Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
File:                     McdRr8ueHJZqz3YmDJA6K7GvYC4.mft (raw, json)
Hash identifier:          R5fsLxjYpqpSjI2FSs2uiwBpa9PKZTsVarkrZvvn2mg=
Subject key identifier:   01:3F:E4:7E:CA:FE:62:5C:D8:AF:90:5D:04:09:7E:A7:46:7E:96:4F
Authority key identifier: 31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E
Certificate issuer:       /CN=31c751afcb9e1c966acf76260c903a2bb1af602e
Certificate serial:       019FA184510241A0E3879C8CA3C101828E0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
Manifest number:          A8
Signing time:             Mon 27 Jul 2026 03:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:30 +0000
Files and hashes:         1: McdRr8ueHJZqz3YmDJA6K7GvYC4.crl (hash: WhGPio97cHR55wFoDZZX2HDPKQfgAElX6MCKZlROTgw=)
                          2: d-7Ne4WZes1wekph0cprs11cW_0.asa (hash: cBpioPZmstqTqXBIyQHOqca+O/OfR+4YIKoBZItPJDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:51:02:41:a0:e3:87:9c:8c:a3:c1:01:82:8e:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c751afcb9e1c966acf76260c903a2bb1af602e
        Validity
            Not Before: Jul 27 03:00:30 2026 GMT
            Not After : Jul 28 03:00:30 2026 GMT
        Subject: CN=013fe47ecafe625cd8af905d04097ea7467e964f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:b3:90:f1:fb:c7:14:65:5b:c4:0d:4b:cd:
                    6b:b8:c0:a6:da:2f:d0:ff:d4:a5:97:43:ce:1a:ec:
                    1a:f9:9a:65:05:5a:49:2f:9a:bb:3f:ab:ba:42:79:
                    5f:92:8a:86:82:13:a2:24:7b:20:e0:07:f5:f8:03:
                    b2:f6:b6:c9:07:49:ec:2f:f7:7d:0d:58:7a:f2:52:
                    4d:7b:c0:75:63:c4:74:03:04:40:ae:8a:66:85:02:
                    c1:c7:b4:4d:98:60:2f:7a:d1:eb:08:16:d0:bc:54:
                    18:d9:35:54:48:fd:60:ac:6d:56:3a:42:29:53:4b:
                    cc:ba:00:3a:df:6b:b1:19:ca:78:ad:4e:01:a5:20:
                    97:dd:e1:57:df:e6:a9:3f:53:e9:b0:39:a6:d5:72:
                    4e:d4:e9:41:57:74:64:20:83:94:c8:15:50:0e:24:
                    11:8a:66:9e:90:e2:4e:a3:aa:ac:5f:42:ea:31:3b:
                    c9:06:34:b2:35:dd:b0:79:ac:53:d4:d2:ee:bd:6e:
                    36:47:00:36:d2:ee:3d:cd:63:f2:ba:d2:c2:4d:48:
                    59:6c:ab:24:98:4e:41:b7:34:6b:67:28:17:12:63:
                    fc:d1:72:bd:56:82:b0:6f:d1:91:2e:39:af:31:88:
                    2b:6a:35:72:e6:32:16:3a:58:a2:ae:13:b8:7b:de:
                    90:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:E4:7E:CA:FE:62:5C:D8:AF:90:5D:04:09:7E:A7:46:7E:96:4F
            X509v3 Authority Key Identifier:
                keyid:31:C7:51:AF:CB:9E:1C:96:6A:CF:76:26:0C:90:3A:2B:B1:AF:60:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McdRr8ueHJZqz3YmDJA6K7GvYC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/9156c5-db10-4ff7-864f-2c08dbd891a9/1/McdRr8ueHJZqz3YmDJA6K7GvYC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:9c:64:ad:86:7e:29:bf:0d:6a:fa:08:e9:2e:15:7a:52:8a:
         04:c8:77:61:91:57:35:33:ad:10:af:cf:6a:e1:47:97:95:e9:
         dd:14:43:b4:67:57:7f:2d:27:ea:0c:86:4b:b4:dd:17:44:bd:
         79:a7:d4:4d:c1:c3:1e:5b:f1:3e:cf:8a:66:7d:db:df:75:31:
         c0:44:28:04:69:5a:23:7e:c1:66:90:8c:e2:00:d2:7c:12:cb:
         9c:55:fd:e9:23:4a:bd:8e:0a:4d:e6:74:8e:9d:ad:c0:83:e6:
         1b:a8:f0:b0:d4:fe:7e:bd:4f:ba:29:89:58:34:c5:36:3a:8c:
         02:de:a2:df:5e:3e:49:91:de:0c:41:e9:06:7c:eb:e1:2e:7c:
         a8:1c:79:62:43:9b:54:0a:87:b4:7c:bc:9b:5e:70:01:07:45:
         69:53:cd:68:9b:9b:7a:c7:7f:a8:e7:1d:d6:b7:cc:41:ff:f2:
         8c:7d:ff:d5:f5:ad:6f:d3:3e:00:21:8a:1b:69:f4:f7:a7:d4:
         f0:e6:47:60:84:41:50:48:4e:31:77:b8:79:92:58:ec:b5:45:
         72:96:ae:bd:83:b3:30:08:cf:1c:fa:a8:61:98:1c:a9:f6:f9:
         9e:d3:93:bf:8a:0a:4c:33:a5:3d:ae:bf:35:ff:52:3b:7f:79:
         bb:14:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:19 2026 by rpki-client