Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File:                     8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier:          othAMiVQNDxTtmsQN3xkkB+8VmGcOrvW28VQDqt8MNM=
Subject key identifier:   2D:85:30:4A:26:EB:DF:1C:10:79:A0:42:6E:B1:59:DB:1B:80:4A:0D
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer:       /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial:       019E2F293C53CD90DBF9305BCD20634D90F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number:          0A81
Signing time:             Sat 16 May 2026 05:01:31 +0000
Manifest this update:     Sat 16 May 2026 05:01:31 +0000
Manifest next update:     Sun 17 May 2026 05:01:31 +0000
Files and hashes:         1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: uK0NTF88KKLaNclIA01V+edJq0eDEzxloJcMn2cyaMg=)
                          2: Wwk325SN1Dr-hmbxjFq8uNHcOyo.roa (hash: 7U3vqi/fr/x9T5oXLoF5tZC73nYigGo0Lh9WQ9j33Bo=)
                          3: yfnXQNQR6qwLfnS_9inVuunPhTE.roa (hash: 6X/o1qnSnBUFZ+wmM2iXaRxxmfNZALk6TxkSNYTjhH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:29:3c:53:cd:90:db:f9:30:5b:cd:20:63:4d:90:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
        Validity
            Not Before: May 16 05:01:31 2026 GMT
            Not After : May 17 05:01:31 2026 GMT
        Subject: CN=2d85304a26ebdf1c1079a0426eb159db1b804a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2e:ec:f9:79:f2:09:88:5a:ea:2a:45:6d:31:
                    48:a3:7a:1b:c3:28:a1:01:4b:6b:79:cd:13:1b:24:
                    37:e5:62:82:7f:82:3b:02:b9:81:c9:98:ff:53:46:
                    77:d0:a7:4c:5c:7b:8c:b9:ca:f4:a3:54:c9:5b:8c:
                    fc:0a:39:97:d9:c7:a0:d5:76:cc:74:bf:ee:b1:aa:
                    80:d8:c9:03:6d:01:9d:aa:7d:2d:2c:33:5f:aa:2e:
                    0d:f9:e9:e9:ac:8e:9f:37:86:f3:de:98:16:72:62:
                    58:70:cf:3d:30:2a:e4:b2:c7:5f:51:dd:93:af:6a:
                    0d:b0:2c:f2:ab:06:2e:8e:86:0c:e6:b6:70:ce:0d:
                    66:40:ef:22:4a:18:f5:be:ff:35:c3:61:aa:4b:3f:
                    35:65:5e:f1:35:b4:73:9a:d8:66:bb:03:fa:e1:f3:
                    a0:68:45:99:6c:56:5a:91:6e:18:07:10:20:82:ff:
                    12:b8:d4:21:ca:2e:34:b9:26:d7:99:86:0e:32:c8:
                    21:de:94:c8:57:9b:33:ac:18:5e:cb:4c:d8:e6:6b:
                    a2:6c:f6:28:54:f3:b8:78:27:23:c2:cd:8f:9b:42:
                    bf:e9:00:59:0c:40:f5:7e:74:b9:a7:8d:41:3a:69:
                    73:fd:76:17:1d:21:2b:73:29:05:4d:c6:9f:68:6b:
                    ef:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:85:30:4A:26:EB:DF:1C:10:79:A0:42:6E:B1:59:DB:1B:80:4A:0D
            X509v3 Authority Key Identifier:
                keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:47:a6:eb:e5:b2:86:a9:06:1c:c2:49:ff:b8:b9:7c:70:
         cb:56:e2:9b:b4:79:6e:d0:59:4e:81:18:b6:28:64:8e:7e:2a:
         23:fd:cf:ce:a0:50:49:d0:7e:40:f6:d8:06:99:c7:6e:f4:e8:
         65:71:ed:ad:5e:11:7f:cb:cb:32:81:9e:28:8b:72:70:84:ee:
         10:b5:0a:60:7e:0a:41:1b:22:f1:25:86:2f:ce:0d:75:78:5e:
         6a:0d:9b:39:b5:c1:7c:96:e9:8c:bd:f4:e0:70:27:bf:75:bd:
         b1:92:c3:db:7e:00:2b:0f:b6:00:54:f2:64:b9:e8:02:32:2d:
         e1:ca:38:7f:03:be:66:6a:de:b5:94:97:78:43:36:31:30:3b:
         52:5a:6f:80:78:e6:99:8a:96:52:d0:45:89:9c:1a:3c:48:39:
         64:10:dd:2f:68:63:50:36:a5:8b:32:ea:18:0f:88:88:48:f2:
         9e:89:85:38:c6:c8:ef:af:3f:f9:c2:ee:55:c4:ac:ec:74:f1:
         7b:f9:7d:91:b3:ab:11:c9:fb:6e:32:77:22:2b:c1:9a:10:2d:
         ad:1e:52:6b:87:8a:31:00:20:87:ec:ac:39:29:07:32:d8:b8:
         01:a1:a5:df:a0:3d:f8:69:22:bf:48:10:32:d6:c3:46:90:53:
         8b:94:f4:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:16 2026 by rpki-client