Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File:                     8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier:          9Nl9gqIgbrfoYmqWh5diShO7RO5wBJLG217Mss5jM1k=
Subject key identifier:   D2:D2:DA:A7:55:23:74:0F:8D:73:8F:97:1A:E4:69:1F:D9:AD:D6:BC
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer:       /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial:       019D25B9FF57308E2B53A5F01766DFD1512A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number:          182F
Signing time:             Wed 25 Mar 2026 16:00:39 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:39 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:39 +0000
Files and hashes:         1: 6gy9ic0JHyKNMeOj6vnfnWQN3SM.roa (hash: 7Tyj4JshIbYP3V9AawiQ2X+dktavULDW7Khh9vcmSus=)
                          2: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: FfNSoQP4GNFCV02cVizjkW/XOgCcKHTQSDCnp9BhxU8=)
                          3: zSJhAsH0v6Lt3ykWNTipD6DjBvo.roa (hash: GqW80/tMAbtkCDtDVmCwRVj7WYcfpvr4HUTuVqPBK+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:b9:ff:57:30:8e:2b:53:a5:f0:17:66:df:d1:51:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
        Validity
            Not Before: Mar 25 16:00:39 2026 GMT
            Not After : Mar 26 16:00:39 2026 GMT
        Subject: CN=d2d2daa75523740f8d738f971ae4691fd9add6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:c2:f9:7c:ed:c4:25:e0:3f:ad:28:ca:d4:
                    4f:0b:f7:52:1e:6b:37:69:36:47:95:a0:2d:d6:cc:
                    81:9a:05:1c:80:3a:3e:2a:ac:5e:81:ac:72:b9:b2:
                    fb:95:3a:c0:08:b9:5a:ef:ee:81:13:93:b1:2c:9f:
                    15:a9:c2:97:f7:e5:ca:7e:0c:a6:89:76:05:c4:5e:
                    c0:84:cd:dc:c2:00:7f:9c:f6:bb:20:4c:3a:37:fb:
                    de:01:0b:31:27:77:36:eb:78:1b:b8:34:df:9e:95:
                    4b:c5:8c:ff:ca:82:a0:2d:37:cf:a4:41:9c:5e:69:
                    84:4c:5d:e8:26:be:80:e4:d8:ec:fd:f3:7d:0c:1a:
                    95:c2:c0:59:16:6b:b4:d1:e3:fd:61:91:64:f2:48:
                    e6:e8:3d:d3:15:53:31:de:fc:58:f3:c4:3c:dd:5e:
                    e4:85:17:9d:ce:6a:ba:e3:e6:03:b8:8e:e3:54:a8:
                    4d:d5:9b:97:a7:47:e1:1a:78:07:07:c2:23:74:65:
                    1e:d3:73:25:73:52:55:c2:6d:3a:a9:6d:ae:16:6e:
                    d5:1a:ec:80:88:76:5d:84:0a:2a:d6:28:aa:a1:21:
                    cd:ab:81:4b:74:15:0a:3e:ea:92:10:23:00:c1:4e:
                    ce:04:f5:ed:73:b6:38:4e:e3:cc:35:50:75:4f:3c:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D2:DA:A7:55:23:74:0F:8D:73:8F:97:1A:E4:69:1F:D9:AD:D6:BC
            X509v3 Authority Key Identifier:
                keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:72:6b:d3:b1:87:8d:88:27:09:cf:b4:5d:e7:2f:1d:18:05:
         62:7e:91:9c:66:14:08:77:b7:58:70:7b:27:1e:c2:e6:ff:f5:
         80:bb:3a:40:9d:ed:00:aa:0f:2a:6d:2b:db:8b:34:f5:60:32:
         41:03:cd:24:bb:14:a4:9a:03:60:1f:89:3c:ed:95:6b:cc:9d:
         91:13:47:b5:58:51:88:87:e4:7a:18:28:e5:31:22:b4:b2:4f:
         bd:8b:56:19:37:6e:6e:c4:60:bb:21:2c:f8:d1:92:15:0d:4a:
         23:fc:f3:e6:ba:5c:6f:aa:19:5b:5c:9a:02:2b:10:0d:7f:15:
         b0:54:c5:3f:16:7c:36:d7:43:2c:d3:87:1e:67:53:90:36:c2:
         fc:57:cc:77:e7:e0:b3:07:21:f0:79:98:c9:53:fc:61:f8:7f:
         20:0d:99:7b:bb:22:8c:5f:29:d0:e9:4c:0e:cf:60:ce:f4:ca:
         3e:76:0d:de:fd:5d:a8:53:3c:55:ab:b4:f1:c7:20:40:e7:39:
         40:b5:a0:46:b8:27:57:46:d1:dd:3b:36:fa:4c:f2:83:1f:ab:
         8a:1d:05:27:81:d4:5d:e1:9b:e7:96:00:c6:00:ab:83:64:c8:
         dc:eb:b8:99:7d:40:ec:6a:28:1c:e1:99:8e:b7:09:a2:7d:8a:
         1c:73:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:14 2026 by rpki-client