Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File:                     8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier:          v49Eb+gshQw+KfbHpZmqLGpTI2U7lbnkKQPLO76qPRU=
Subject key identifier:   92:7C:D7:64:09:CD:62:92:96:2D:2D:7D:62:A2:7A:0D:AE:99:73:0E
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer:       /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial:       019CC7BEBC5780599CD7EA84DE29E9EDE771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number:          14EA
Signing time:             Sat 07 Mar 2026 10:01:31 +0000
Manifest this update:     Sat 07 Mar 2026 10:01:31 +0000
Manifest next update:     Sun 08 Mar 2026 10:01:31 +0000
Files and hashes:         1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: +G+yUHRUB66cdEdi2roUbDejX7MN2pw4Wzi8moGy5bA=)
                          2: pC6yrC521DUSFdHvnN6nZBgdl4c.roa (hash: z+BhB5WQOVSUH87uyCcKJiZh6jGZu+fv92loh3SKjUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:be:bc:57:80:59:9c:d7:ea:84:de:29:e9:ed:e7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
        Validity
            Not Before: Mar  7 10:01:31 2026 GMT
            Not After : Mar  8 10:01:31 2026 GMT
        Subject: CN=927cd76409cd6292962d2d7d62a27a0dae99730e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:87:2a:0a:26:d2:25:a6:ef:4d:0c:4f:8f:
                    cd:2e:1d:09:e6:a8:73:43:a0:9a:ed:28:c0:6c:7b:
                    b9:60:a9:0a:dc:6a:5a:69:03:1e:7a:14:df:f5:95:
                    99:96:24:b0:17:f6:ca:93:d9:13:aa:8c:3a:d1:1b:
                    f3:89:08:52:fb:60:a4:a7:c9:3a:4d:16:ac:7d:c7:
                    06:ba:e6:a6:f7:7d:56:5d:8a:3f:87:4f:df:96:46:
                    58:39:d0:2f:d6:2a:33:78:57:8b:b3:0e:48:c9:8b:
                    29:50:c9:52:23:f3:0a:c3:e3:23:c5:e2:55:11:aa:
                    f8:ba:2a:bf:dd:61:b1:00:6e:67:12:34:58:90:d0:
                    cb:50:94:d2:d5:82:87:c1:f4:63:e7:c8:21:43:3b:
                    c4:6a:66:67:b5:44:15:3c:2b:db:1b:0f:4a:5c:20:
                    ce:10:02:c1:09:d7:c6:5f:4e:81:9a:fa:1d:25:f3:
                    43:74:16:32:d1:d3:a2:73:ef:36:6f:f2:87:72:73:
                    2b:df:20:ee:14:ca:39:04:9d:b6:3d:48:ba:d2:a0:
                    6f:fc:82:46:b8:43:80:0b:83:00:aa:cf:1b:b3:0a:
                    99:db:ef:bc:b5:9b:2a:53:7e:7f:47:e0:b8:25:11:
                    7e:43:6f:7d:3a:27:d8:95:97:68:48:34:0b:ee:91:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7C:D7:64:09:CD:62:92:96:2D:2D:7D:62:A2:7A:0D:AE:99:73:0E
            X509v3 Authority Key Identifier:
                keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c8:46:2c:5f:b3:65:7d:13:1b:51:c3:c4:e3:5a:b3:e4:e2:
         84:22:7e:29:24:5a:9c:16:e0:51:ab:b1:3b:9a:f0:f4:ae:dc:
         9f:72:9c:2e:07:c7:d6:68:86:5b:ba:61:5c:e9:50:55:dc:b9:
         ac:63:75:8e:db:b5:71:df:1f:0f:ce:b7:3b:2b:c3:4d:b9:ae:
         30:2c:0d:d1:93:f7:50:38:a1:f6:7f:9d:8b:bc:b1:6e:10:cd:
         ec:43:d7:3a:c1:6f:52:e4:14:0a:8c:de:e0:19:5a:c1:87:5d:
         73:13:3d:20:45:24:d6:3c:de:c9:86:09:9e:80:53:47:9c:e9:
         e0:f5:87:ca:74:ec:7b:e6:6d:41:0c:6f:d7:30:f4:73:76:a9:
         1d:a6:bc:d9:28:99:10:d1:b3:ea:48:36:fc:98:d7:cf:58:6a:
         ec:9e:0d:9e:e9:3f:dc:0b:14:5a:18:1e:f1:23:b4:45:b8:e6:
         02:eb:79:3b:6a:d4:a6:e2:75:f8:38:0e:39:b2:fc:56:2d:5f:
         ca:d0:63:66:68:2b:a5:7d:62:4e:4a:12:90:0b:83:c5:ed:55:
         a2:8b:ce:b3:50:34:eb:73:7d:23:f5:36:2a:14:2e:f3:1b:1d:
         fc:29:a1:9f:a9:b6:56:f1:b8:44:6c:d2:d6:98:2b:90:f3:74:
         26:34:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:04:43 2026 by rpki-client