Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File:                     8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier:          R7oRorNULmBWm4/+EwbV19GEOFXyi7Dkd2IF4q4RSss=
Subject key identifier:   AA:DD:B4:DE:6E:17:56:B6:7E:1A:5D:1C:2B:BE:EF:74:6F:76:4D:8D
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer:       /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial:       01A001A5C352D85B695CC2251E5AF10E6A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number:          118E
Signing time:             Fri 14 Aug 2026 19:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:35 +0000
Files and hashes:         1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: vKtZmQFaPnbOovjn2EnF2tOpJc4uW9XfrvKTYmeEfSo=)
                          2: kAZmzQ0U-tWvr0f-02x69bXjUAU.roa (hash: 5WlvJHiQOeb7v4dnN4FdtefOtV8drHOu9JZO31PSCrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:c3:52:d8:5b:69:5c:c2:25:1e:5a:f1:0e:6a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
        Validity
            Not Before: Aug 14 19:00:35 2026 GMT
            Not After : Aug 15 19:00:35 2026 GMT
        Subject: CN=aaddb4de6e1756b67e1a5d1c2bbeef746f764d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d6:11:40:1e:24:0c:e6:8d:71:fc:4c:55:b3:
                    ff:01:f4:b0:a2:ca:0f:91:b4:32:70:b4:17:7b:b0:
                    c6:9f:d0:63:2d:37:3f:52:c8:5b:fd:16:3b:bf:98:
                    f7:89:e1:2f:94:1d:b0:29:38:14:ab:74:a3:3a:38:
                    2a:0e:d1:64:79:fd:59:ee:39:68:cd:3a:64:ae:b8:
                    5e:68:e0:1f:3b:56:c5:89:cf:a3:10:88:c3:e6:d0:
                    e4:8f:30:93:2c:0f:5e:72:44:73:92:47:ef:9a:3d:
                    5b:58:c6:4f:c5:1c:c0:8d:1a:41:dd:a4:4a:dc:15:
                    b3:bb:28:65:75:e7:20:77:dc:56:f8:ed:93:4e:1f:
                    b6:6b:0a:77:fd:d9:07:c2:50:18:94:d1:6b:d5:07:
                    9f:dd:b6:6e:0d:b5:1f:e1:f8:38:8a:05:82:5f:42:
                    72:1e:82:25:5b:b4:45:c4:ec:fc:40:6d:c2:37:81:
                    a5:5c:fd:be:da:52:89:ed:2c:81:16:6c:cb:32:07:
                    ab:64:90:d9:ca:85:c8:91:2c:59:08:e3:06:00:7e:
                    9c:e3:fd:79:77:23:59:7d:a1:db:02:af:60:f9:3a:
                    2a:0b:89:47:45:ae:8f:89:ee:ed:bc:60:52:d0:f2:
                    f8:21:61:25:4e:7f:00:b0:35:fc:cc:c8:75:80:6e:
                    d1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DD:B4:DE:6E:17:56:B6:7E:1A:5D:1C:2B:BE:EF:74:6F:76:4D:8D
            X509v3 Authority Key Identifier:
                keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:42:b5:ea:cb:c2:fb:ae:39:aa:99:ec:16:cc:bb:66:c1:2a:
         d1:37:f9:6b:cc:2d:78:e1:1e:b2:19:de:0b:db:09:da:de:b7:
         1c:41:8d:44:fd:29:a9:8b:7a:08:bc:6e:aa:2a:9e:c9:e3:24:
         ec:93:67:1d:35:01:84:e6:37:ad:05:40:85:9f:cc:3a:0f:90:
         48:0c:a9:09:80:cb:e6:d7:59:02:2f:60:cb:bb:24:31:0b:0c:
         49:2b:f5:7c:6c:d2:83:91:38:a4:2e:47:3d:41:34:0c:d1:89:
         98:81:8b:ba:c2:a9:0c:ce:88:56:ca:0b:93:42:e8:24:8f:64:
         69:38:37:54:76:6d:af:43:8a:8a:a5:c0:8a:ed:dd:c6:04:f9:
         0a:c2:25:b3:28:c4:bc:a2:b0:91:6b:cb:16:da:3d:26:5b:12:
         24:9f:e6:39:7c:c7:45:5f:1f:3a:2f:87:5b:42:6a:d1:f4:b6:
         64:0e:86:15:01:af:4f:57:cd:6b:b9:be:78:85:b2:58:1a:d3:
         75:52:8d:0c:07:02:5b:67:ff:b3:ce:de:74:9c:f6:5e:11:c9:
         a3:9f:3c:8c:d3:8e:8b:d5:b1:0e:d7:9d:43:90:2d:9d:35:82:
         26:86:fa:f5:f2:69:46:d6:7f:ea:a8:9a:26:c6:08:69:63:b0:
         2e:2b:ac:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:25 2026 by rpki-client