Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
File:                     k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft (raw, json)
Hash identifier:          ENN17vLv90jDguegG5QrlWTSg6nxFPdEK4vfFLesjZY=
Subject key identifier:   0E:A2:25:92:CE:F4:58:7D:E6:C1:09:7C:9A:ED:A8:08:E5:BC:AD:56
Authority key identifier: 93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C
Certificate issuer:       /CN=93c64c668eff34740816eda85a459d0c422e063c
Certificate serial:       019D26CD234EC0A53321673BB419DEBCA669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
Manifest number:          1816
Signing time:             Wed 25 Mar 2026 21:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:11 +0000
Files and hashes:         1: Nwz3Y88Hn3YorSrYxSLaFuh5rko.roa (hash: 4ZwetJ9wkwYRliRJIgccov9XYXiW/suuU+RhySazg+s=)
                          2: k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl (hash: Pt1jInPwTAjQwfPeqsiBmAZh8NYp16HKPmFbcC2EQWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:23:4e:c0:a5:33:21:67:3b:b4:19:de:bc:a6:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93c64c668eff34740816eda85a459d0c422e063c
        Validity
            Not Before: Mar 25 21:01:11 2026 GMT
            Not After : Mar 26 21:01:11 2026 GMT
        Subject: CN=0ea22592cef4587de6c1097c9aeda808e5bcad56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:43:d0:01:b2:b8:29:03:86:a1:62:fe:71:
                    48:8d:40:47:40:94:90:79:91:f2:5f:84:7f:de:48:
                    5e:e3:ff:e6:c1:2c:db:8f:6b:de:ea:51:b7:11:fa:
                    42:97:fe:e2:85:ff:23:ef:3d:b9:69:61:91:3b:79:
                    42:91:e0:dd:3c:81:a7:5b:bc:bb:ae:35:ae:51:14:
                    d1:ba:87:f8:51:05:61:a5:2b:25:06:5e:69:99:03:
                    0e:8e:b5:5e:fb:a6:91:94:e9:bb:85:52:31:7f:4b:
                    75:72:12:50:a2:95:2c:26:e0:a9:5b:b5:6f:f2:2d:
                    1a:50:6f:5c:cf:d2:79:93:6b:46:20:01:8f:ab:0b:
                    06:f5:88:c5:84:43:20:70:91:8f:f5:b7:f9:6b:49:
                    2d:38:9b:35:2f:0d:bc:f2:cf:0e:63:4c:0b:e3:4c:
                    eb:1e:22:c9:cc:d4:71:b9:22:6a:d6:64:28:57:f1:
                    d7:a6:8e:61:0e:fd:3e:e6:a6:50:29:cc:b6:bc:b7:
                    d5:b6:57:74:5e:af:6a:02:27:48:58:02:cc:51:b1:
                    49:4f:94:94:18:c5:34:55:0f:ca:65:6e:ad:a2:6d:
                    a8:9c:81:1f:ca:51:69:52:31:5f:23:88:a8:80:65:
                    60:dd:23:89:65:a6:ed:a9:cf:1c:51:6e:81:94:ff:
                    a1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A2:25:92:CE:F4:58:7D:E6:C1:09:7C:9A:ED:A8:08:E5:BC:AD:56
            X509v3 Authority Key Identifier:
                keyid:93:C6:4C:66:8E:FF:34:74:08:16:ED:A8:5A:45:9D:0C:42:2E:06:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/62d15b-7bd5-4b3b-be72-147ec96ea730/1/k8ZMZo7_NHQIFu2oWkWdDEIuBjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:1b:f9:cb:c7:82:c3:e3:92:02:16:35:67:e1:23:fd:5e:
         34:f6:7d:62:02:57:57:81:1c:46:b0:71:a3:c8:38:e5:2f:3a:
         db:97:9b:f5:0a:82:cc:11:a3:f4:aa:8a:2e:18:35:22:c6:aa:
         12:32:27:19:08:88:74:12:8d:e1:4e:fd:78:89:37:b6:73:86:
         3f:ca:44:49:5e:a7:8f:4d:02:7b:e0:e7:6a:5e:69:00:a6:a9:
         12:39:19:87:15:83:cb:c5:14:06:9f:8e:4a:a8:1f:61:fb:b5:
         63:18:bc:c1:05:b6:fa:6c:fa:20:84:56:18:bb:ca:47:68:ae:
         fc:92:ec:33:20:81:84:a2:08:fa:ba:ea:55:3e:cc:c0:af:e8:
         1d:31:89:a3:6f:87:38:92:a9:1f:49:ba:37:4b:35:90:9a:b9:
         a1:2c:4d:c2:04:7e:4a:e2:aa:55:59:9a:fd:53:90:4a:86:fc:
         84:fa:6a:c8:97:16:e6:53:8a:80:19:38:ca:8b:04:d7:76:15:
         7c:d8:35:0f:5a:54:96:2d:db:af:ae:dc:4f:a5:4a:a4:b1:e6:
         95:d6:fb:26:63:77:f3:ce:9b:8a:84:fc:17:40:02:c7:94:36:
         af:7a:6d:33:13:01:26:42:27:06:cc:51:11:ee:a6:38:09:e5:
         cb:4a:95:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:31 2026 by rpki-client