Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
File:                     8C4o6Kx6sYxzB53oTICX14Kqtpo.mft (raw, json)
Hash identifier:          l0AhzChrGNCcgSal1IEGbYiaXvNlcwo1+CfNVj4RmLA=
Subject key identifier:   ED:8B:E2:BC:3A:51:18:2C:23:E2:1B:7A:55:88:96:93:CA:9B:CD:98
Authority key identifier: F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A
Certificate issuer:       /CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
Certificate serial:       019F13AEEF603B515B8B4E7628B26ED349AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 14:00:59 +0000
Manifest this update:     Mon 29 Jun 2026 14:00:59 +0000
Manifest next update:     Tue 30 Jun 2026 14:00:59 +0000
Files and hashes:         1: 6weVCTckmKcufpwMMNkVwHRwP9Q.roa (hash: 0JjU9hmu5yoiP9Qn2/r0jmSFJ9tAqxdSeETfVPuLDfo=)
                          2: 8C4o6Kx6sYxzB53oTICX14Kqtpo.crl (hash: 8uECmdKT4mplFHKYNF0MX4Mp4eDohVp/XhNQwDmUacI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:ae:ef:60:3b:51:5b:8b:4e:76:28:b2:6e:d3:49:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f02e28e8ac7ab18c73079de84c8097d782aab69a
        Validity
            Not Before: Jun 29 14:00:59 2026 GMT
            Not After : Jun 30 14:00:59 2026 GMT
        Subject: CN=ed8be2bc3a51182c23e21b7a55889693ca9bcd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f3:f8:7d:65:60:57:da:d9:94:3d:a0:02:e2:
                    4d:04:a6:77:a7:10:e3:17:08:42:0b:1a:fd:b8:14:
                    cf:a6:e0:10:f1:fa:2b:4f:36:78:d7:f0:5b:ca:04:
                    83:ca:25:9f:8a:c3:71:c5:92:cb:28:1c:49:69:c1:
                    91:27:b5:bc:4d:a5:26:7a:f7:ab:71:c5:49:e9:55:
                    f9:74:6f:07:00:1a:ff:4b:b5:0e:56:c3:d2:bc:2b:
                    fc:a9:ff:dd:0c:af:2b:9d:73:66:5d:de:0f:f7:50:
                    48:92:e7:c6:d0:1d:db:29:d0:4f:5b:6c:0a:bb:d9:
                    32:63:57:8b:c4:f7:ff:f3:25:65:83:93:72:e2:41:
                    65:cf:2f:bb:9a:9f:bd:81:4f:51:e2:91:25:67:01:
                    c9:f1:86:e5:51:1e:0b:fc:a3:c5:e0:b1:ee:31:29:
                    7a:3d:b2:91:38:31:51:08:73:d1:27:e4:9e:4a:ff:
                    54:70:25:ae:85:37:62:97:0c:ad:dc:42:39:25:c1:
                    bc:95:f2:2e:b8:3f:d4:db:8f:27:41:85:a1:9a:7a:
                    ce:73:02:1e:ad:c6:1e:ce:67:1b:cf:f6:5c:33:20:
                    66:0b:ad:d4:af:ca:88:00:48:b4:94:e9:d8:16:03:
                    17:ca:e4:e0:41:04:08:bf:d7:cd:1d:5a:3c:ad:8f:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:E2:BC:3A:51:18:2C:23:E2:1B:7A:55:88:96:93:CA:9B:CD:98
            X509v3 Authority Key Identifier:
                keyid:F0:2E:28:E8:AC:7A:B1:8C:73:07:9D:E8:4C:80:97:D7:82:AA:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4o6Kx6sYxzB53oTICX14Kqtpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca686d-f35f-43f3-b889-9ffb0e41c4ef/1/8C4o6Kx6sYxzB53oTICX14Kqtpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:da:a0:6b:31:5f:8b:e9:42:2d:26:c7:d0:5b:86:27:af:ab:
         04:20:3a:2d:65:9c:df:b6:1f:15:5d:12:76:7b:d9:eb:b0:09:
         34:00:96:72:51:82:9e:d8:60:2d:51:d6:22:76:90:33:cf:7f:
         71:f3:7f:24:0f:79:93:de:63:04:ff:93:53:2b:93:2f:69:45:
         43:04:df:fa:56:30:7e:e1:a2:02:de:48:ef:d6:6c:a4:99:c6:
         44:74:8a:78:e4:ce:7d:72:af:6f:a3:9e:c8:e5:f6:eb:31:1a:
         a6:f7:c4:1c:59:90:07:e7:10:d9:87:65:76:40:b9:ed:fc:73:
         ee:83:34:49:aa:6f:c2:9e:ce:22:9d:ad:8e:d5:d8:5f:b7:99:
         4e:c4:0a:e6:bd:bc:94:da:27:04:a3:1c:03:96:e4:2a:f3:bf:
         e3:a5:56:b8:d0:d4:f2:55:ca:eb:71:13:bd:33:80:75:a3:90:
         34:98:29:65:81:68:cc:8b:cf:df:11:01:b2:69:c1:da:54:35:
         2a:da:f8:85:38:2d:6b:8d:f8:0f:ca:f8:a9:15:d2:f4:33:81:
         55:c3:66:5c:bc:5a:ae:78:67:55:e3:37:23:a6:4f:5f:61:32:
         28:05:88:40:55:56:a6:da:44:22:a9:7b:30:4d:18:a0:d2:1c:
         6c:6c:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 23:37:06 2026 by rpki-client