Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File:                     O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier:          wGhknjAP1WYFPQK9LBvRTHDRJfy0sjLMk3SDpIsM83k=
Subject key identifier:   27:F4:B1:D4:49:16:D0:11:8D:19:90:0C:80:62:B5:6C:08:62:76:39
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer:       /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial:       019D26CD3B42F0DCA9A5E54F4C4E38DF2AE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number:          0B76
Signing time:             Wed 25 Mar 2026 21:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:17 +0000
Files and hashes:         1: 0-CfXr5FSJ7QMjoY8mIHPZBgI3Q.roa (hash: MoCJmm/n6jdFT/Ij8oC3QyzUQTVWWjSnQl4LbZiISEk=)
                          2: 36lX4dctmC7P7ZWXjASebWEc9y8.roa (hash: Ybt4SJecL6wO5hrSLEhInNVJ2DHKJPp/BsAXWn4cgsk=)
                          3: IynmjmR1yvEbVrkfJa9cZIwyE10.roa (hash: RK1dN6BbvQCv2h0gP86hx6Y2IphNnsgKhjETxDJJmvI=)
                          4: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: SDHMFy0MvJY8LHoXczQBqVSvwhA25wujLC5Jm4FuSe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:3b:42:f0:dc:a9:a5:e5:4f:4c:4e:38:df:2a:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
        Validity
            Not Before: Mar 25 21:01:17 2026 GMT
            Not After : Mar 26 21:01:17 2026 GMT
        Subject: CN=27f4b1d44916d0118d19900c8062b56c08627639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:d7:64:fe:e8:a3:59:d3:29:73:9e:18:62:
                    c3:c9:8a:9a:d9:13:3c:8a:79:9c:08:42:b2:ca:22:
                    14:42:11:71:45:55:4f:10:7f:fd:76:e7:ae:6f:19:
                    c1:5d:69:e3:2f:11:60:3e:87:90:96:c6:f4:be:df:
                    90:39:a4:b6:dd:ef:2f:de:ec:1c:99:1a:5a:95:94:
                    d3:44:c9:60:b6:c8:7a:59:a8:88:0c:91:05:c7:28:
                    62:4e:79:73:b2:11:78:7c:2a:16:26:58:a7:41:fa:
                    07:3d:c6:c4:c4:82:f0:99:23:e9:5f:86:16:45:86:
                    49:22:b6:5e:9f:70:d3:5a:1d:ec:67:25:16:10:24:
                    ff:7d:48:c3:40:ea:2d:54:25:b0:83:07:cc:ca:3a:
                    e4:24:58:02:ba:6f:41:8d:ef:5b:95:19:4e:58:94:
                    dc:a1:04:3c:73:48:bd:45:b4:c6:93:0e:a8:c4:91:
                    d5:cf:03:46:41:68:a9:51:6d:12:b2:80:48:a5:a5:
                    0a:82:31:f1:7d:21:42:b2:1e:aa:1f:3d:6b:7f:75:
                    96:0f:54:f0:d8:29:60:03:15:fc:92:03:44:27:e1:
                    60:a2:70:2d:09:32:cf:c6:3d:23:ae:98:4c:bf:5a:
                    6d:4a:1e:be:4e:8c:9f:c3:ea:d9:ba:20:c1:1a:89:
                    7d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:B1:D4:49:16:D0:11:8D:19:90:0C:80:62:B5:6C:08:62:76:39
            X509v3 Authority Key Identifier:
                keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:9e:da:a0:49:0a:cc:4a:c3:ca:9b:1f:4b:30:12:5f:f8:
         5e:43:ec:d3:c1:b0:a7:b2:5f:7a:85:b0:fb:f9:d4:2c:6c:0f:
         e3:f0:be:5c:60:78:96:24:25:dc:36:85:87:67:fb:18:be:48:
         29:c2:a7:18:cc:04:ac:f5:2c:49:2c:5f:77:cf:4d:e7:fc:4b:
         ef:4d:5c:78:98:88:0b:52:ac:7e:1e:24:86:76:6e:36:80:cb:
         68:2c:a5:f4:03:99:c3:8c:b3:e8:b8:71:00:ac:c8:77:23:23:
         6c:ee:57:27:03:0b:59:1b:65:81:6d:93:8b:f9:2e:ad:9a:d0:
         7b:76:66:45:d1:e4:88:15:c3:80:97:6d:a2:83:81:57:c1:c1:
         ef:61:58:79:92:52:0f:b9:7e:e1:a2:61:09:dd:a7:37:4a:d1:
         77:84:54:ae:97:10:91:d2:8c:7d:a6:1a:6a:25:6d:5f:82:d7:
         fd:44:86:d2:7b:9a:44:d7:cd:58:cf:9e:86:d6:02:97:5c:0a:
         f5:2e:55:36:7f:dd:94:21:a1:d5:08:41:dd:96:e4:47:9f:26:
         98:f8:cb:d5:8d:7f:54:8a:d5:37:b4:1e:5f:b3:41:d0:74:53:
         2e:1c:ca:41:9c:11:7b:18:d7:84:cb:06:f8:0c:ba:98:ef:10:
         30:29:c8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:05 2026 by rpki-client