Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File:                     8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier:          tLor+iocFbJbxMvORNi+dqPCTXDPdirwykZAs8JNtMM=
Subject key identifier:   20:BE:4F:03:99:BE:12:5E:19:DB:CD:32:4D:FF:4C:22:83:D8:10:6E
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer:       /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial:       01A000CAA5FF41CF3886A5B38E688439323B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number:          1A01
Signing time:             Fri 14 Aug 2026 15:01:15 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:15 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:15 +0000
Files and hashes:         1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: hQulPwv7ejP7S3n1QT+KEjkRsc1znQ1SPoQowNWajHA=)
                          2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:a5:ff:41:cf:38:86:a5:b3:8e:68:84:39:32:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
        Validity
            Not Before: Aug 14 15:01:15 2026 GMT
            Not After : Aug 15 15:01:15 2026 GMT
        Subject: CN=20be4f0399be125e19dbcd324dff4c2283d8106e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:04:90:c5:5c:ae:03:10:f6:73:97:6f:58:
                    58:b9:9b:f3:ea:fb:19:cd:18:e9:2a:da:7c:60:c8:
                    7d:58:d4:4e:20:23:6e:bd:69:07:7a:cd:31:1a:71:
                    0e:ee:72:20:12:36:c6:8a:50:d5:8d:5b:61:ac:ce:
                    37:20:1f:68:f2:c3:8f:c5:f2:74:a8:eb:89:28:6d:
                    41:cc:f1:87:42:a1:d4:ed:22:ee:e2:45:6c:dc:1f:
                    82:d7:c4:c5:ad:6d:62:af:d3:80:08:bb:27:b1:8c:
                    11:57:02:08:69:71:b5:8d:cd:b7:04:f2:ed:c0:b8:
                    a1:45:28:42:ff:93:14:be:a7:52:b4:6f:23:a5:4e:
                    97:91:04:77:ba:8f:78:a6:90:03:80:8f:bf:9e:d2:
                    4c:a6:ba:04:56:7d:dc:46:7b:f0:b5:f4:29:ae:8c:
                    e4:c9:b3:54:ca:ee:cf:93:42:d4:63:b0:0b:97:9a:
                    98:cb:44:6d:b8:98:37:6c:cf:72:4f:0d:e6:68:48:
                    ee:c6:64:c0:72:74:f6:14:89:a5:fb:be:43:0d:03:
                    d5:e3:48:34:4a:66:a8:51:ff:22:c1:f5:d7:5f:58:
                    30:72:6b:c1:cd:8c:e2:a0:d0:2c:1b:73:df:69:f2:
                    31:9b:9c:82:60:cb:14:78:de:76:82:95:1a:5b:6f:
                    ae:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:4F:03:99:BE:12:5E:19:DB:CD:32:4D:FF:4C:22:83:D8:10:6E
            X509v3 Authority Key Identifier:
                keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:85:d6:2b:c6:52:4a:a4:84:14:10:2c:4a:00:aa:fa:66:29:
         04:3d:24:48:dc:20:07:32:1c:b5:bc:ff:bb:e2:d6:53:98:0b:
         87:ff:45:2b:e4:ac:47:22:80:b7:8e:a5:b4:34:fc:7f:5c:12:
         34:77:90:ed:80:75:4e:c0:58:43:83:19:20:94:a8:f7:b7:19:
         a9:09:e7:e5:9b:45:da:ff:08:5e:b5:bb:e2:22:5a:57:14:6e:
         21:1d:cd:bd:aa:db:7e:a9:44:f3:cf:8f:5f:29:d9:12:eb:ce:
         f3:b1:97:e0:89:86:87:50:7b:0d:18:6a:d2:ea:9f:58:e6:37:
         68:80:10:0f:65:33:a5:5c:0f:5f:3e:5a:6b:5d:48:9e:97:8e:
         7a:f1:28:9d:61:7a:13:d2:a9:37:02:30:5c:e5:57:e5:29:27:
         32:d3:d1:d9:63:9b:98:db:07:db:1b:8e:d2:a8:5a:60:af:8f:
         7a:32:1d:cc:06:fa:3f:b4:0b:44:1b:ca:58:90:39:5a:11:c5:
         d5:d1:f1:73:04:79:da:0a:c5:62:ff:88:96:20:cc:44:83:ea:
         9f:d2:6c:fb:a1:23:59:02:6e:3a:b7:ea:7d:bb:9a:cc:7e:26:
         63:5f:55:93:a1:50:e4:fd:a3:bc:cd:02:55:72:82:21:6c:93:
         15:f4:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:12 2026 by rpki-client