Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
File:                     8YCPGr745rWc1DWaa0SB_HyWMdE.mft (raw, json)
Hash identifier:          x3bT85QC7PP8LxQ0m1fWed0CKIkhllosgwKGEqrtY+M=
Subject key identifier:   97:27:09:E0:49:6F:69:10:B1:17:70:4E:E2:59:6B:07:60:DF:3A:8D
Authority key identifier: F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1
Certificate issuer:       /CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
Certificate serial:       019D2AE138515BF105AFDE7D95E3C3B5516C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
Manifest number:          188A
Signing time:             Thu 26 Mar 2026 16:01:36 +0000
Manifest this update:     Thu 26 Mar 2026 16:01:36 +0000
Manifest next update:     Fri 27 Mar 2026 16:01:36 +0000
Files and hashes:         1: 8YCPGr745rWc1DWaa0SB_HyWMdE.crl (hash: JWmYTRGiwCmcLB10W+IJxwiO2r3XWjAP4J95TIGJJmw=)
                          2: 8hVawCDbKfLGVmy8uR3L6HSyhjY.roa (hash: YVD0bBTAjI7+lAMuKAykSFrhVddz0zyQETcTt1yWfGY=)
                          3: bo4jTmLbavInVB1_Xe56jT6duFc.roa (hash: DrLAswJfulupBgy+nF1dC9JnLY+ojBgEGF1LnkBTmLQ=)
                          4: l9mq3dtlYUJYwqPz2hM7UKcrn8U.roa (hash: HVy6JnYfA7DiKZs/nj6ujUr8Qm/xOl9atbOQ23YdxGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e1:38:51:5b:f1:05:af:de:7d:95:e3:c3:b5:51:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1808f1abef8e6b59cd4359a6b4481fc7c9631d1
        Validity
            Not Before: Mar 26 16:01:36 2026 GMT
            Not After : Mar 27 16:01:36 2026 GMT
        Subject: CN=972709e0496f6910b117704ee2596b0760df3a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:2d:de:5e:e9:76:5b:cd:91:00:27:16:46:
                    b9:ce:4d:92:37:ba:c4:f2:52:9e:f1:be:b3:b0:57:
                    e5:8e:75:34:e4:fe:d8:58:de:3f:96:71:54:26:53:
                    3b:77:f2:a9:14:54:6b:d3:73:f0:23:61:a3:f8:94:
                    d0:0e:2f:a1:43:38:14:c4:53:0e:15:7a:4f:b4:cf:
                    11:33:ae:bd:cd:ff:12:7a:f2:d9:c6:21:ef:e8:7d:
                    a4:90:33:77:c9:bb:91:73:0c:1d:68:ad:b7:19:42:
                    a5:a4:c2:a6:c6:0c:c6:8c:ee:c0:aa:12:b3:94:d7:
                    7c:07:3b:06:74:3b:51:f3:69:bd:cf:7e:d4:58:40:
                    76:35:6f:54:54:0d:6a:cb:f6:4f:25:6e:0f:fc:0e:
                    9d:55:6c:9d:e1:1e:8d:6c:b9:17:be:ac:c9:72:9f:
                    2f:d8:02:95:27:5d:a4:a1:31:35:0b:1a:0b:f9:b0:
                    da:11:a3:94:c2:67:08:2e:62:4c:0a:51:37:36:7b:
                    60:46:b0:a0:83:2f:32:b8:bd:a5:6d:e3:fb:fd:50:
                    e5:30:5f:b9:79:7c:26:6f:a4:2b:ee:e4:66:e5:0a:
                    de:58:6e:b6:09:94:ef:8b:7d:f4:fa:55:8e:1c:a5:
                    0d:fa:39:e3:17:a0:4b:63:97:ef:4c:9d:c1:21:b1:
                    75:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:27:09:E0:49:6F:69:10:B1:17:70:4E:E2:59:6B:07:60:DF:3A:8D
            X509v3 Authority Key Identifier:
                keyid:F1:80:8F:1A:BE:F8:E6:B5:9C:D4:35:9A:6B:44:81:FC:7C:96:31:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8YCPGr745rWc1DWaa0SB_HyWMdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ae324f-54f5-41da-bebf-03077e37c61a/1/8YCPGr745rWc1DWaa0SB_HyWMdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:15:bc:01:de:8a:b3:36:bb:23:f7:58:07:0d:cf:0d:39:72:
         67:24:b8:3e:f0:24:b8:76:74:db:7b:b0:2b:a1:b4:45:22:70:
         ea:c8:ed:5f:61:ad:6b:11:56:09:4b:00:e8:09:c6:65:2c:92:
         6b:e6:18:93:59:cc:82:78:39:1e:d4:8d:06:5a:77:29:60:a9:
         d4:f9:21:f9:d8:72:47:0e:9e:14:1b:e9:59:57:a3:6e:46:e0:
         31:fa:1a:61:13:79:da:94:dd:05:31:a7:1a:63:23:8f:a2:6f:
         de:f8:d4:ae:66:d7:0e:de:bb:c4:a1:cd:fc:7f:cb:36:5b:99:
         01:6d:f6:9c:88:22:68:5d:28:46:0d:d4:0c:55:0a:d0:95:00:
         70:fe:75:2c:53:86:45:e8:ec:16:02:f6:d3:88:f4:71:b7:e0:
         cc:2e:a8:95:a7:07:ee:ab:e1:65:00:c6:21:2c:40:67:de:8d:
         3c:bf:6e:40:d2:16:94:b7:72:bc:c7:c0:de:f6:78:24:97:2a:
         7a:90:59:06:5b:b6:fa:bf:a1:2b:9c:df:fc:83:90:c4:e1:b3:
         3e:4b:26:23:93:13:b1:50:25:9f:3b:82:f0:57:49:6a:68:49:
         fa:9d:4b:14:66:a9:09:eb:b7:c1:18:65:27:d2:ff:0f:1a:34:
         89:f1:0e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:21 2026 by rpki-client