Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File:                     8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier:          uijSYPyKdXEjxHE/WStgIm4qRU5o3t7QIyuUh57TMDc=
Subject key identifier:   5F:3D:2C:B5:26:84:DD:49:47:78:FF:61:A6:EC:F8:90:FA:71:4B:53
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer:       /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial:       019D269650264787EACE5EC3480F07E1A2CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number:          1646
Signing time:             Wed 25 Mar 2026 20:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:18 +0000
Files and hashes:         1: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: vuL43vnUcqyki3l13d58RvI5xFyYVQjnLl3pnK0p27c=)
                          2: A0z7IQh1Pr8fvyL5I4TT_hj-k0Q.roa (hash: z/I+DSZiJhEoYfti3DU2Ke90Z0Knyu3rdi+RgDuTITU=)
                          3: PUhDyJdQbqGBAoiIPQqOIuxt2NE.roa (hash: WjBKvJrOfiKeEL68xDsyhZV8pUdA94BoBT1vP1PsXEY=)
                          4: orvP4nORXq0UzKjHkst8J153qic.roa (hash: eMGuLib/+B5pjoOYYUaTYix8ol70cyONihtgI6VfEKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:50:26:47:87:ea:ce:5e:c3:48:0f:07:e1:a2:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
        Validity
            Not Before: Mar 25 20:01:18 2026 GMT
            Not After : Mar 26 20:01:18 2026 GMT
        Subject: CN=5f3d2cb52684dd494778ff61a6ecf890fa714b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:23:1b:b1:81:72:c4:e7:f2:88:38:f8:2d:
                    78:5e:5b:fc:43:0f:f3:f8:1b:3c:58:41:d5:48:cc:
                    cb:b5:b2:cb:b0:63:da:5d:73:28:fc:0a:4f:c8:b9:
                    20:02:5b:e8:ee:1d:fd:5f:77:9b:91:e0:7b:1b:89:
                    57:41:65:75:24:0a:22:9d:12:c3:d5:c2:84:64:17:
                    1b:56:f7:e6:23:3c:b0:63:c9:c2:da:83:14:94:59:
                    4d:9e:4a:62:2c:2f:c6:9b:2d:11:bb:0e:d5:91:ad:
                    5e:5b:eb:f3:29:b9:48:25:9c:72:77:cc:47:b5:33:
                    94:7e:8a:e0:ba:9d:a6:e9:3b:56:dd:a5:07:a6:13:
                    6c:7d:a2:50:0a:8d:7d:23:68:90:06:43:f8:5c:ea:
                    9e:29:6d:54:d4:e5:34:d8:12:10:68:d9:28:98:d9:
                    71:90:b4:47:44:89:1f:fe:49:91:68:43:4d:db:62:
                    79:8c:af:a4:6f:7a:e5:50:fa:cb:10:fd:d0:98:9b:
                    c4:17:87:4b:7c:26:45:53:7e:0d:24:20:f3:1a:1c:
                    a0:03:86:6c:a1:b5:8d:25:94:a2:d2:4b:d9:73:0b:
                    ef:b4:74:27:48:49:f1:18:c0:d0:bc:d6:83:ec:2d:
                    d3:8d:95:aa:ff:39:70:8d:ca:be:ed:11:bf:f2:9c:
                    ea:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3D:2C:B5:26:84:DD:49:47:78:FF:61:A6:EC:F8:90:FA:71:4B:53
            X509v3 Authority Key Identifier:
                keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:be:54:ef:ad:21:df:dc:0c:12:cf:42:6a:38:40:28:6c:
         63:f2:be:71:32:dc:a5:8f:13:26:67:e6:3a:fc:4a:36:b7:41:
         55:31:42:8f:83:a4:9f:27:0f:3f:8f:2f:86:d6:a1:ce:c7:cc:
         05:03:2c:95:c9:9c:bf:ed:52:38:57:73:74:e9:0e:43:80:06:
         ad:4e:59:cc:9a:4a:63:f6:fe:29:3f:d6:1b:64:2a:24:cf:42:
         34:d0:0a:ff:d4:18:35:d1:3e:f0:0c:10:bb:6e:4f:06:83:61:
         59:72:39:b7:80:65:5e:a3:76:23:07:19:39:bb:0d:b0:45:01:
         4b:20:9c:26:fb:f5:1d:5f:28:7e:05:4b:9e:39:18:65:e8:06:
         b8:cf:20:76:9e:89:81:f6:bf:de:a4:49:4f:13:6b:94:a7:f6:
         6f:17:14:fd:a2:f2:46:b8:44:af:65:61:fd:b2:c3:d5:f1:10:
         f8:f3:27:64:df:a6:40:e2:65:ee:39:a7:9a:b1:4c:7a:53:c3:
         e8:39:d0:6f:37:75:6b:90:d4:78:d4:7d:0f:46:39:13:aa:55:
         dd:56:7a:32:6c:22:5b:a6:52:02:7d:21:6a:a8:88:0d:b9:f6:
         03:32:f7:83:ea:26:2a:6e:31:2e:d3:3e:0a:2a:9d:e7:85:1c:
         dc:e7:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:08 2026 by rpki-client