Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
File:                     m8c4G4L5davxnX1QGo2QvNxDnwY.mft (raw, json)
Hash identifier:          DagvxKCBy3ns29tzRW2tqLniq458ezTVpmWgm19hzHI=
Subject key identifier:   D2:69:FD:F5:33:56:20:ED:64:80:0E:AD:80:D1:38:98:77:08:8C:7D
Authority key identifier: 9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06
Certificate issuer:       /CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
Certificate serial:       019D2A3C5E8BCAC18C8DD168802A4BC505F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
Manifest number:          0BE8
Signing time:             Thu 26 Mar 2026 13:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 13:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 13:01:32 +0000
Files and hashes:         1: m8c4G4L5davxnX1QGo2QvNxDnwY.crl (hash: kzYmurclc9EgR+n8hspL0eOw7YfFvzQj2OozzfBkPMo=)
                          2: p9dEgpnuIv4GzvpyUtYj7YwfNkw.roa (hash: ntFwgx0BPmHacsG/x9Fir1C9rUhhUsKeoLiyXbUgSLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:3c:5e:8b:ca:c1:8c:8d:d1:68:80:2a:4b:c5:05:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc7381b82f975abf19d7d501a8d90bcdc439f06
        Validity
            Not Before: Mar 26 13:01:32 2026 GMT
            Not After : Mar 27 13:01:32 2026 GMT
        Subject: CN=d269fdf5335620ed64800ead80d1389877088c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:ae:6d:b8:37:2e:38:2a:a3:8b:90:46:b9:
                    87:28:25:0f:2c:01:32:28:91:20:c8:83:cc:dd:b9:
                    d8:8c:99:42:41:8e:de:e5:d6:61:d4:ab:85:4d:c0:
                    56:09:a3:5f:fe:89:7a:f8:19:75:49:ba:65:47:5d:
                    ac:62:b5:4c:5a:73:40:30:49:3f:59:e4:a4:6a:71:
                    fe:0d:14:6b:c8:b7:d1:77:eb:8e:95:d4:42:a9:e7:
                    87:26:48:6d:9d:b4:37:bf:e5:4f:f5:a1:c4:a5:7d:
                    bb:c9:00:e3:ef:df:12:49:b8:6a:72:7a:60:f4:1c:
                    a8:99:8b:4c:4f:1d:87:61:bf:dd:d7:28:ab:ab:37:
                    28:c4:e9:84:24:bc:95:7e:6c:b9:6f:75:da:5e:ef:
                    a6:b2:de:26:33:d9:21:b2:d0:6d:38:ba:d5:f7:5b:
                    66:8e:3e:98:e8:c0:70:77:58:33:11:b7:7e:71:85:
                    03:6f:6e:6a:f6:83:9a:7c:35:2f:b1:a6:fe:ca:99:
                    34:1a:f9:43:af:ab:e6:1d:a8:86:3f:f1:72:6c:35:
                    76:9b:fa:bb:8f:01:86:61:62:b7:08:e8:68:fd:c3:
                    52:44:26:d1:08:76:67:14:0d:bb:65:d6:33:e0:ad:
                    d7:02:c3:08:ec:05:a8:0f:ed:35:78:9e:0e:7e:8c:
                    da:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:69:FD:F5:33:56:20:ED:64:80:0E:AD:80:D1:38:98:77:08:8C:7D
            X509v3 Authority Key Identifier:
                keyid:9B:C7:38:1B:82:F9:75:AB:F1:9D:7D:50:1A:8D:90:BC:DC:43:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8c4G4L5davxnX1QGo2QvNxDnwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6bf232-1a28-4aa4-8ebd-bf7fa94d2a4e/1/m8c4G4L5davxnX1QGo2QvNxDnwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:02:cc:88:3e:44:ff:df:d0:9a:38:8c:4a:e7:e2:40:fa:b9:
         df:ae:1f:14:4a:2f:38:20:6e:9b:4e:1e:51:c3:c0:8d:75:b5:
         d5:f3:4e:c9:80:64:a6:43:48:de:bc:b4:a7:33:bd:8b:46:54:
         dd:e2:63:d6:9b:d1:a6:c0:f8:8f:53:72:88:ba:71:c0:36:db:
         59:83:35:51:e8:ea:26:56:90:3d:0b:a0:ad:dd:25:3e:e8:85:
         a9:0b:82:e9:81:1f:bc:49:ab:1d:c4:0a:91:43:b4:18:39:22:
         b0:90:54:dc:bf:f1:1a:fd:b6:db:3a:33:2d:94:e7:d7:62:10:
         f5:24:8c:4f:b4:c7:57:11:03:12:f9:01:41:c9:56:d6:2d:5b:
         64:07:0c:fd:cb:3e:1b:42:7e:da:59:0a:a4:09:75:c1:f0:bf:
         4a:53:0e:4d:e6:b3:4c:b6:4a:09:83:3a:71:9a:38:7f:c6:93:
         2f:38:32:39:a7:54:1e:60:ab:6c:7f:90:b5:05:53:ef:06:dc:
         a3:17:f6:e2:cb:22:f1:8d:e5:c6:63:28:0f:41:94:44:9f:ee:
         ba:e5:c3:20:42:87:5e:40:8c:41:4e:bb:e7:7c:95:10:55:58:
         b0:83:1f:ea:a8:03:51:55:5d:43:ca:71:ce:c4:35:c8:c7:b1:
         0d:ee:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:45:58 2026 by rpki-client