Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
File:                     igKbHrUc1PS8TdmFoOxlOnXspAw.mft (raw, json)
Hash identifier:          Cf+wxlu/Jh83JsC3V4WxMxL9IfdXSpfijjBkueFmsic=
Subject key identifier:   7C:2C:CA:F1:3B:FF:EE:33:EA:30:5A:4A:C3:97:D9:24:59:7C:31:6E
Authority key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Certificate issuer:       /CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Certificate serial:       019D28BB740E8569769E1D59D50F62D286BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 06:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:06 +0000
Files and hashes:         1: QimRIoifdg2JyU0GSq8a5Aty8zs.roa (hash: sDzqs2/VfMiYAG8w6JukF5QplVvfocGRr/BUGWqcR/A=)
                          2: igKbHrUc1PS8TdmFoOxlOnXspAw.crl (hash: xFf00SiRM93zGBg+WtqldZSqiclkIxi3BuEWdLAjkW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:74:0e:85:69:76:9e:1d:59:d5:0f:62:d2:86:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
        Validity
            Not Before: Mar 26 06:01:06 2026 GMT
            Not After : Mar 27 06:01:06 2026 GMT
        Subject: CN=7c2ccaf13bffee33ea305a4ac397d924597c316e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:93:ce:5c:fd:e0:e4:ad:6e:43:f0:75:25:
                    4c:b0:ba:38:46:70:33:19:28:ea:af:62:71:33:9d:
                    b0:88:c1:90:81:75:d5:3c:f9:49:e9:44:55:c2:d5:
                    f0:9b:5f:6c:14:b3:59:8d:b7:15:ac:2f:88:ad:3d:
                    a5:d9:cc:3a:75:b3:27:81:6b:ef:18:9a:a7:14:67:
                    53:03:5a:43:56:6a:e1:03:95:97:bf:5f:5d:06:77:
                    ef:e2:16:34:9d:22:27:ad:ac:36:d3:3b:b4:08:78:
                    f7:39:71:47:c5:d3:b1:4d:73:de:e6:a0:cf:2c:1f:
                    ca:d2:96:4e:1b:61:35:dd:26:16:7e:e2:2d:23:16:
                    95:6c:e8:fd:3d:0c:47:07:46:0d:b8:77:be:14:1e:
                    03:aa:81:69:29:35:dd:29:a5:fa:a9:2f:32:1f:96:
                    86:a2:08:c5:8c:e1:e6:93:4b:93:f6:e8:1d:59:55:
                    74:4c:9c:0e:53:1d:a0:56:0b:05:2a:8a:d0:1d:ff:
                    a4:27:71:0d:84:11:26:b5:9b:87:31:6c:9f:63:c8:
                    10:0f:8d:f6:8a:54:f5:e7:86:c4:6f:f6:fb:25:02:
                    18:aa:48:2c:56:12:05:92:b1:b3:eb:5d:b7:2d:9c:
                    74:d2:08:fa:c3:b4:ba:e2:d8:0f:26:53:6a:8a:55:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:CA:F1:3B:FF:EE:33:EA:30:5A:4A:C3:97:D9:24:59:7C:31:6E
            X509v3 Authority Key Identifier:
                keyid:8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1f:75:77:85:0e:5c:5a:42:65:fd:03:ac:8b:ff:ae:30:26:
         68:72:ed:9c:05:36:9c:a9:59:55:8e:9f:e0:b9:0f:22:7f:a0:
         6f:dd:23:f2:23:e4:87:1f:1a:d1:bf:3f:49:58:d1:bb:f4:51:
         a9:b2:0b:b7:2f:e4:3d:73:5f:f6:db:d7:c3:7a:15:dc:e6:5a:
         b3:6a:a4:e0:4d:23:17:bf:22:11:b9:b7:a7:64:11:ea:08:16:
         01:88:e4:ed:ae:80:58:a0:0d:35:52:a1:ce:47:05:8f:b0:dc:
         52:e5:8a:2d:10:f4:c5:52:fd:e1:89:0a:a6:4a:a3:b1:e3:31:
         c6:37:8e:10:c6:72:9d:25:77:53:92:7b:3e:4c:3e:e8:89:f0:
         46:2f:e3:64:d9:b3:c3:38:b3:8f:e8:b0:55:81:32:54:5b:4c:
         76:bc:4d:07:ad:01:72:45:3d:7f:60:09:f8:32:40:95:00:72:
         b6:ea:7c:bd:9b:12:b5:7d:ea:53:04:74:3b:3b:31:ee:d1:dd:
         77:f2:ad:a1:2f:d0:d9:a8:6a:8b:6e:f0:e8:4c:15:ed:83:09:
         3d:da:71:ad:cd:bc:c8:d6:de:ca:69:ab:dc:36:38:c3:a0:71:
         f3:9d:f6:08:8f:05:02:1f:a9:1a:70:4e:b9:3e:16:ef:04:ff:
         41:02:7d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:14 2026 by rpki-client