Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          DUGokZ9QXqqOIUiDR2xIGuwXPWG3hb7GZ/Pq5MJcqjE=
Subject key identifier:   C0:3B:A1:29:BD:F4:5D:A0:6C:65:D9:AA:AE:61:9D:15:D7:E0:3E:D7
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       019D26CCFBD394535B44FE97C11A0C905A07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 21:01:01 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:01 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:01 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: EwsoOCmMKaJHYkjW5tuSq3hZfiL+4KGaV+UvWNRoTXk=)
                          2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:fb:d3:94:53:5b:44:fe:97:c1:1a:0c:90:5a:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Mar 25 21:01:01 2026 GMT
            Not After : Mar 26 21:01:01 2026 GMT
        Subject: CN=c03ba129bdf45da06c65d9aaae619d15d7e03ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:dc:6a:04:d8:37:eb:df:a2:07:67:f2:67:bd:
                    6f:69:83:40:3e:52:7a:86:9d:2d:df:0a:8d:ee:72:
                    02:d8:12:ba:a5:1f:f6:46:18:20:42:36:b4:04:e7:
                    1d:e5:6f:d9:64:a0:d7:81:4a:ed:4d:04:ad:9c:8f:
                    d6:3e:11:71:a8:f7:24:73:f8:8f:85:60:f2:17:ba:
                    91:ec:2f:28:8f:cf:ea:01:42:ea:e3:d7:5d:71:d2:
                    5f:ec:dc:b4:ea:b8:fb:5f:0d:33:b7:3b:ef:18:59:
                    b7:f7:e4:68:3a:9d:22:1d:8c:ef:80:54:98:53:1e:
                    40:c3:97:d8:4c:60:ba:2b:ed:9a:3b:b8:48:58:e0:
                    2c:cd:f4:2c:15:83:80:f8:b2:6c:0e:e5:00:3f:8b:
                    33:cf:97:f5:fc:2b:d8:c1:28:0c:68:c5:6a:b0:b4:
                    9c:14:d1:61:2d:e6:77:f7:d9:27:55:d0:8f:15:31:
                    a4:35:52:fd:4a:2c:d6:93:92:61:e5:3a:b4:6a:98:
                    11:50:38:82:45:a5:a8:50:9e:76:cc:19:bc:e5:bc:
                    4a:85:c2:f6:02:95:4f:bd:0b:5f:85:e5:ca:4c:c2:
                    11:43:0e:cc:35:b4:8c:73:05:7d:8f:c9:c2:e4:eb:
                    78:2f:2b:29:9b:78:27:64:ed:9e:99:34:91:5e:c1:
                    45:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3B:A1:29:BD:F4:5D:A0:6C:65:D9:AA:AE:61:9D:15:D7:E0:3E:D7
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:57:4f:f1:8f:93:5a:26:c9:49:c7:87:2f:37:41:24:a6:
         b9:a1:38:93:c1:39:67:31:b2:20:f1:69:28:01:12:92:4b:a2:
         1f:c4:fc:aa:b9:78:6a:a3:17:ca:35:61:b4:db:da:17:46:fd:
         47:51:87:29:a8:69:5a:72:ad:e3:8a:68:22:90:eb:33:80:5b:
         5b:7b:04:43:61:bd:2c:04:43:dd:d8:c5:17:a8:8d:04:0e:57:
         6c:d5:36:40:43:1e:1a:f2:5f:a6:88:f4:6e:2e:03:81:5d:d6:
         99:49:bb:ed:b5:f6:2a:d5:39:7c:4c:51:3b:07:64:af:c5:58:
         ee:00:d0:24:a3:64:82:0d:be:f6:21:55:f1:20:5e:38:4a:39:
         7b:c4:5f:a2:13:92:b0:ee:d3:02:db:b1:bc:a3:dd:66:2a:f5:
         15:b2:cc:37:54:58:02:08:d4:0d:c3:df:ce:b8:57:d7:38:14:
         fe:af:5e:f1:2d:53:41:01:6f:98:b4:af:15:7e:2c:98:d1:3d:
         8b:92:6e:80:24:59:56:18:9e:c8:ee:84:98:eb:5b:56:d9:ea:
         c9:7e:ec:a1:ec:65:1c:71:1d:af:b7:27:ac:6c:be:c8:e7:72:
         c1:1e:6e:0e:b3:54:ce:ba:99:f4:dd:27:fb:d2:21:51:15:f9:
         db:c4:c7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzPvTlFNbRP6XwRoMkFoHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNmVhM2YwMzMwYjIxMzJkMGRmNzUyZjUxZjBlMGJmZWYz
ZDFiYWUwHhcNMjYwMzI1MjEwMTAxWhcNMjYwMzI2MjEwMTAxWjAzMTEwLwYDVQQD
EyhjMDNiYTEyOWJkZjQ1ZGEwNmM2NWQ5YWFhZTYxOWQxNWQ3ZTAzZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdxqBNg369+iB2fyZ71vaYNAPlJ6
hp0t3wqN7nIC2BK6pR/2RhggQja0BOcd5W/ZZKDXgUrtTQStnI/WPhFxqPckc/iP
hWDyF7qR7C8oj8/qAULq49ddcdJf7Ny06rj7Xw0ztzvvGFm39+RoOp0iHYzvgFSY
Ux5Aw5fYTGC6K+2aO7hIWOAszfQsFYOA+LJsDuUAP4szz5f1/CvYwSgMaMVqsLSc
FNFhLeZ399knVdCPFTGkNVL9SizWk5Jh5Tq0apgRUDiCRaWoUJ52zBm85bxKhcL2
ApVPvQtfheXKTMIRQw7MNbSMcwV9j8nC5Ot4Lyspm3gnZO2emTSRXsFFcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMA7oSm99F2gbGXZqq5hnRXX4D7XMB8GA1UdIwQY
MBaAFPFuo/AzCyEy0N91L1Hw4L/vPRuuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTkt
NjAwN2JiYWQ4NmQ2LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lODY2N2EtYjdmZC00ZWE4LWJhZTktNjAwN2JiYWQ4NmQ2
LzEvOFc2ajhETUxJVExRMzNVdlVmRGd2LTg5RzY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv5XT/GP
k1omyUnHhy83QSSmuaE4k8E5ZzGyIPFpKAESkkuiH8T8qrl4aqMXyjVhtNvaF0b9
R1GHKahpWnKt44poIpDrM4BbW3sEQ2G9LARD3djFF6iNBA5XbNU2QEMeGvJfpoj0
bi4DgV3WmUm77bX2KtU5fExROwdkr8VY7gDQJKNkgg2+9iFV8SBeOEo5e8RfohOS
sO7TAtuxvKPdZir1FbLMN1RYAgjUDcPfzrhX1zgU/q9e8S1TQQFvmLSvFX4smNE9
i5JugCRZVhieyO6EmOtbVtnqyX7soexlHHEdr7cnrGy+yOdywR5uDrNUzrqZ9N0n
+9IhURX528THwA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:35 2026 by rpki-client