Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
File:                     08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json)
Hash identifier:          nompugl+Mx9UU5ZEplS9j8QpH6bwqZ5TMNPd2pAzv+g=
Subject key identifier:   85:19:B2:37:97:0A:A4:04:E5:D4:D4:5B:D7:2F:51:51:63:7B:9C:F4
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Certificate issuer:       /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial:       019D28BB1B0A5BA6012A2ADA3DEFB55D58AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
Manifest number:          1474
Signing time:             Thu 26 Mar 2026 06:00:43 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:43 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:43 +0000
Files and hashes:         1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: J+/mBe5MuShffhmen2xPtLPufWacpWm7gxvCrUtiLrg=)
                          2: 7n21j0arkV0i_T2sVOrocRSEjSQ.roa (hash: 4uQJyIy3PMd9RTNB8+vJy+PcEdAqthYjAtrKR+jgLzI=)
                          3: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=)
                          4: JoeiFWNjjvIPOlROi_VGGMgQhvU.roa (hash: zb+eHGR6nD50fILOA3y9cV4VqzOKkbibkd0YSA6RbyM=)
                          5: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=)
                          6: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=)
                          7: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=)
                          8: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=)
                          9: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:1b:0a:5b:a6:01:2a:2a:da:3d:ef:b5:5d:58:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
        Validity
            Not Before: Mar 26 06:00:43 2026 GMT
            Not After : Mar 27 06:00:43 2026 GMT
        Subject: CN=8519b237970aa404e5d4d45bd72f5151637b9cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:06:c1:ef:d9:8d:a6:f0:b2:fe:b5:20:4d:80:
                    7c:a3:f1:97:0a:ae:ec:f3:08:c9:cb:c0:89:a3:ce:
                    17:16:4a:21:bf:fa:4a:32:37:ec:a0:29:a2:d8:32:
                    ba:d3:43:8d:16:91:ec:3d:1d:21:13:fb:c6:ee:1f:
                    1c:bb:2c:a0:5b:3b:f1:bc:bb:47:25:cc:68:e4:48:
                    58:bd:8b:10:61:2f:d8:90:65:b0:8c:8b:03:c1:9e:
                    f5:88:ac:e3:fb:5e:34:9e:46:32:ab:71:09:b4:1c:
                    62:dc:f1:1a:f5:c6:d1:94:c9:a6:9c:da:26:68:f4:
                    bc:1f:8e:c8:de:16:f3:d1:ec:eb:81:fb:62:be:c9:
                    55:b4:ca:5d:55:30:eb:1e:2b:72:84:7e:7c:7d:26:
                    a1:d3:76:c0:d1:7a:9a:c7:56:73:9c:0a:8e:60:8c:
                    33:69:3b:88:7a:ba:2e:7f:0d:ef:d3:75:14:92:c5:
                    d0:bd:1b:d3:84:d0:92:88:c4:7d:07:b8:a0:c9:fe:
                    7e:2d:27:de:ed:3d:14:f4:08:0c:d3:0a:42:36:d5:
                    67:03:75:d5:9a:c8:87:81:20:b4:26:b8:38:73:2f:
                    20:da:f2:da:02:5e:e5:27:80:53:45:4a:65:20:87:
                    46:c0:b3:27:4f:e7:f8:42:0d:62:a7:1b:29:63:f5:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:19:B2:37:97:0A:A4:04:E5:D4:D4:5B:D7:2F:51:51:63:7B:9C:F4
            X509v3 Authority Key Identifier:
                keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c3:d4:7b:75:c0:64:18:ac:26:c6:8c:f1:41:8f:ff:98:e3:
         84:5e:5d:2d:e2:c2:3f:79:9c:d8:ce:14:a5:ba:d6:f1:e1:37:
         18:99:76:b6:5d:2d:98:52:4d:8c:dc:ca:b0:fe:9e:a3:14:62:
         35:f7:53:41:c7:55:b6:dd:2a:54:3b:8e:eb:85:a0:67:a7:70:
         23:8e:62:c0:e8:c6:01:3b:70:3b:81:70:fe:fb:6a:0e:82:fc:
         33:e2:54:a3:48:f8:ab:5c:b2:c2:0e:6a:e3:04:34:38:78:36:
         82:77:3a:65:22:0f:8e:9d:d9:4f:bb:b0:84:aa:c5:f4:64:b0:
         8e:e4:4c:ef:b6:d6:67:60:dd:b2:15:f9:1b:03:b7:80:5e:58:
         2a:f2:22:c3:da:2c:2e:d1:f2:f1:4e:ee:41:3a:ab:21:ac:4f:
         c0:e5:b3:7d:ea:77:f9:b7:97:03:df:d3:1e:51:5a:63:5e:ce:
         43:fc:51:7e:dd:b3:f9:fc:9d:5c:65:cc:ec:3c:d8:10:97:a1:
         b7:36:12:aa:a6:ab:bc:dd:d4:bc:fd:3d:66:86:3e:a8:c0:be:
         71:97:bb:1d:ba:6c:07:1c:cd:35:15:e1:59:1d:44:19:17:af:
         0b:c9:05:0e:79:61:79:c5:0a:8c:47:79:1f:94:e1:bd:b9:f0:
         da:01:30:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:47:33 2026 by rpki-client