Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          wDRls+AsVJlsTTisoQV8314msN2XfUZJTK88ssBcmuE=
Subject key identifier:   B0:81:84:AA:52:D2:C4:9C:79:1F:E8:75:D9:F6:36:B8:FF:51:D4:3B
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       019E303BC8B322E61D0374A495321515BE6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          08F0
Signing time:             Sat 16 May 2026 10:01:24 +0000
Manifest this update:     Sat 16 May 2026 10:01:24 +0000
Manifest next update:     Sun 17 May 2026 10:01:24 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: BM27nn218WnqyTeaiONKlgm6yN2cDeKMjSq4eKwjksk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 10:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:c8:b3:22:e6:1d:03:74:a4:95:32:15:15:be:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: May 16 10:01:24 2026 GMT
            Not After : May 17 10:01:24 2026 GMT
        Subject: CN=b08184aa52d2c49c791fe875d9f636b8ff51d43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:84:de:b7:c8:fa:fa:7b:66:59:13:f5:a5:ac:
                    8c:a6:02:fe:f1:30:f9:3a:02:d4:29:59:0b:28:e0:
                    67:dc:38:b1:c1:ab:0e:71:27:e8:98:82:e4:f0:1c:
                    0c:fe:da:38:b1:10:5e:b0:8f:95:ef:73:4c:2b:f0:
                    c5:8d:c7:40:24:6a:b7:5c:a1:7f:41:f0:9f:74:5e:
                    38:00:d3:ad:c0:4d:cc:ea:7d:a6:45:31:e3:8d:92:
                    e8:4d:cf:d3:a8:56:1c:6e:42:b4:7c:dd:7b:a5:91:
                    02:57:f0:cd:ea:50:d6:86:40:eb:03:7d:2e:c9:d3:
                    a3:42:d9:5c:dd:c1:11:3f:8f:4b:71:75:f2:0c:b1:
                    99:d9:77:c3:d5:40:92:d1:ca:6a:e6:82:f2:a8:8b:
                    47:f1:f6:5b:12:81:3e:61:ff:cb:11:31:e8:b8:0b:
                    e5:7e:54:79:91:40:a9:4b:fe:ee:32:a7:6c:51:2e:
                    1e:67:47:b4:e3:54:3f:c6:92:30:02:a7:d2:fb:91:
                    73:bd:a5:ba:54:e7:cc:f8:69:21:df:5d:ae:96:5d:
                    26:47:de:07:d6:be:40:bf:f4:72:f5:d0:92:33:58:
                    5e:01:46:7a:be:0b:ae:62:45:1e:72:29:03:15:0b:
                    e0:d7:a1:48:e5:c1:15:94:6d:f0:fb:0b:b0:1f:a7:
                    80:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:81:84:AA:52:D2:C4:9C:79:1F:E8:75:D9:F6:36:B8:FF:51:D4:3B
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:34:dc:02:4f:ab:44:ef:2f:94:b3:50:63:c2:0e:ef:e4:0a:
         dc:a6:ba:8c:98:3d:3b:38:98:ff:08:a8:18:95:d4:d9:5f:c9:
         22:5b:e1:95:5d:5a:58:08:1d:1c:a2:b0:91:f0:49:41:3b:1c:
         40:ef:87:4d:3d:0f:bb:ae:58:08:3e:2e:54:47:ad:38:b5:91:
         bd:e2:f2:11:c7:13:9e:b2:15:e8:e1:5a:d9:0b:ba:f6:82:f8:
         f3:69:b5:8a:08:4c:b3:d1:66:13:47:ae:43:b3:d0:af:71:80:
         96:76:b7:2f:76:97:32:63:12:1c:52:04:54:b7:ed:ed:97:fe:
         6a:1f:58:e0:e5:aa:48:a7:44:64:00:db:6a:19:e9:ee:c2:01:
         26:2a:00:0b:68:15:e4:de:77:2f:96:3a:65:32:47:23:de:ac:
         a5:7f:a6:74:f5:76:42:f5:c8:d9:a0:60:8d:30:1d:1a:0d:1d:
         3f:b0:e3:cb:a6:c1:d4:b7:f0:79:9a:0e:39:8e:42:a3:87:e1:
         51:cf:15:43:70:ba:b8:25:fa:3b:e7:93:12:da:d8:d4:84:b6:
         18:24:c1:ec:9b:0e:b3:2b:15:8b:66:a9:59:a2:66:85:f0:77:
         cf:d1:e5:7b:75:21:73:cc:14:b6:a0:c3:a7:7e:45:a6:61:24:
         0a:0f:49:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:11 2026 by rpki-client