:32:0d:fd:4c:c1:48:b0:c2:77:8b:a8:cf:
                    9e:97:8e:48:24:29:09:a5:f1:05:0c:83:d6:d0:6a:
                    08:fa:ff:56:c2:da:f8:09:b0:0b:3d:23:79:63:7e:
                    9c:08:07:2a:80:f3:91:58:89:df:23:d3:e1:7d:09:
                    f9:6d:ab:e2:cd:92:3d:77:bc:8a:32:c6:79:1e:53:
                    61:af:f3:94:92:1a:c1:a4:65:d0:af:f0:0f:b8:4d:
                    c4:da:2c:d8:0c:d5:11:54:cd:02:67:01:54:e7:a5:
                    e0:96:f3:17:2a:20:78:40:34:39:f3:d5:5b:0a:76:
                    51:f8:48:2a:59:1a:6f:2b:fd:c8:76:24:18:36:76:
                    e3:b6:52:1d:08:52:b4:8e:17:06:60:f9:58:a4:45:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BE:83:F6:4F:AB:6D:28:7D:57:74:2E:FE:BA:C8:A8:90:DE:B0:0B
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:22:71:8e:af:27:89:22:d8:17:22:3a:0e:a2:5e:67:61:11:
         d3:8d:d7:78:d7:dc:5d:1e:2e:e6:0a:58:26:01:f8:33:13:32:
         8d:23:e0:67:d3:cd:35:9b:24:30:d0:26:03:69:e9:8d:9e:a1:
         bc:68:24:7f:6b:88:33:84:ce:57:ba:25:b5:49:60:16:5c:cb:
         15:53:97:b4:7d:fc:e6:6f:25:96:91:de:c4:25:d9:05:7a:6b:
         37:31:d4:81:41:92:23:e9:83:bc:60:79:ae:b3:e9:e3:4d:7a:
         6a:59:e3:b6:5e:67:3a:d2:ba:57:05:b0:f6:fe:d4:ec:11:f9:
         ea:7b:c5:9d:f0:ac:f2:33:7d:44:3c:8f:23:9b:07:75:e0:6a:
         10:5a:c0:c9:42:82:08:a4:39:68:29:45:04:3a:d3:4b:0f:42:
         24:3e:38:39:11:35:c7:41:43:34:39:67:7b:50:40:7a:93:11:
         0b:08:27:77:f1:92:c8:79:b3:6c:8e:e7:5e:ab:7b:3f:00:94:
         7c:9c:bc:30:2e:8b:fa:b6:4b:36:30:49:14:55:da:25:22:30:
         d4:6b:58:da:89:0f:bd:53:9c:12:52:9f:49:8b:08:a3:bb:10:
         ec:9c:f7:66:fc:9f:1e:5f:a8:0b:b1:4a:af:c3:8e:92:d7:f7:
         23:43:c7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:44 2026 by rpki-client