Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
File:                     8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft (raw, json)
Hash identifier:          D+THTybqv1tFbOhkzTWoc7CY+ugW+GtYvcOgml2iuN8=
Subject key identifier:   C1:BF:73:A4:9F:41:31:57:AD:78:A0:7C:D1:D9:C8:F2:7F:F7:9A:E1
Authority key identifier: F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC
Certificate issuer:       /CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
Certificate serial:       019D28BBA8803B63390B89A31D6480097C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
Manifest number:          17E0
Signing time:             Thu 26 Mar 2026 06:01:20 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:20 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:20 +0000
Files and hashes:         1: 8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl (hash: nIp7JSa1O7W5dmVA2OceKNaWB17CcxJi+r6HyTkWfRw=)
                          2: PdYJMM8g9bzS-zaiDRpQNcIoAAM.roa (hash: nV+JTD3ujjyKHyqyqk7w4WpsjNbLI/Jo7BdCyaZPoos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:a8:80:3b:63:39:0b:89:a3:1d:64:80:09:7c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3ef6a6cfce343f914c9ad94c3410da00a7cd1cc
        Validity
            Not Before: Mar 26 06:01:20 2026 GMT
            Not After : Mar 27 06:01:20 2026 GMT
        Subject: CN=c1bf73a49f413157ad78a07cd1d9c8f27ff79ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:0a:30:42:54:45:e9:4d:0d:44:07:1d:2a:
                    f3:dc:90:17:0e:b0:2b:6d:fb:33:1c:68:b2:50:be:
                    ca:b7:e0:67:18:03:20:29:30:5c:b3:c0:40:d9:1d:
                    fc:d8:f8:d4:2c:f4:f0:57:c3:2a:c6:5d:2a:d9:ae:
                    de:61:2b:d7:00:b4:00:cc:41:ae:74:5c:8d:22:83:
                    5d:c8:46:ed:d5:56:33:27:52:30:91:7b:23:07:5e:
                    e5:95:4b:6c:d2:80:32:ff:61:e7:a1:c4:12:1c:02:
                    88:02:14:8d:23:eb:64:a0:a2:83:37:a0:b2:3f:f2:
                    36:61:91:16:5f:5e:9d:37:2b:a4:0c:06:3d:23:42:
                    32:0d:2d:99:5b:00:e6:6e:f2:3f:db:a7:20:aa:be:
                    09:23:c5:93:eb:f7:37:7c:cc:ba:f0:3b:98:31:c1:
                    13:a2:6b:0a:ed:c0:a8:01:1b:76:cb:e9:ce:ec:a3:
                    88:2c:cd:27:35:c2:23:02:40:0a:01:b9:95:de:01:
                    ac:21:5a:a7:bd:e3:90:f2:6e:79:97:f3:37:f7:9e:
                    fc:a5:17:1e:a4:74:6d:1d:78:4d:00:41:3f:09:50:
                    10:c6:bd:98:7a:81:fa:d1:5d:fc:0b:d8:01:98:75:
                    e3:2a:9c:1d:4a:e7:26:a5:5a:32:50:21:0b:b8:95:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:73:A4:9F:41:31:57:AD:78:A0:7C:D1:D9:C8:F2:7F:F7:9A:E1
            X509v3 Authority Key Identifier:
                keyid:F3:EF:6A:6C:FC:E3:43:F9:14:C9:AD:94:C3:41:0D:A0:0A:7C:D1:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-9qbPzjQ_kUya2Uw0ENoAp80cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/933edc-230f-4bfc-bc47-2c4763d64d43/1/8-9qbPzjQ_kUya2Uw0ENoAp80cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:6a:61:f1:1b:ea:16:a3:93:07:2d:ad:74:5c:69:41:d5:
         63:c3:dc:2a:b8:a6:b5:cc:75:e3:70:28:9f:cf:58:ef:c4:6f:
         56:53:6a:f7:b5:26:6c:43:6d:98:33:9e:5e:1d:f3:e0:a1:1a:
         a8:90:80:6a:8b:f6:aa:57:db:97:19:a0:bc:4f:d3:c4:1c:b8:
         a8:4d:dc:3c:1a:58:c0:d6:50:fd:2e:e6:95:6e:2b:00:8e:fe:
         c3:b7:e9:01:1b:66:e7:ea:67:d6:ab:75:7c:80:f9:f8:92:a4:
         5e:cb:5a:db:78:bc:7c:46:bc:25:b1:7f:eb:0a:74:38:6e:e3:
         0e:e2:91:17:48:10:7a:87:09:59:6e:2c:b2:33:0f:5e:3e:fd:
         aa:09:a5:f9:18:55:50:25:8c:6f:5f:80:99:3a:a0:83:4b:4b:
         ef:e7:a0:18:4c:06:56:58:c5:89:fa:3e:de:51:bf:ff:ee:b5:
         2c:46:c0:db:b7:fc:c7:a9:64:ed:7e:50:49:e5:81:e8:c2:12:
         51:e4:5c:db:d5:5f:5c:aa:78:00:3a:26:2d:6c:2f:a0:0d:6c:
         5e:22:d0:10:71:22:6c:bd:cd:f7:64:de:0c:a2:37:dd:bc:dc:
         1a:45:ca:2b:ec:80:a0:69:06:59:51:56:9f:34:7c:54:1a:c9:
         e6:7c:e9:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:11 2026 by rpki-client