Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
File:                     8fdZtMU8ODyZC_Np45VImgPhK4M.mft (raw, json)
Hash identifier:          PBAXgNCPw5RIn5gPhgjRoTbQt4yUJuGOJFoW1jqDl9E=
Subject key identifier:   FD:4F:58:C1:B2:D2:E0:51:3A:8E:A4:7E:85:50:9F:74:94:7A:94:B0
Authority key identifier: F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83
Certificate issuer:       /CN=f1f759b4c53c383c990bf369e395489a03e12b83
Certificate serial:       01A03FE06DFC317BDD2CB7DAD3FDD62BDC80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
Manifest number:          01B6
Signing time:             Wed 26 Aug 2026 21:01:07 +0000
Manifest this update:     Wed 26 Aug 2026 21:01:07 +0000
Manifest next update:     Thu 27 Aug 2026 21:01:07 +0000
Files and hashes:         1: 8fdZtMU8ODyZC_Np45VImgPhK4M.crl (hash: cKHEZ5P3YW1WvXA77fOt/OHQ3YMnOw8ymGXjDpqe2Zw=)
                          2: VpIgiDeEMf7nW9wrj8KGAz8K1aA.roa (hash: umvesd0+PZ7bymZU641FAmXWDwmpl+q6A+dAgZEThlE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:e0:6d:fc:31:7b:dd:2c:b7:da:d3:fd:d6:2b:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1f759b4c53c383c990bf369e395489a03e12b83
        Validity
            Not Before: Aug 26 21:01:07 2026 GMT
            Not After : Aug 27 21:01:07 2026 GMT
        Subject: CN=fd4f58c1b2d2e0513a8ea47e85509f74947a94b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:12:11:7b:1f:35:e8:9c:76:6c:7d:d4:7f:
                    46:22:72:78:c9:2e:4a:41:b3:39:99:59:6e:bc:b7:
                    d7:cd:ea:75:40:c0:5c:fa:b4:46:58:43:b9:17:25:
                    ec:64:92:10:4c:3d:6e:8d:fc:44:44:2f:41:42:3b:
                    ae:f3:8b:91:5c:2c:3e:50:8e:ea:28:df:35:db:82:
                    28:73:48:ac:73:9a:6c:6d:df:5c:63:58:58:4c:af:
                    41:a2:7a:1b:37:a0:06:d3:5e:45:e2:2d:1f:ad:6f:
                    bf:d2:a1:8d:48:f5:3c:03:7a:20:f7:be:22:a8:5f:
                    1c:1c:83:d4:ec:6c:56:af:f7:c0:76:1d:6c:d2:b7:
                    b7:82:0c:25:5b:b1:d0:99:08:7d:c0:7d:2b:7a:cd:
                    24:e0:78:d1:af:9a:5a:98:73:24:51:bb:97:3d:6e:
                    b7:a5:1d:3e:f3:7a:83:5a:e3:d1:00:d4:b9:ce:d8:
                    a9:c2:e5:00:5e:e4:18:8a:2a:79:85:f8:85:24:d6:
                    e0:35:df:d9:b0:a9:1e:ea:5d:97:dd:11:38:cf:50:
                    c5:13:50:40:df:25:c9:dd:b2:e1:8e:48:cc:9b:1a:
                    a7:be:69:ce:16:e9:76:9f:46:a0:0a:3f:64:4d:74:
                    9f:cc:a0:97:7c:63:fa:8e:a1:16:d8:36:5c:e5:fa:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:4F:58:C1:B2:D2:E0:51:3A:8E:A4:7E:85:50:9F:74:94:7A:94:B0
            X509v3 Authority Key Identifier:
                keyid:F1:F7:59:B4:C5:3C:38:3C:99:0B:F3:69:E3:95:48:9A:03:E1:2B:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fdZtMU8ODyZC_Np45VImgPhK4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e8841f-26e3-4c63-a075-772a6b33f03e/1/8fdZtMU8ODyZC_Np45VImgPhK4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f5:ef:d4:9e:48:a2:02:fd:22:d1:9b:71:4f:e9:05:58:07:
         c0:a9:a5:a5:6a:54:ca:58:55:8b:a5:25:17:99:d9:98:b6:8b:
         69:b1:12:cf:0c:03:b7:40:cf:aa:8e:82:22:6a:b3:92:14:e4:
         62:c2:1c:0a:5f:f4:75:e2:5a:83:d4:d9:c6:8f:90:20:08:97:
         fe:4c:79:88:07:19:4f:c4:ef:1d:9a:27:4e:56:68:2e:fd:f8:
         99:1c:bc:41:76:06:06:28:f8:ff:77:07:8e:6a:d5:5a:6d:fa:
         dc:99:f3:07:9b:e2:0e:38:44:7a:2c:a4:78:83:d8:f5:e9:b7:
         5f:48:61:c9:83:a0:93:32:b7:4c:7e:49:35:67:45:3b:02:94:
         6a:dc:e7:c4:2e:c5:87:c7:94:cb:e9:34:f8:9b:4c:85:30:54:
         fe:38:7e:ae:f5:a1:a6:a4:48:8b:8f:d9:73:f5:3d:26:88:66:
         09:f9:86:b6:6d:0e:83:5f:c0:79:2f:54:19:94:5a:01:5d:d2:
         79:25:ea:8e:57:b5:3d:1b:d5:d5:24:0c:dd:e1:b9:d5:27:dd:
         4c:e1:de:76:53:77:ca:51:4d:a2:ec:87:3e:24:56:86:cf:f5:
         aa:b6:38:c9:47:18:62:f4:7c:99:8e:d1:53:83:90:d7:23:95:
         a7:65:6d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:50 2026 by rpki-client