Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File:                     c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier:          WjYjW/82i9i8KyeN1TdRx462+tpTro+xpFqKYbAZYGg=
Subject key identifier:   0A:2E:2B:B7:F1:1E:DA:F8:DC:A6:AE:6C:AC:FF:9E:CE:ED:57:75:7E
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer:       /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial:       019D27A8B641D99A7D7425BB096CA488159A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:01:01 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:01 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:01 +0000
Files and hashes:         1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
                          2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: ZzLu8Uh2ttKlkPFmaimqa8BxDE7p/7ggPXxbp7Hd8Go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:b6:41:d9:9a:7d:74:25:bb:09:6c:a4:88:15:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
        Validity
            Not Before: Mar 26 01:01:01 2026 GMT
            Not After : Mar 27 01:01:01 2026 GMT
        Subject: CN=0a2e2bb7f11edaf8dca6ae6cacff9eceed57757e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:28:8f:cd:9d:7c:06:f1:d0:d4:bf:8e:d9:5d:
                    2e:ef:9e:50:ca:f8:df:c3:2a:2a:d5:fb:e1:db:78:
                    a5:d1:84:25:e0:de:73:3d:35:dc:a0:76:8b:56:69:
                    87:05:7e:5a:58:9f:25:97:b2:bc:6d:21:ae:93:58:
                    97:3d:a5:6a:90:9e:52:d7:e1:ef:c5:33:7f:80:8d:
                    8d:9a:02:74:47:7b:96:f2:04:6c:d5:74:b3:59:92:
                    48:5a:8a:37:86:89:05:bc:46:86:16:2a:fd:9f:95:
                    d6:c1:a6:ca:9c:3c:5a:ec:f2:89:9b:c9:9c:cf:ed:
                    15:49:c5:cf:55:ea:a6:58:7b:e0:ae:dd:e1:e3:4d:
                    3b:62:72:f6:a6:61:25:46:27:dc:06:c8:f9:a4:07:
                    17:66:34:8c:20:cd:d6:00:ce:aa:db:d8:d2:82:e0:
                    6b:47:3a:cd:61:30:2d:1f:b4:37:62:6d:42:85:cc:
                    15:41:25:18:f4:29:ce:28:fa:8d:1d:ef:14:bd:3b:
                    2d:0f:88:df:9d:28:38:dc:59:a4:28:b0:27:80:66:
                    78:07:12:9b:0c:2f:c8:81:68:e9:f2:a4:4a:d8:ec:
                    b9:ba:03:09:1e:7d:f2:db:d0:43:8c:e4:12:b7:bf:
                    1a:9e:67:66:69:be:5a:9b:38:0a:01:86:c0:2c:ed:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2E:2B:B7:F1:1E:DA:F8:DC:A6:AE:6C:AC:FF:9E:CE:ED:57:75:7E
            X509v3 Authority Key Identifier:
                keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:07:7f:64:91:82:26:7d:71:99:de:a6:c7:62:d4:cd:4b:c9:
         35:4f:3f:bd:5f:15:a4:84:d4:03:67:15:6d:07:98:19:b2:d6:
         ca:fd:3e:ca:b3:c6:75:b1:bf:b8:4e:0c:27:f8:6d:89:cd:c4:
         48:58:55:60:ff:b7:1e:64:f2:b5:fe:50:4f:97:9b:2e:bc:af:
         12:a4:d4:48:67:83:35:9d:29:4f:e0:5d:11:c6:63:c9:d5:ff:
         fe:4d:15:bb:c1:11:15:5f:3f:8f:ae:22:89:d8:b0:d2:df:22:
         57:69:ec:4b:da:8b:90:50:3e:69:47:e0:6c:3a:32:26:a9:e1:
         9d:66:1d:f9:a4:04:fe:cd:08:f6:ca:b1:4e:a1:8d:d8:90:bc:
         84:f9:61:1b:85:93:e3:cb:ee:fa:57:43:59:bb:9c:b9:be:68:
         d3:ef:50:7a:d6:ca:91:f4:07:ab:6d:e0:25:ad:c8:1a:f4:82:
         11:f9:94:ed:0b:1d:1d:cf:92:fb:25:81:fd:f1:45:bd:a8:0a:
         c5:73:44:a0:ad:e7:db:d7:e5:b1:ef:df:9c:dc:3f:1c:c2:60:
         70:e3:17:3e:7b:6c:37:f1:03:86:b2:73:f8:42:da:e5:32:fc:
         74:bf:ad:1e:28:3c:c0:9c:2a:78:86:9d:50:11:a3:27:43:78:
         d6:76:9d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:17:44 2026 by rpki-client