Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
File:                     0j8EewbItyce4Qya9dFEPwE5wSc.mft (raw, json)
Hash identifier:          a2N3/0xGcrR2D99sMf4MwaUnjCtuysV1lKJQmWgkAPw=
Subject key identifier:   62:D9:F2:CE:FC:79:22:0A:D7:A3:EE:5A:F8:42:4D:FF:BF:29:BC:6C
Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27
Certificate issuer:       /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
Certificate serial:       019D2772D19F8C849C2BEFAFD45292F30B91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 00:02:09 +0000
Manifest this update:     Thu 26 Mar 2026 00:02:09 +0000
Manifest next update:     Fri 27 Mar 2026 00:02:09 +0000
Files and hashes:         1: 0j8EewbItyce4Qya9dFEPwE5wSc.crl (hash: YN/a+0Pk98XOT0w8jWRfFUriWVil3xbcTEN4zE/JLjs=)
                          2: CAV5F_RxEFXurDzHuM5vHnzsOwE.roa (hash: qQ54X/73hEKC7jEpzKqRYCSiWpjiVoPDcppGmKRov9U=)
                          3: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (hash: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:d1:9f:8c:84:9c:2b:ef:af:d4:52:92:f3:0b:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127
        Validity
            Not Before: Mar 26 00:02:09 2026 GMT
            Not After : Mar 27 00:02:09 2026 GMT
        Subject: CN=62d9f2cefc79220ad7a3ee5af8424dffbf29bc6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:17:47:5e:cc:85:41:8d:db:01:ea:7f:97:
                    cd:ca:1b:f5:05:14:c4:c9:98:82:2b:8a:df:d9:eb:
                    38:47:10:e8:fc:56:79:7c:ab:ee:88:c9:e6:c4:eb:
                    2c:11:80:f8:b7:49:35:7f:79:d4:07:67:fe:d2:80:
                    01:89:1a:2e:a4:88:df:04:f5:6c:03:25:20:73:55:
                    b8:83:8e:96:73:c2:31:0d:37:b8:c8:ad:34:ee:fe:
                    d5:d6:11:de:a6:e0:cf:2e:52:49:44:40:be:b4:52:
                    5b:fe:ce:5e:2a:fe:ab:6e:45:23:42:36:f7:ae:5a:
                    d9:a9:11:b7:5d:0c:59:49:4c:dd:33:e3:9e:9f:1f:
                    97:36:ba:84:bf:c3:eb:8b:7c:46:aa:06:f2:3a:f2:
                    24:fe:77:24:91:74:62:47:be:6b:43:26:a2:fc:c0:
                    07:db:f9:5b:0d:fc:b9:53:d0:9a:c6:e8:9f:d8:e8:
                    b4:16:2a:07:f9:85:8c:37:77:dc:82:ef:c6:d3:6e:
                    e1:99:5e:0d:28:6f:2e:2a:74:8c:36:6b:ed:bc:31:
                    5e:b7:94:af:a1:90:f5:b8:bb:58:11:8d:fe:d8:e1:
                    8e:16:98:6c:15:88:a3:c6:6b:db:e0:38:b9:73:e2:
                    6b:d4:cc:82:4b:bb:c0:44:5d:aa:f5:45:63:d1:eb:
                    f0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D9:F2:CE:FC:79:22:0A:D7:A3:EE:5A:F8:42:4D:FF:BF:29:BC:6C
            X509v3 Authority Key Identifier:
                keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:fd:de:ed:a4:cc:9a:37:89:4d:99:47:fa:f2:4e:3e:4b:34:
         ba:2f:cc:e4:5a:3a:0f:d8:bf:cf:b5:d0:c4:2a:f3:c2:b8:0a:
         5c:0c:5f:28:60:ec:c8:9b:57:ce:9e:de:29:aa:89:d7:63:48:
         8d:08:04:57:d4:6b:27:e9:77:37:04:22:bf:b3:cd:b2:f0:50:
         61:cb:47:49:23:b6:01:ec:01:f9:0d:be:0a:15:b3:c7:84:48:
         8d:6d:b6:2f:da:cb:8e:02:9c:44:f3:22:09:f9:8a:d7:5f:52:
         e2:bd:4e:63:6c:2b:bf:c6:b5:ca:5c:96:af:b7:f0:fe:c2:90:
         00:cb:eb:99:35:b8:7e:71:0a:40:18:ed:18:fe:c0:0a:2c:9c:
         b2:ca:3e:36:91:4d:e9:02:e1:e7:9b:a2:0a:e6:1c:d8:39:eb:
         aa:6e:4a:4a:93:00:81:e2:a7:fa:e0:11:38:be:13:cf:c6:bf:
         e4:6a:71:2b:a5:4d:58:0e:46:c6:e0:3b:18:70:34:bf:04:bd:
         7e:7f:0b:bf:d3:69:8f:7e:a6:d1:0c:24:cf:2f:f6:26:f6:7a:
         f2:6b:8a:84:d8:bd:3d:57:91:06:db:80:7d:6c:8c:69:30:18:
         4f:33:ec:29:7b:22:27:a1:5c:51:61:1b:89:1e:ce:49:2e:eb:
         c3:2b:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:43 2026 by rpki-client