Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          lmHVRxDvkeKRhC9bvwJHSSto96gfEtQi7DP3LIpoPJw=
Subject key identifier:   E6:6B:01:F8:10:77:56:64:8E:82:6A:31:D0:D8:F3:2D:3D:25:10:B6
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       019CC9E3D1B402836F30C045FD0E9D089F24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          1859
Signing time:             Sat 07 Mar 2026 20:01:16 +0000
Manifest this update:     Sat 07 Mar 2026 20:01:16 +0000
Manifest next update:     Sun 08 Mar 2026 20:01:16 +0000
Files and hashes:         1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
                          2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: ZqqU8xE+u/1swdDhtPXQH1Kx+KsnmD0hg054byszYt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:e3:d1:b4:02:83:6f:30:c0:45:fd:0e:9d:08:9f:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Mar  7 20:01:16 2026 GMT
            Not After : Mar  8 20:01:16 2026 GMT
        Subject: CN=e66b01f8107756648e826a31d0d8f32d3d2510b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:44:0b:8c:5d:d4:a4:26:c5:d1:24:52:83:68:
                    f9:37:01:bb:18:fd:83:1e:31:de:db:f3:14:ef:59:
                    46:fa:14:ea:82:79:a9:d5:3b:f6:11:89:78:b6:d4:
                    b7:41:45:66:c8:13:a1:9c:86:f2:07:68:94:60:c3:
                    f2:4d:6d:aa:9d:e6:0b:51:01:4a:55:8d:4a:be:42:
                    c9:1f:ec:99:aa:d0:36:29:a1:57:19:59:2b:f4:63:
                    71:c2:e1:ab:d1:72:54:eb:d9:74:b8:06:9f:b6:18:
                    cc:39:82:df:57:10:fc:42:05:0f:64:20:a9:d5:9e:
                    4a:3d:a8:e3:5e:7c:a7:e9:8d:67:b3:f2:64:49:ec:
                    e4:d2:34:3b:69:99:36:e8:04:7f:13:ae:d7:a8:27:
                    f8:29:b6:1d:60:d0:8e:7e:4f:d6:57:85:f1:eb:7b:
                    85:ff:3b:47:ed:21:c8:36:13:2f:bd:54:a3:91:af:
                    37:ca:6b:fb:a5:4e:eb:27:40:c7:78:9f:c5:b9:01:
                    34:80:61:02:87:8d:31:60:11:17:2d:8a:6f:04:e7:
                    68:a6:93:9a:6e:b5:5b:ab:3a:15:3b:41:8c:6a:08:
                    08:bd:dd:a7:f5:ba:04:0a:d8:86:aa:12:c3:95:57:
                    ae:40:b3:d9:93:90:67:f9:da:0e:46:84:23:89:a1:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:01:F8:10:77:56:64:8E:82:6A:31:D0:D8:F3:2D:3D:25:10:B6
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:af:1a:31:8e:1a:4f:2f:b7:27:9c:45:bd:f2:0e:bc:24:d4:
         5d:2e:20:18:05:8c:73:e0:bf:82:aa:32:56:d5:78:7f:01:ee:
         74:07:2c:ca:89:64:07:55:7b:31:47:7c:50:f1:42:99:43:11:
         00:50:ee:24:51:9e:47:36:7e:61:d0:a2:06:6b:ac:2c:8c:7b:
         0e:86:51:0a:27:d1:ad:eb:48:7c:21:2d:43:53:74:5b:e6:41:
         6b:d5:79:d7:d6:73:98:fa:e9:d8:06:76:13:9b:fe:62:70:b6:
         be:03:4c:f9:0a:11:f3:1e:72:37:fd:46:38:99:88:56:0c:f6:
         fe:76:5e:e4:56:8a:95:1a:3a:d3:88:6c:f2:62:b8:7b:72:6f:
         af:ba:75:e7:dd:68:10:8e:cb:1f:3a:4f:14:4c:59:73:78:32:
         e5:30:07:c4:0c:de:1c:0e:37:3a:dd:a5:2d:40:c1:17:4a:45:
         9b:66:60:9e:d1:b1:a1:32:41:b3:8c:8b:83:af:98:c9:47:c3:
         33:82:50:22:d4:98:e1:22:2c:1b:ab:e0:12:44:9f:0d:65:38:
         4e:26:c7:48:9a:2c:3f:63:51:93:45:d4:ae:8a:b6:84:2f:9a:
         4a:b8:be:90:53:cb:cb:1c:bb:bc:04:f0:03:26:63:e4:e4:96:
         df:d7:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:51:11 2026 by rpki-client