Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
File:                     8kufSnwM67H5f6JAO2Me5tFuxjM.mft (raw, json)
Hash identifier:          1uT27GeNpk7uZ04M7Qvjx5yn7RlgJ7qLjU/iIsFHWc0=
Subject key identifier:   10:D4:8E:9D:0C:3A:93:6E:3C:B5:39:CA:D9:15:F1:19:BD:5A:77:A3
Authority key identifier: F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33
Certificate issuer:       /CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
Certificate serial:       019D284E5BE4D1EF75FC76E791D47EC72C5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
Manifest number:          01DD
Signing time:             Thu 26 Mar 2026 04:01:57 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:57 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:57 +0000
Files and hashes:         1: 8kufSnwM67H5f6JAO2Me5tFuxjM.crl (hash: Cau+AGRQf9pW+VyFU0mKJLRJnvSFcAWxI3GqdyNXNw0=)
                          2: l226mFgK6T2Z60Q9UPJ4UVEXvGI.roa (hash: sMVz2G2/suJpzTvieIkpkHigX+RGGXDj8VHYY+8cT9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:5b:e4:d1:ef:75:fc:76:e7:91:d4:7e:c7:2c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f24b9f4a7c0cebb1f97fa2403b631ee6d16ec633
        Validity
            Not Before: Mar 26 04:01:57 2026 GMT
            Not After : Mar 27 04:01:57 2026 GMT
        Subject: CN=10d48e9d0c3a936e3cb539cad915f119bd5a77a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:02:a2:22:ec:c0:bc:fc:79:4b:a9:c0:cc:a9:
                    31:7f:9a:0b:63:8e:82:86:a4:1d:66:cb:be:98:5d:
                    6a:47:40:5c:38:d3:9d:da:3a:36:a8:44:86:80:24:
                    7f:ad:fd:2f:d4:d1:4b:f8:03:8f:ef:b4:45:35:38:
                    d4:d7:8c:84:6b:d1:05:77:85:5f:77:c9:72:af:4e:
                    8c:cd:8a:31:aa:bb:74:84:68:d1:4a:52:36:27:86:
                    c1:99:ef:b7:d3:41:b4:61:2b:93:83:32:25:50:fb:
                    d9:b8:69:91:4d:9b:c5:a4:9d:63:3a:77:42:17:72:
                    2b:e0:b9:5e:23:8d:08:7a:4e:ce:5e:33:be:0d:3d:
                    82:91:5d:57:d2:0d:08:72:ff:37:53:2f:77:c4:0e:
                    d3:4b:f8:3e:18:b3:2c:46:0d:31:fe:52:ee:d3:21:
                    e3:5e:a4:04:aa:24:0f:96:aa:0b:ff:12:94:ad:07:
                    94:f7:f5:97:dd:2e:72:cc:66:08:7a:43:52:ae:79:
                    64:b7:ea:cc:93:76:ee:c4:ba:71:c1:26:e5:f4:b7:
                    a8:16:cb:9b:86:c0:25:a7:15:96:9c:10:d7:41:0c:
                    05:74:e8:01:5a:7e:df:cd:85:a6:ef:8b:68:9c:5f:
                    bd:32:61:be:82:2a:4f:d6:c9:db:cf:77:82:4d:15:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D4:8E:9D:0C:3A:93:6E:3C:B5:39:CA:D9:15:F1:19:BD:5A:77:A3
            X509v3 Authority Key Identifier:
                keyid:F2:4B:9F:4A:7C:0C:EB:B1:F9:7F:A2:40:3B:63:1E:E6:D1:6E:C6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kufSnwM67H5f6JAO2Me5tFuxjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3de208-347e-46d7-9cc9-9c8eab76da98/1/8kufSnwM67H5f6JAO2Me5tFuxjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:01:22:22:a8:df:27:71:1b:15:60:b1:85:03:b4:30:97:ca:
         92:01:86:25:84:a3:bb:13:66:5a:bb:07:a4:ef:21:31:44:13:
         74:ff:2e:10:d6:d4:4b:5d:34:c2:84:0b:c6:b7:79:0a:2c:5a:
         91:f0:e3:39:ed:0f:f0:4b:f2:bc:c1:11:0c:24:78:8b:bd:02:
         b1:8c:32:c3:4d:89:7d:a7:a3:5e:37:34:3d:64:d2:a0:83:80:
         2c:91:5b:77:02:54:fb:95:0c:cc:c1:8c:be:35:89:35:dc:3b:
         15:67:f0:51:f4:c4:22:05:b6:05:54:64:78:b9:12:1d:76:6e:
         fa:ae:ae:73:41:b8:53:1b:60:b4:e2:63:ea:b9:fe:15:d8:18:
         f2:9e:f0:1f:c6:72:b9:b0:01:b6:c8:d2:e1:a5:1e:d1:1c:28:
         25:08:9a:86:a4:65:f2:1b:4b:34:87:cf:43:1c:06:31:0b:db:
         61:3b:5f:05:a5:a5:d0:3c:ca:09:13:2f:b2:cc:58:60:cf:f7:
         be:f3:3e:86:56:60:70:6d:3c:3f:a1:20:a9:65:c2:2a:a0:b9:
         e7:3e:7c:65:45:1b:71:08:bd:df:e1:56:a5:28:ac:5a:4e:6d:
         ff:a8:1b:53:63:06:16:ca:af:e8:10:7c:9b:f1:37:a3:76:9f:
         dd:9e:9b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:44:45 2026 by rpki-client