Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
File:                     8aBsbBCOlBmyzbIdSLSaa71sFt8.mft (raw, json)
Hash identifier:          4dLZ8hlK7seGoFvu78/8CYfp/nZ+n+5Pxp/Z9vkRShI=
Subject key identifier:   20:F2:74:06:7D:B8:C1:FB:97:D9:1A:3F:D2:81:E8:FE:24:04:D3:AC
Authority key identifier: F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF
Certificate issuer:       /CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
Certificate serial:       019D265FACFAAEAC63C75084557726E7AB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
Manifest number:          183D
Signing time:             Wed 25 Mar 2026 19:01:37 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:37 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:37 +0000
Files and hashes:         1: 07OOHdmV5hEQolio37YsYELpfmM.roa (hash: ZakJp9i9YRT4a4PvS+En0I9CXQ4v7HJRNOWS65tarGM=)
                          2: 8aBsbBCOlBmyzbIdSLSaa71sFt8.crl (hash: 2/UgoQiJJKyu4we9T9eepDwCQykgUrdTPjm3wDF7Pc4=)
                          3: ZTdRtMHn9MCDhvPMjYCC0Pxr1RI.roa (hash: sRz/UR+fsg7CPIL6g1R/rktvKe/HDvg2UOoVG8Jt4bw=)
                          4: vLT1U1k90JDYd1QSTpdp7-5jPm8.roa (hash: tl575EH5XzvM2v0Ar/gj9D2hmKLvwaQZml6OLGCa5aE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:ac:fa:ae:ac:63:c7:50:84:55:77:26:e7:ab:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1a06c6c108e9419b2cdb21d48b49a6bbd6c16df
        Validity
            Not Before: Mar 25 19:01:37 2026 GMT
            Not After : Mar 26 19:01:37 2026 GMT
        Subject: CN=20f274067db8c1fb97d91a3fd281e8fe2404d3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:28:d7:10:4d:38:ef:4c:3b:37:71:6f:84:b6:
                    6b:8c:42:b7:ca:e7:75:4d:27:91:27:34:71:2d:8b:
                    ba:d8:c5:60:fb:34:7b:d4:b6:9e:10:0b:dc:c6:33:
                    50:f2:b1:f7:67:39:a5:0b:d8:41:e4:46:ce:06:a2:
                    b4:b6:db:68:31:91:f3:0a:d0:54:40:01:80:7b:0b:
                    20:91:07:68:e1:df:ee:5a:d8:c3:eb:73:82:4c:d2:
                    71:b5:8a:b8:32:b0:b0:92:34:d1:b4:49:4e:ff:6a:
                    7e:3c:84:12:e8:62:cc:41:02:22:f4:90:bb:57:eb:
                    6b:93:3e:73:d2:97:70:94:a2:09:ea:33:23:bc:7b:
                    ff:fa:a8:4e:9c:3f:5e:aa:d8:bb:9b:71:c2:3e:47:
                    50:c3:fb:70:70:1a:6b:65:d7:05:f4:87:e8:23:63:
                    a8:42:44:16:28:6e:95:ee:62:b3:d4:e7:1c:21:26:
                    04:95:54:66:3c:d9:76:b2:73:65:8d:12:00:bb:d7:
                    c0:45:51:bc:e5:2e:ea:1a:3f:28:cc:7a:22:b5:8d:
                    0c:ea:c7:13:74:c6:5e:69:2a:6c:98:3b:95:4d:1a:
                    b0:62:8b:bf:da:91:bf:76:54:73:8a:f9:8f:20:8a:
                    bf:6e:a5:17:24:dd:99:b6:08:81:98:16:92:7d:76:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F2:74:06:7D:B8:C1:FB:97:D9:1A:3F:D2:81:E8:FE:24:04:D3:AC
            X509v3 Authority Key Identifier:
                keyid:F1:A0:6C:6C:10:8E:94:19:B2:CD:B2:1D:48:B4:9A:6B:BD:6C:16:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aBsbBCOlBmyzbIdSLSaa71sFt8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/def647-9186-4729-bb99-142ebe869316/1/8aBsbBCOlBmyzbIdSLSaa71sFt8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:55:13:30:0c:d7:22:e1:e4:35:52:4b:21:67:9a:d3:a2:b3:
         38:6c:4d:35:c7:0d:d0:ff:d8:96:b2:0f:eb:9b:37:3c:3b:f4:
         aa:a9:87:db:15:d4:e0:6e:c4:b0:00:88:ad:9f:99:e3:a0:84:
         e3:f6:cc:55:b0:52:e6:f6:77:45:c9:14:6a:0e:f5:1e:41:b0:
         d5:a1:6c:09:05:92:eb:62:08:2d:fc:7e:1f:c5:d0:d7:57:23:
         fe:d4:ea:11:d3:a5:97:42:f5:13:49:a4:cc:e3:b2:6c:6c:4f:
         97:f4:df:b5:a4:a8:07:86:4b:77:4c:70:3c:2d:6d:71:08:37:
         cd:6b:3c:a0:bb:6f:f3:e4:6f:88:1b:32:a1:89:2b:12:f2:73:
         ec:50:6f:36:0f:74:22:fc:4e:69:b1:5a:2c:00:92:4b:01:05:
         da:fe:cf:4a:f6:27:86:c4:63:f1:a1:da:1f:fa:0c:c3:68:f3:
         14:70:a1:b7:8f:e1:b7:8c:be:c6:7f:2f:58:17:4f:4d:1b:7b:
         a2:21:10:34:96:45:e2:b4:e9:e9:15:b9:7d:99:d3:ae:0f:c3:
         59:7c:7a:9e:54:5b:f3:8d:fb:c7:12:36:6f:71:91:30:e2:d3:
         47:d8:04:3e:1e:9a:65:99:f2:d8:92:49:ec:1a:06:6c:ca:49:
         d8:a3:26:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:22 2026 by rpki-client