Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File:                     R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier:          /eSLLr21Ls6YJb+8FOM9g0bJKGAdkM+bVGt+Z6lx3p0=
Subject key identifier:   F3:40:6B:E5:6A:6D:D9:D0:3D:01:3D:B0:25:57:F7:BC:B7:21:AD:38
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer:       /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial:       019D281647EB7EFBC8C4D205ED5247697464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number:          167B
Signing time:             Thu 26 Mar 2026 03:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:41 +0000
Files and hashes:         1: QfZV5akA_LVlGiRS4Ipop_sv1Gc.roa (hash: vjfnrfXaTawfVYXNYU+0NjZYU8xM90SngyWSZqja7G0=)
                          2: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: xZpMqRvI4onr4ekUU5ZCrWPqVc6hAQr3Hxegerbc9qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:47:eb:7e:fb:c8:c4:d2:05:ed:52:47:69:74:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
        Validity
            Not Before: Mar 26 03:00:41 2026 GMT
            Not After : Mar 27 03:00:41 2026 GMT
        Subject: CN=f3406be56a6dd9d03d013db02557f7bcb721ad38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:3d:3b:b7:7f:46:07:38:88:70:75:4f:22:
                    80:f1:5f:7a:86:fe:d2:17:84:f7:8d:03:d0:fd:2f:
                    51:3d:65:86:fc:64:a8:52:6b:8b:e0:80:86:71:69:
                    9b:cc:04:69:a7:11:b9:24:58:0b:de:60:a8:5c:41:
                    01:f3:7f:a0:d6:18:4f:52:fa:ff:f8:4c:4e:cf:b1:
                    6c:be:a7:8f:a2:46:bc:50:0d:8d:27:65:3b:24:83:
                    7d:e2:52:b4:7b:45:19:57:62:46:a3:ac:0b:78:87:
                    9a:35:1c:ed:25:f0:b9:38:ef:b9:a0:70:f4:9c:fb:
                    37:ff:d2:bd:60:81:34:3c:f8:65:60:ab:69:ad:37:
                    bd:6b:fe:dd:9d:d4:26:b3:d1:97:a0:28:e0:2a:84:
                    e8:4e:32:31:61:48:95:02:a9:27:56:be:7a:da:80:
                    05:c3:ee:e2:b1:30:7b:62:21:1a:b6:1b:ba:01:47:
                    ce:f8:78:b5:31:99:d1:7b:d3:62:a8:58:57:6b:82:
                    c1:60:a5:78:ce:46:c8:9e:b1:45:d5:48:6d:f8:d2:
                    81:76:81:62:a1:4e:f4:3f:b4:d6:90:e7:56:38:d3:
                    5f:8c:96:40:db:3a:10:a3:0d:16:54:6a:1b:22:30:
                    f4:2e:0d:18:58:76:78:3c:38:8b:72:57:9c:ab:8f:
                    1a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:40:6B:E5:6A:6D:D9:D0:3D:01:3D:B0:25:57:F7:BC:B7:21:AD:38
            X509v3 Authority Key Identifier:
                keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:66:e7:35:1f:c0:ca:ce:80:9f:64:8a:0b:da:3e:6d:21:2b:
         8a:24:61:80:6a:2f:a8:83:4b:29:0b:f4:92:8f:25:da:45:35:
         2a:90:b7:69:46:76:42:1c:e5:b6:77:5d:e6:d7:ae:54:2f:45:
         cf:bc:f9:70:d1:7b:2d:3c:21:9b:ab:bc:7a:92:e5:9a:c1:f9:
         19:74:52:56:93:7b:4f:e9:46:b4:ca:5e:49:d2:26:12:bb:91:
         1c:54:e8:e8:81:d7:5c:10:e7:0c:93:82:fc:e3:82:cb:d7:80:
         00:22:36:1c:45:32:98:0a:88:e1:0f:84:de:3f:d9:41:33:88:
         8a:3c:3e:15:ac:50:ac:bc:fd:5f:84:4f:4c:86:1c:86:c2:4c:
         77:96:8f:68:b8:3f:18:dc:1a:c9:8a:09:0d:18:19:e7:0b:f4:
         f6:c4:1b:8a:a3:7c:dd:66:a0:e7:ba:02:20:9a:14:a3:66:02:
         dc:53:39:0a:3a:2a:21:6d:a2:a0:c4:97:e6:43:c4:f9:6f:56:
         1c:e8:ed:27:61:17:b5:90:21:09:b0:19:73:70:22:fd:53:c3:
         b0:df:52:6f:20:dc:de:79:63:dd:96:19:3b:b8:8f:94:0e:32:
         a9:61:10:f1:25:4f:85:85:e0:ff:33:8c:49:8b:7a:e6:cd:de:
         d0:ca:c1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:54 2026 by rpki-client