Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
File:                     8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json)
Hash identifier:          IR32DzWUrUx5FviEgCL1oIuo00fAS9k9ldiTLglZg6g=
Subject key identifier:   7F:B1:1F:78:5D:21:33:56:96:B4:DA:3B:92:26:DA:8A:FE:1B:44:88
Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
Certificate issuer:       /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Certificate serial:       019D389BA9A3C84791781BF3F2056C4F722E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
Manifest number:          0848
Signing time:             Sun 29 Mar 2026 08:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:18 +0000
Files and hashes:         1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: V6tJzyBcnvUZuJUHMxKKK93fX4fbd2DT8ofwo6CYXVQ=)
                          2: 9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa (hash: UvG3lMMpHAs1Kqa7iKgc9zEnznEf/HzGZcTb0fKC5kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9b:a9:a3:c8:47:91:78:1b:f3:f2:05:6c:4f:72:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
        Validity
            Not Before: Mar 29 08:00:18 2026 GMT
            Not After : Mar 30 08:00:18 2026 GMT
        Subject: CN=7fb11f785d21335696b4da3b9226da8afe1b4488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:09:65:67:a9:3b:c9:1c:31:9f:61:b1:ab:
                    1a:2b:aa:0e:01:b4:b5:3f:36:9b:d8:80:07:8a:13:
                    a7:b6:44:af:f1:40:b2:a4:e9:a0:57:8f:79:f1:a4:
                    11:d7:07:96:b8:97:a0:87:74:53:0d:4a:9e:64:d8:
                    17:3b:a5:fd:4a:d0:40:16:3e:b0:2e:f6:e7:79:04:
                    c2:a4:d7:4c:f0:62:4c:e6:a6:65:0c:6b:45:22:89:
                    81:19:5f:cd:d9:9c:76:5d:94:a1:3e:0f:e9:36:3e:
                    f5:df:cd:66:20:3c:39:51:17:2a:ac:b3:d5:c9:fb:
                    ed:3f:c6:d4:00:94:d8:a3:be:dc:47:e1:95:3b:07:
                    75:4d:01:bf:ea:7a:27:58:d0:bd:6e:a7:18:77:cd:
                    0b:0c:12:90:66:eb:36:c0:96:d4:0e:b7:f3:3e:6c:
                    47:e1:f5:37:61:92:22:86:10:69:14:de:13:47:62:
                    e7:e2:11:ef:a1:a3:6f:7b:d8:ed:0e:ba:a5:bc:e7:
                    9c:ea:1d:5d:16:a8:0f:10:df:12:2d:ce:09:8f:dd:
                    46:27:fd:ce:95:a7:20:c2:6a:cd:27:01:01:fe:03:
                    81:d2:75:06:90:94:fc:32:2c:e8:8f:19:fc:26:03:
                    76:3b:f4:39:a0:7a:72:f6:16:95:cf:da:c9:d7:c2:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B1:1F:78:5D:21:33:56:96:B4:DA:3B:92:26:DA:8A:FE:1B:44:88
            X509v3 Authority Key Identifier:
                keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:e6:07:9f:fe:01:5f:58:af:8a:03:ce:46:60:df:cb:34:
         7a:bc:4a:6b:4e:f3:c2:5b:9a:28:8c:81:6b:1f:97:3b:a3:05:
         56:f2:8b:72:86:ac:c7:0d:30:4d:69:14:20:02:b0:13:00:29:
         87:39:66:3a:8c:a0:c8:42:71:78:22:f5:a0:c5:78:c0:11:56:
         2e:cb:2f:bd:43:a0:f6:03:1a:e2:ac:f7:9d:a0:40:2a:d0:cd:
         6a:b1:9e:a4:62:47:de:73:b2:c9:52:28:d6:d5:a7:0f:16:87:
         9a:9a:bd:bc:48:3d:2e:18:a5:e2:16:d5:04:13:a8:ba:48:0b:
         ab:46:c8:0e:22:10:7e:52:81:78:c7:66:a6:aa:f9:c8:4e:9b:
         27:a3:cc:31:cc:e6:f2:1e:ac:fc:b8:f3:43:8c:8e:38:e1:6c:
         8d:19:99:94:bb:f5:e6:46:7b:24:5b:a4:b8:3d:db:a2:54:5c:
         61:88:52:76:b4:03:ff:28:00:2a:9a:c0:a6:d3:82:3d:81:7f:
         51:fb:46:d3:a0:66:56:33:bb:eb:0a:44:1c:ff:a7:b0:f8:53:
         3b:7b:c9:78:15:4d:5a:c3:67:62:a3:03:ba:a2:32:c5:0f:2a:
         18:48:7a:ed:53:ac:de:f9:09:64:79:23:31:10:e0:16:f8:54:
         fb:5d:dd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:59 2026 by rpki-client