Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
File:                     8UHWZGmLcP-yom9oS0fetsjVmlM.mft (raw, json)
Hash identifier:          LoGHWZPFTl/fl/0SrRdEoV/EA0K/+OIzkskCHAaAVu8=
Subject key identifier:   89:70:B3:34:F2:AF:D8:0E:3F:10:47:55:75:82:BB:E5:4D:6C:CA:AA
Authority key identifier: F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53
Certificate issuer:       /CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
Certificate serial:       019D27DF68FD24D7875EBAD0EB6CE24BFF2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
Manifest number:          12BF
Signing time:             Thu 26 Mar 2026 02:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 02:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 02:00:45 +0000
Files and hashes:         1: 8UHWZGmLcP-yom9oS0fetsjVmlM.crl (hash: JpBYA/XqbOHrPiJI96iJ7roCmpmyjMObhEzvZ2L8+j0=)
                          2: uYZjOh9Kgwsak2oPpAOEr0mbsfE.roa (hash: OrmjLRTXG+oegV4PdrzJj0Bu9Tz8UUlGWQ3FZMfRKHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:df:68:fd:24:d7:87:5e:ba:d0:eb:6c:e2:4b:ff:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f141d664698b70ffb2a26f684b47deb6c8d59a53
        Validity
            Not Before: Mar 26 02:00:45 2026 GMT
            Not After : Mar 27 02:00:45 2026 GMT
        Subject: CN=8970b334f2afd80e3f1047557582bbe54d6ccaaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:d3:52:2b:27:d2:c0:87:7e:31:7b:e0:9f:
                    38:1b:f0:53:23:4d:c4:4c:27:b0:3c:4f:df:49:c6:
                    76:48:43:bf:a3:2c:57:55:7a:c2:7f:42:0c:d3:fa:
                    ff:4c:12:68:08:cd:7b:19:79:ec:3f:38:5a:69:74:
                    d6:5a:d2:cf:9e:fe:aa:00:49:db:39:12:c2:7d:0c:
                    9c:34:1d:9d:a1:aa:0b:7e:5b:86:2d:12:6a:c3:94:
                    a4:1b:b6:fa:4a:bc:b2:28:e9:41:8f:b2:75:c7:8d:
                    09:cf:73:8a:91:2a:2b:17:aa:a0:43:02:89:b0:06:
                    ff:a6:c5:db:54:cc:10:7b:75:02:5c:45:08:2f:13:
                    fc:71:6c:e0:fd:76:2e:9e:ce:78:8c:9f:4f:0e:86:
                    0f:ca:14:4f:ac:87:86:e8:5d:3d:5e:de:7a:64:a4:
                    44:4a:4d:91:a1:18:9a:92:5e:7f:e4:bc:62:ee:fc:
                    f8:aa:13:e1:dd:da:b5:11:9b:dc:ee:c0:8b:62:9c:
                    7a:dc:3d:64:1e:aa:44:96:5f:81:cf:1f:81:f2:de:
                    45:ed:a6:1e:fc:0a:2f:ad:cc:43:b3:92:27:51:03:
                    af:1e:54:ed:47:6f:35:b9:e6:2f:8a:fd:b3:10:a2:
                    4e:03:c7:7c:8c:2e:92:b9:4f:64:e0:74:73:6b:9c:
                    29:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:70:B3:34:F2:AF:D8:0E:3F:10:47:55:75:82:BB:E5:4D:6C:CA:AA
            X509v3 Authority Key Identifier:
                keyid:F1:41:D6:64:69:8B:70:FF:B2:A2:6F:68:4B:47:DE:B6:C8:D5:9A:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UHWZGmLcP-yom9oS0fetsjVmlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2e8abe-8e70-4715-91ae-963d13fd09bb/1/8UHWZGmLcP-yom9oS0fetsjVmlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:9c:37:ab:03:81:ae:82:dd:06:62:50:90:cd:ba:a2:3c:
         b0:b0:50:c5:c4:c4:46:ba:61:a7:f1:7d:d3:e7:e5:2c:41:81:
         00:17:20:50:43:80:5c:51:d3:76:14:2b:16:b4:ad:2c:1c:18:
         f3:f9:3f:5c:2e:cf:2b:60:fe:0d:6f:bb:64:f4:ea:6f:d8:55:
         df:4b:ee:43:62:26:3c:6e:0b:36:b4:eb:9a:6d:d0:82:0f:6a:
         d2:17:7c:d6:75:ea:f9:2d:76:a9:32:ad:1b:9a:7e:a1:72:5b:
         72:56:4e:29:85:21:a3:f9:10:24:6a:e4:da:45:b5:72:88:c9:
         db:84:ac:ce:04:84:f1:79:4b:ce:87:b1:04:0c:eb:8b:e6:c0:
         b3:6b:79:31:be:fc:d6:08:c4:b2:ce:ef:a9:bd:8f:a5:e7:b2:
         4a:a8:74:91:ed:ab:be:46:da:c9:62:a1:ab:1c:b9:5f:f1:eb:
         68:88:ef:97:6e:05:82:f3:b3:10:5d:c2:18:bc:1f:90:ea:dd:
         27:c5:e3:73:1e:49:da:96:ef:67:03:6d:5b:20:8a:99:17:f1:
         00:7e:ce:f4:d8:13:8d:cf:d8:91:5e:f3:9a:74:8f:08:e5:b0:
         7b:39:f1:21:a3:5d:e9:db:7c:db:dc:bd:ac:c2:17:88:29:ce:
         ae:7b:c5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:59 2026 by rpki-client