Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
File:                     i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft (raw, json)
Hash identifier:          Yu0BupfjYN1dqL8OIND26TKQUf6RzljETCxBAXhxdSk=
Subject key identifier:   73:F8:23:F3:72:FF:C8:C4:88:5D:4E:41:B4:AA:BE:A4:7C:42:84:53
Authority key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Certificate issuer:       /CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Certificate serial:       019D2AE073E53EBB03C0607E7B8C4C22044C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
Manifest number:          181B
Signing time:             Thu 26 Mar 2026 16:00:45 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:45 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:45 +0000
Files and hashes:         1: KEVzLpiIlZvYuzak8r2VEN0lblo.roa (hash: vPPG7HusI8DfbdkDC9LeEMSZP0GfYBRUhRWHNDe+9aA=)
                          2: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl (hash: 2I+TDnU0YArJxVADzoJU9Ip9nudJYlPnUPMOlWx0wro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:73:e5:3e:bb:03:c0:60:7e:7b:8c:4c:22:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
        Validity
            Not Before: Mar 26 16:00:45 2026 GMT
            Not After : Mar 27 16:00:45 2026 GMT
        Subject: CN=73f823f372ffc8c4885d4e41b4aabea47c428453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:86:9b:51:f0:60:03:26:89:69:3f:47:00:
                    c8:52:29:0d:71:ee:6b:81:78:2e:a1:75:5e:a6:cf:
                    03:60:57:e4:43:a4:b1:d9:f7:47:fc:eb:45:36:a5:
                    ca:4f:1d:64:98:1d:73:f0:d8:ff:b6:b5:0c:8d:dd:
                    b2:c4:8f:44:72:5c:8c:88:e7:0b:ab:25:32:17:b9:
                    89:d4:f5:2e:45:75:b2:a8:9d:63:05:0f:5d:bb:8e:
                    76:c6:a7:88:e7:f6:e7:93:d7:fc:e0:d6:ed:08:e5:
                    8d:2f:2e:a0:a9:25:a7:f7:02:b1:f6:01:c9:9b:b6:
                    27:0e:bc:e3:f1:d9:f9:85:ae:3c:0d:a4:60:f3:ea:
                    0a:90:50:c6:f3:d6:10:e3:7e:56:22:13:a4:f6:45:
                    55:89:32:12:ce:94:06:b8:f3:e1:9f:e5:21:3e:d2:
                    24:fa:dc:d1:fa:08:f0:17:69:0e:57:27:ca:f3:33:
                    5f:1b:2f:f5:49:0c:ed:95:be:99:af:da:ea:ce:f3:
                    99:bc:31:71:51:0d:34:30:a6:88:cd:4e:80:7b:55:
                    14:06:9a:e5:b8:89:7c:d9:54:e6:db:5e:4f:57:b6:
                    32:96:10:eb:ed:5a:39:8e:0a:fa:58:1f:b2:6d:62:
                    90:e9:bc:b1:09:aa:5a:58:24:8c:48:d2:bc:7b:9f:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F8:23:F3:72:FF:C8:C4:88:5D:4E:41:B4:AA:BE:A4:7C:42:84:53
            X509v3 Authority Key Identifier:
                keyid:8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:67:50:06:5c:38:9d:fe:e5:48:cb:11:e7:0e:2f:ab:58:
         b7:e6:50:42:ff:04:d6:25:41:68:6d:49:19:a1:5d:04:46:85:
         d1:c4:8a:91:e0:c1:89:34:28:37:46:31:0e:0a:f3:75:6f:b9:
         45:3e:94:d0:c6:ed:1c:03:5a:cf:15:6f:79:e4:92:8b:2a:07:
         5e:62:02:22:32:ae:4d:34:66:88:97:54:c5:55:ea:7d:1f:e5:
         2a:fa:d9:91:77:21:79:56:0c:31:ba:15:53:67:a4:bd:11:6d:
         8f:ac:a6:95:02:53:06:ce:67:08:ee:b6:90:ac:ec:e0:29:7c:
         3d:0e:fc:9e:f1:f2:3a:d3:f2:3c:7d:5f:69:11:a9:a2:d2:82:
         c7:2f:3f:66:78:40:df:39:1b:40:7f:a7:4b:f5:e6:d6:ec:85:
         76:60:d2:78:52:58:80:02:07:e8:0f:cb:6a:58:09:b0:6f:1a:
         f8:ff:18:59:dc:f5:c8:45:44:76:b4:f0:5a:38:a9:32:21:c7:
         aa:8c:1f:c3:50:ba:fe:55:4a:82:11:43:0b:1c:19:88:db:cd:
         7b:95:f3:52:d8:4b:ff:19:ef:e9:e5:f2:cf:9d:47:ee:a1:d0:
         64:b4:8b:b3:74:1a:61:8e:a7:81:0f:e8:46:87:f1:00:3b:c6:
         b3:9c:21:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:19 2026 by rpki-client