Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File:                     8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier:          9X0mCpGPvS0Iqz93ki47M8sMMvcdCvUFN9UJGFzDm2w=
Subject key identifier:   19:24:4F:23:9D:6E:A8:EC:51:21:9B:00:A3:DF:12:8E:AC:79:0A:33
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer:       /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial:       019D2A3C12F63B6FC75ADC88A1A224E51AE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number:          181C
Signing time:             Thu 26 Mar 2026 13:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:13 +0000
Files and hashes:         1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: Sigm6WV/+eVruhN0Xc89Wn0XF4r+Xdyee/EbeO+i7ZU=)
                          2: 9YUjZkELa6GF8gXKAy2oZk9823g.roa (hash: 9YJ1KkOVgcysellhwW7N+q2CjNfsQUSgfOE1QvgDX+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:12:f6:3b:6f:c7:5a:dc:88:a1:a2:24:e5:1a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
        Validity
            Not Before: Mar 26 13:01:13 2026 GMT
            Not After : Mar 27 13:01:13 2026 GMT
        Subject: CN=19244f239d6ea8ec51219b00a3df128eac790a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d3:33:92:df:d9:c9:9f:79:64:73:c8:8e:fc:
                    2d:b6:95:ce:4a:d1:44:e7:25:71:0b:62:b9:e8:80:
                    84:7e:38:c2:ba:27:5d:c5:61:e0:89:5e:51:01:dc:
                    2f:d1:de:d5:f5:4d:e7:e2:36:60:10:08:d9:f2:92:
                    a8:b5:af:ac:a7:98:01:0b:71:fb:4f:78:57:40:7f:
                    a2:dd:17:c7:f2:96:aa:ef:cd:f7:5a:bf:58:d2:a0:
                    ac:4c:e1:3e:59:cf:fb:12:69:a5:6d:6f:d6:c7:48:
                    d6:52:a2:d0:e0:db:ad:0d:03:30:77:00:1c:fc:ca:
                    51:26:4a:95:a4:de:b3:28:cf:06:2a:93:db:eb:5c:
                    7b:54:54:60:ac:24:b8:86:eb:a6:73:57:37:a5:91:
                    a7:f2:25:c9:cf:d0:17:47:73:34:9d:fb:f9:14:58:
                    ab:bf:6e:8d:59:8b:75:fd:49:70:8d:dc:58:a8:48:
                    f9:b8:b9:a8:95:55:29:cc:d9:b4:f6:2b:64:ed:20:
                    1f:71:23:06:c8:94:de:6f:ec:ab:79:79:ea:0a:da:
                    48:f2:a6:38:1b:c7:c5:39:1b:b1:7d:fd:6d:fa:0b:
                    d9:fe:08:b3:8f:8f:bf:0c:38:80:c3:52:50:b0:be:
                    de:7d:f6:6a:ef:c4:44:95:79:3d:14:e5:34:3a:91:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:4F:23:9D:6E:A8:EC:51:21:9B:00:A3:DF:12:8E:AC:79:0A:33
            X509v3 Authority Key Identifier:
                keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:91:0e:33:ae:ce:fd:2c:33:ff:80:9b:b1:05:27:17:3c:2a:
         c5:76:09:9f:1d:40:56:ef:8c:7c:85:54:10:aa:70:a7:f0:a3:
         22:f2:7f:79:99:6f:ca:d7:8a:28:6b:d2:ba:23:02:04:2e:b8:
         66:a6:09:82:33:81:f6:d2:cc:f3:98:ad:cc:29:92:38:bb:55:
         e5:8e:51:7e:45:23:17:f2:a7:5f:52:87:eb:3e:85:de:38:23:
         ca:a0:3d:85:80:76:6c:69:d5:a2:4a:eb:10:56:b6:9d:13:06:
         61:e7:f0:7e:83:b4:fa:3f:6d:71:6c:00:86:4a:47:e8:0a:6d:
         6e:c6:d3:b7:3a:09:82:d0:a1:14:21:96:d1:de:53:ba:4a:e8:
         1b:34:28:ad:e4:7e:da:94:e6:63:e6:b5:6f:d0:73:30:63:51:
         c5:93:57:b5:fb:f4:3c:97:d5:f4:87:ee:80:f8:82:2b:13:93:
         89:3b:99:6a:d9:b6:72:b5:8e:28:61:61:43:7d:02:01:f7:61:
         5f:f3:a2:d4:e9:78:fb:d0:2f:94:fe:59:cd:e6:50:95:ec:fb:
         2e:74:f8:92:79:d0:81:45:d3:16:94:85:06:0c:a7:49:73:68:
         f4:4c:8b:38:7a:80:02:39:16:14:2a:c5:1c:db:e7:d6:77:3c:
         21:ab:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:39:13 2026 by rpki-client