Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File:                     8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier:          F0C4U9BnwKb/DeHuQJWN9I8EnmlQkjG/awSqvZZZq/4=
Subject key identifier:   0C:4F:E2:FB:59:69:76:96:D4:0B:6A:52:13:9A:2F:43:F6:1E:66:4B
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer:       /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial:       019D099DF235AF860AA27E50AAFA4D4EED97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number:          180B
Signing time:             Fri 20 Mar 2026 05:00:39 +0000
Manifest this update:     Fri 20 Mar 2026 05:00:39 +0000
Manifest next update:     Sat 21 Mar 2026 05:00:39 +0000
Files and hashes:         1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: oxYdqiEU2MghTP1O8FTMHNtu+4q188u5hy21yrzbQok=)
                          2: VHl37ymtX_2i6CyUoQNBTqA5Q14.roa (hash: eqHS99H1UTAx9btxTzK1grjqxkNHSX5THANz/qDbL1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 21 Mar 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:09:9d:f2:35:af:86:0a:a2:7e:50:aa:fa:4d:4e:ed:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
        Validity
            Not Before: Mar 20 05:00:39 2026 GMT
            Not After : Mar 21 05:00:39 2026 GMT
        Subject: CN=0c4fe2fb59697696d40b6a52139a2f43f61e664b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:1b:87:18:13:79:a4:29:d7:48:97:d3:c9:
                    eb:92:86:2a:02:4b:88:cc:31:58:82:f2:ff:d2:9f:
                    44:48:e0:64:62:db:3e:85:22:71:79:24:4e:80:f9:
                    9a:e4:b0:78:e0:19:27:e3:85:66:2b:0c:fd:de:95:
                    a2:2c:64:7c:9f:4c:1d:72:3b:f2:5f:7a:77:d3:e2:
                    aa:06:7b:45:b1:83:2c:6a:b3:68:6f:5f:e5:50:f4:
                    17:5c:f6:d3:70:d3:a0:aa:2c:36:3c:1a:6a:ee:9f:
                    f5:50:84:4a:10:a4:da:94:f0:c4:52:85:fb:8c:51:
                    f7:84:6b:36:fe:f1:c7:db:0b:2f:d5:96:df:c1:25:
                    29:4e:18:e7:42:02:36:86:7c:1f:df:21:ae:85:3e:
                    c7:b1:ac:2e:a8:69:0c:5c:fa:14:2a:ca:0b:cd:de:
                    95:35:f7:b2:4f:f1:f9:0a:3f:7a:c3:a5:a0:5c:c1:
                    91:d4:21:19:ce:e7:ca:71:05:a5:0b:b4:26:a3:21:
                    5b:d4:b3:6f:ab:7c:9f:fc:ba:9b:76:50:11:25:5f:
                    24:fd:ae:6d:5e:ab:19:02:c4:78:3e:0c:94:ca:c5:
                    81:9a:1b:ee:1e:0c:b5:f3:e6:05:b5:6b:22:51:18:
                    34:9e:04:df:df:58:10:31:c2:4f:cf:4a:f3:7b:a5:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:E2:FB:59:69:76:96:D4:0B:6A:52:13:9A:2F:43:F6:1E:66:4B
            X509v3 Authority Key Identifier:
                keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:56:9f:24:10:96:56:74:03:61:28:c0:06:14:e2:98:be:d0:
         08:cc:9e:eb:94:48:b1:05:39:e7:70:ff:27:65:47:65:24:98:
         1c:0f:8c:f0:15:11:b9:98:83:17:24:27:e4:c9:fe:dc:e2:c9:
         f5:5f:01:ff:cf:82:da:41:d0:39:55:04:27:08:73:80:18:79:
         03:63:93:3f:78:86:9f:5f:95:ea:06:46:eb:79:1c:ca:72:40:
         2f:c7:73:ce:e4:ce:a9:93:b2:e6:ee:d3:1f:54:fa:0d:92:b2:
         14:b1:5e:eb:53:8c:60:18:89:ef:7c:92:bd:ca:30:bf:81:51:
         e7:e1:d2:ce:77:5a:68:e5:7b:08:0f:88:25:0c:fd:29:a9:10:
         6c:d8:77:b1:9a:c0:d6:29:e3:fe:b7:90:57:47:3e:98:dc:c8:
         74:74:61:62:bc:af:e9:55:e9:ee:03:13:46:c2:92:1b:21:11:
         3a:ab:31:17:b2:e4:88:35:ff:cc:63:87:e1:44:65:50:5c:e8:
         87:58:33:73:6d:a9:4a:31:af:82:48:dd:bd:d8:df:11:76:ea:
         9f:59:b6:4b:8e:b1:e6:e6:64:3e:8e:73:45:f0:52:3e:d4:1c:
         95:c3:aa:77:cd:fb:ca:45:d8:4b:73:7c:ff:ea:68:96:e4:e9:
         66:d8:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 14:06:38 2026 by rpki-client