Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
File:                     8FCiDjDskV3tHfIAVa9rXyZnLqk.mft (raw, json)
Hash identifier:          Y9hqwnP2R1pcSGbmlMoTkkoEbfrPS3DGuGTAARelXNY=
Subject key identifier:   3E:18:F1:38:A2:52:D6:31:56:3E:0D:62:FC:01:08:2E:1C:42:0B:55
Authority key identifier: F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9
Certificate issuer:       /CN=f050a20e30ec915ded1df20055af6b5f26672ea9
Certificate serial:       01A0005C8D6506A8384EE3895C36B1D9F541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
Manifest number:          19FE
Signing time:             Fri 14 Aug 2026 13:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:00 +0000
Files and hashes:         1: 8FCiDjDskV3tHfIAVa9rXyZnLqk.crl (hash: WZb+MSf6WIUxyaHMf/2nXxjzhxv2HdcBHHsYMWHnfY0=)
                          2: VVUHU9wzPSipaX2HFFPnxlMDk40.roa (hash: LpkGFoTMr4l6RIiQwmwapd7pQ8v6qmtf4dTq+3Df5AE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:8d:65:06:a8:38:4e:e3:89:5c:36:b1:d9:f5:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f050a20e30ec915ded1df20055af6b5f26672ea9
        Validity
            Not Before: Aug 14 13:01:00 2026 GMT
            Not After : Aug 15 13:01:00 2026 GMT
        Subject: CN=3e18f138a252d631563e0d62fc01082e1c420b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:64:87:1d:4a:bc:f4:50:c1:21:b6:95:6e:
                    58:d1:11:bd:b1:05:01:0e:13:e7:9e:d6:92:3f:77:
                    f3:04:40:f2:b2:4b:37:20:46:7c:00:26:93:af:b5:
                    3f:32:eb:94:9a:03:cd:3b:74:3f:83:bf:4e:4c:ef:
                    af:95:cc:79:bf:66:54:44:d4:d9:f4:84:2c:79:c9:
                    da:eb:51:a1:39:5c:f3:11:e6:56:1b:3b:16:79:37:
                    fd:8b:a6:f5:00:e9:2b:b4:ea:04:b6:d6:88:b5:d6:
                    70:e4:08:6a:53:4e:b9:55:fe:47:56:e9:b8:e1:89:
                    15:d5:a3:05:23:0a:0a:18:95:fa:51:03:16:78:2b:
                    c8:5b:60:64:50:85:9f:0f:ad:3c:58:a3:53:6c:5a:
                    36:40:25:b3:52:17:90:39:d9:16:35:34:34:4e:b1:
                    9b:ac:e3:ed:fa:9f:d4:db:8d:40:8a:7e:64:8e:7b:
                    20:39:11:03:33:9e:74:11:d1:e6:30:4a:14:79:d3:
                    4d:1a:31:87:29:f7:90:1f:3e:ab:2f:bd:0f:99:27:
                    4a:26:b4:54:c6:62:c5:9c:f6:62:7e:e2:1e:d1:a5:
                    48:ea:10:12:ff:81:63:d0:ee:bc:4b:4e:b7:3a:8e:
                    ea:e9:d6:7e:62:ff:93:e4:37:16:7b:77:5a:ba:63:
                    bb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:18:F1:38:A2:52:D6:31:56:3E:0D:62:FC:01:08:2E:1C:42:0B:55
            X509v3 Authority Key Identifier:
                keyid:F0:50:A2:0E:30:EC:91:5D:ED:1D:F2:00:55:AF:6B:5F:26:67:2E:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FCiDjDskV3tHfIAVa9rXyZnLqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/b5d809-2db0-4fbf-8a0d-9d3167831934/1/8FCiDjDskV3tHfIAVa9rXyZnLqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:59:67:74:91:04:b7:ad:41:0a:80:43:86:f1:8f:d3:a1:5c:
         a0:f6:8d:94:4e:96:71:9a:77:83:66:6e:bd:82:7e:1d:0a:9a:
         06:78:f2:37:61:7f:f1:ad:6e:26:30:c1:71:c1:2f:22:58:23:
         50:2b:30:64:99:dc:1d:1c:c1:c8:ac:b8:1d:0b:e0:a9:1e:22:
         68:95:ba:4c:98:7e:4a:dd:f0:31:5c:2c:40:67:39:81:30:70:
         2e:44:2a:10:ac:5b:17:bb:00:12:c2:5a:5b:f8:1d:d6:94:1c:
         0e:f4:71:87:30:2d:f5:ca:26:74:78:d8:cd:ef:c7:06:ab:4c:
         96:91:9c:aa:23:f5:c0:35:ee:27:8a:7a:1d:09:74:a8:dd:c3:
         6d:f9:36:d0:37:67:19:01:fd:3a:0f:ad:5c:44:25:72:1d:54:
         cc:57:73:35:e2:f9:3c:27:fc:99:4b:76:97:48:48:f8:d5:46:
         d3:00:22:56:36:83:2d:fe:7e:62:a5:70:7c:38:9b:9e:19:c5:
         e4:49:4f:01:de:ee:a0:9b:60:b9:2a:06:86:b7:70:8a:0d:a0:
         26:2c:2f:19:c7:06:f4:4c:8c:f4:55:fc:c2:a9:de:a3:a3:70:
         a4:82:af:be:79:8b:bc:5c:02:19:dd:a4:6a:18:3c:71:a5:06:
         64:c1:91:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:20 2026 by rpki-client