Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          mlq1y/07ClMKFOXmM6b6RoCB1RPD2F+G9f4sFaf+8Ik=
Subject key identifier:   A8:D6:01:0E:85:0C:56:72:DC:C2:D8:5F:6C:B0:D9:E0:C4:9A:FC:83
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       019D2884B4A8C1A0C456D7B9DEE04BAB764E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 05:01:18 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:18 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:18 +0000
Files and hashes:         1: 7voS5KTfzcjQzAkeR_UWZ6y4cpc.roa (hash: g3m4Cs0LnAb1ACKe4HSyReBYZHQrU1ca/nDV4+67Nvc=)
                          2: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: isko8bzLMUVIvEw0KHrGnHsjJe6j+MVU7YnEV9D80IU=)
                          3: 8r77MtNd6JHrFBBnLm_5J_BuAIQ.roa (hash: VZcgGbj6NNnM5Pi5ovNgKWOCK7R74IyyThYZ0XXcsZw=)
                          4: Tf6UQDYvPckU1C2Jn1veoujriQ4.roa (hash: VWiJc3Oh+BpFRYnKzjPdk+rjnYM47zy15kr7GUYXyXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:b4:a8:c1:a0:c4:56:d7:b9:de:e0:4b:ab:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Mar 26 05:01:18 2026 GMT
            Not After : Mar 27 05:01:18 2026 GMT
        Subject: CN=a8d6010e850c5672dcc2d85f6cb0d9e0c49afc83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:25:0e:54:bb:22:13:e6:cb:50:81:f1:69:8d:
                    bd:0a:50:c8:29:ed:12:4b:43:6f:f3:e8:96:fd:bb:
                    6f:2a:e4:6c:3a:e0:e6:d6:9f:de:a0:95:4d:2e:68:
                    2a:a3:6f:9e:b1:db:aa:f3:e3:b3:91:93:8f:76:c1:
                    13:55:f4:5b:da:66:0a:8a:56:82:ef:e1:ba:eb:21:
                    a8:7e:0d:0f:06:c9:12:c6:3f:25:4c:7d:3e:73:a7:
                    8c:7e:64:ac:d4:3f:54:9c:03:6b:9f:2f:b3:e4:60:
                    44:02:ec:8e:05:ce:5c:a0:4f:6b:a2:e9:70:4d:8e:
                    d9:97:75:c2:dc:c7:6f:ca:b0:2e:cf:2b:2e:f7:4a:
                    c0:49:37:e6:4b:f4:22:c5:6e:9e:df:7c:08:ab:e2:
                    db:5c:0d:5d:f6:2a:4c:bb:bd:e8:b3:df:74:f9:ea:
                    f0:b2:af:05:dc:0a:1e:d1:96:f8:0b:dc:ae:c4:21:
                    11:c6:04:e3:9b:f1:f2:ac:88:fd:f6:78:ae:23:04:
                    c7:a1:10:4f:94:84:de:21:cd:5d:8e:0f:eb:4e:e9:
                    7b:3f:6a:29:f6:1d:de:30:c1:76:69:7a:f0:5b:05:
                    18:55:ee:f7:ba:46:31:38:ed:a6:03:1d:d8:3b:ed:
                    21:7e:01:af:8f:98:05:6a:94:30:e6:cc:e4:52:83:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D6:01:0E:85:0C:56:72:DC:C2:D8:5F:6C:B0:D9:E0:C4:9A:FC:83
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2d:c2:30:48:fa:ba:71:6e:93:b5:38:1a:9d:86:ff:77:04:
         0b:4c:3a:94:4d:b2:3f:a9:15:62:4a:0e:da:5b:70:b2:aa:9c:
         9f:10:d0:2e:71:a8:4b:fe:df:58:4e:d6:f9:97:73:a8:a3:8b:
         73:8e:3c:27:87:ea:6a:a9:08:a9:59:1a:c6:2c:91:9d:63:f7:
         31:81:bc:16:00:ee:16:75:2c:94:e8:1a:73:59:89:b4:19:b5:
         fd:11:57:37:6e:08:6e:46:d3:f4:1e:2c:3a:be:93:c3:7a:04:
         13:21:87:d0:c3:87:9e:73:d8:90:ad:fb:c9:66:b9:8a:33:06:
         65:6c:87:78:44:cc:53:08:b7:51:90:6b:a3:4b:b1:90:21:0a:
         17:33:66:ba:78:62:28:aa:e8:68:ba:36:7b:9d:c6:bd:da:d0:
         43:b8:18:0d:7c:a1:75:55:5c:ec:8e:fe:54:bd:4f:42:4e:8b:
         39:6c:5b:17:07:12:c6:91:64:70:d8:7c:a7:ff:b8:43:5e:21:
         8f:13:b5:ff:14:bb:ca:5e:ce:10:c6:2c:e8:32:7b:2a:1a:70:
         ec:94:54:f1:18:3b:84:ef:6e:9b:c8:8a:a3:0d:87:a0:9a:95:
         73:76:da:ff:aa:4b:e6:a3:62:c3:95:60:27:9d:38:d9:cf:a1:
         50:b9:6d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:58:31 2026 by rpki-client