Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
File:                     r26u_xI8pnRG0OSUAeSVBXB44XQ.mft (raw, json)
Hash identifier:          WToAAEWW/2McURZmiOHIH5haZ6lP1PFN4E/Fp7Jfgsk=
Subject key identifier:   75:BE:04:27:7F:5B:18:30:EF:E6:B6:CC:7E:26:1E:29:08:32:B9:1A
Authority key identifier: AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74
Certificate issuer:       /CN=af6eaeff123ca67446d0e49401e495057078e174
Certificate serial:       019D26963BD400A0974D89AEF0D8D9E01753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
Manifest number:          08B0
Signing time:             Wed 25 Mar 2026 20:01:13 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:13 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:13 +0000
Files and hashes:         1: Toj2MXLv_0tnvaOa8SabyfyAH7M.roa (hash: LJgBJJsZvDC+Ue6FuF++Df+Q+t0hp3VFYM3vhkZt4FQ=)
                          2: liwxDT5LJpIXlKlVZ9n6p87PfOI.roa (hash: BOe25rjjRQ8tqwHFLqCfoig+Bv/rJP70vjeo2DPMR9c=)
                          3: r26u_xI8pnRG0OSUAeSVBXB44XQ.crl (hash: u1Q7tDHJL0suf5GqQoq7oWFemwCGwXMELxgnqzVsBFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:3b:d4:00:a0:97:4d:89:ae:f0:d8:d9:e0:17:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6eaeff123ca67446d0e49401e495057078e174
        Validity
            Not Before: Mar 25 20:01:13 2026 GMT
            Not After : Mar 26 20:01:13 2026 GMT
        Subject: CN=75be04277f5b1830efe6b6cc7e261e290832b91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9e:ed:85:2a:45:3f:80:0a:e8:de:97:ac:e7:
                    93:dd:6c:6a:1f:8b:bf:fe:4f:35:0b:b4:53:96:75:
                    1f:93:1e:e0:3e:0c:89:ba:86:b2:81:39:49:62:9b:
                    12:df:15:2b:fb:93:2b:cf:5a:45:07:64:91:1e:04:
                    c6:00:1b:c4:62:78:e0:62:92:7d:2c:5b:f1:60:c9:
                    55:47:df:42:e8:83:dc:3e:14:c1:84:ea:a9:3c:97:
                    53:8b:8c:da:82:8b:2d:db:1f:4f:3a:a1:ab:42:69:
                    7f:f3:b8:08:0b:e7:97:0d:2d:63:ac:1f:8a:f2:aa:
                    d1:75:ce:cc:80:de:16:ab:13:e2:4c:f9:7a:30:b2:
                    ca:a1:49:f2:09:08:82:02:60:97:3d:d4:fd:7a:be:
                    b5:f5:e8:04:37:c9:7a:23:7f:1f:e8:c9:dd:99:8c:
                    3b:f4:14:33:07:1a:41:6d:75:3b:bd:c9:e1:3b:55:
                    dd:38:b5:e3:4a:83:58:5a:7a:d6:bb:b7:a9:5b:69:
                    be:b0:92:af:5c:66:de:84:af:d7:34:f4:c0:8f:2b:
                    5d:f9:86:45:39:b0:d7:b1:a3:41:4d:ad:44:4b:dc:
                    cb:22:c6:78:d7:0c:96:fc:f4:50:3b:e7:c0:d2:87:
                    70:e2:6c:aa:9c:0f:a9:03:0b:c9:2c:d1:0a:8e:b7:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:04:27:7F:5B:18:30:EF:E6:B6:CC:7E:26:1E:29:08:32:B9:1A
            X509v3 Authority Key Identifier:
                keyid:AF:6E:AE:FF:12:3C:A6:74:46:D0:E4:94:01:E4:95:05:70:78:E1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r26u_xI8pnRG0OSUAeSVBXB44XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/700164-89d1-404f-af35-4ef47fc4bd7f/1/r26u_xI8pnRG0OSUAeSVBXB44XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:be:3b:96:82:3b:04:5d:d9:d5:28:8c:a0:fd:be:f6:db:
         c8:3a:d1:ac:64:8c:6e:8b:2f:0b:d4:a1:bb:2c:95:60:ac:fe:
         3f:29:cd:f4:4a:ff:76:7b:36:75:db:3b:8e:7e:9f:91:86:74:
         71:96:01:26:06:ce:a1:24:84:15:41:00:9d:2e:6e:34:9d:8f:
         71:6b:0c:2b:8e:2d:60:2f:f6:aa:1d:da:80:aa:a5:aa:e8:5f:
         2c:c4:91:dc:60:2e:cc:81:b6:73:e2:f5:66:9c:f5:dd:9d:06:
         73:1a:4a:4d:02:d9:bb:e4:01:20:fe:fa:74:d6:46:37:b2:1f:
         29:fc:91:20:9f:42:c9:16:8b:db:da:dc:7d:ac:5c:37:12:47:
         78:a1:cc:55:a0:23:41:aa:21:de:8b:af:7b:a6:85:b8:5e:17:
         29:a7:b2:52:da:3a:80:15:77:3d:cd:25:55:93:b2:9b:fe:39:
         a0:f8:70:8f:69:71:99:c1:3a:d5:f7:eb:51:cf:9e:68:a9:ae:
         98:a1:37:cb:aa:70:b9:21:6a:13:5a:d2:0e:2e:a4:cc:a3:96:
         24:7c:5a:6b:a4:4f:6a:c4:81:cd:17:f7:05:96:dd:c5:b1:53:
         2f:a7:96:43:ab:0a:ef:73:05:1d:2f:59:46:85:bf:fb:98:cc:
         5c:44:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:25 2026 by rpki-client