Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File:                     8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier:          pJfuImLRhdGnbwTLkrYqnRaoMoQDjpCZFcoOvhgP4io=
Subject key identifier:   2A:C5:7E:8D:04:8C:23:DF:FC:B4:4B:98:F4:58:7D:76:04:01:E2:27
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer:       /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial:       019D38658103266717B9350C4CEC90AD0EA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number:          1174
Signing time:             Sun 29 Mar 2026 07:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:09 +0000
Files and hashes:         1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: lhgk/DaTmhVLGLy9PfHQCOoHI0WcAHDmFaaWeRHRod4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:81:03:26:67:17:b9:35:0c:4c:ec:90:ad:0e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
        Validity
            Not Before: Mar 29 07:01:09 2026 GMT
            Not After : Mar 30 07:01:09 2026 GMT
        Subject: CN=2ac57e8d048c23dffcb44b98f4587d760401e227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:6b:e1:4e:2b:31:25:a2:ca:3e:79:4c:75:
                    da:a9:f5:52:29:73:8b:2a:20:82:e0:9e:cf:31:c8:
                    dd:e6:3d:53:7b:25:f7:14:b9:7e:ad:7b:96:a9:6f:
                    7b:20:0d:50:f7:1c:a6:9d:94:a5:3f:25:3f:c0:aa:
                    8a:7c:0f:eb:c5:36:6e:ab:0a:c4:20:b6:b4:a7:04:
                    96:58:f6:99:e2:1e:d9:5b:a7:02:00:8e:89:5a:28:
                    0f:c5:a0:ff:03:59:a1:62:f1:d9:99:51:8c:02:b0:
                    0a:7d:c1:b2:ab:b8:b3:98:1c:19:cd:49:68:34:64:
                    79:9b:89:04:09:89:70:f2:b8:58:98:74:04:c3:86:
                    81:e4:dc:d7:15:61:7c:e4:64:d3:fa:57:c8:42:fc:
                    78:8e:8d:5a:60:6e:05:42:f9:6d:87:2f:6d:11:70:
                    73:5b:a1:66:89:39:60:f3:8c:2f:4f:89:06:b0:2b:
                    f3:70:97:7f:24:c9:e5:0a:c6:cb:60:c4:a2:1e:a2:
                    ab:86:c1:cf:f1:2f:bf:4c:d3:85:fd:28:c0:26:cf:
                    73:4b:91:c7:64:60:76:94:11:d1:d7:d1:1e:50:ec:
                    de:a1:39:e2:41:a3:45:50:54:f4:31:53:3e:02:e7:
                    41:ad:f8:09:e2:14:7c:43:d9:2b:07:38:ab:d1:b6:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C5:7E:8D:04:8C:23:DF:FC:B4:4B:98:F4:58:7D:76:04:01:E2:27
            X509v3 Authority Key Identifier:
                keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ed:68:f4:ba:82:89:2e:ee:54:ce:ca:ae:86:94:f0:b7:04:
         2b:65:23:3d:eb:a0:70:85:5d:df:d7:10:a7:8c:be:06:35:8b:
         bb:97:12:aa:af:02:6c:79:0c:bc:66:62:de:72:59:dc:a4:d0:
         22:16:2b:02:6f:da:8d:b4:43:0d:48:98:b7:76:2c:c2:0f:56:
         b4:10:dc:b1:5d:c1:2b:38:53:cd:3f:3a:f6:75:f7:9c:99:af:
         cb:76:ab:0e:4a:fa:f0:af:6a:7a:63:1b:55:1d:02:1b:8a:b5:
         5e:34:e1:3e:d5:1d:07:57:43:34:bc:9a:44:74:6c:77:5d:75:
         58:c0:6e:9b:22:37:9a:cd:99:14:a0:5f:0e:cb:20:4c:8d:ee:
         c2:0e:1b:8e:d4:6f:b6:8b:0a:3d:a1:9e:12:50:50:c7:bb:57:
         8b:69:66:44:df:9a:d0:20:83:79:e9:89:2e:c2:81:f8:ae:86:
         c6:ff:f2:87:27:f0:8a:70:f5:e5:80:ad:7d:be:10:eb:36:f6:
         70:5f:e4:89:06:ba:b7:1a:f1:08:5c:c1:02:9c:6d:a9:a5:ac:
         37:b6:59:f8:fd:9b:b4:55:13:d9:f9:b6:d0:60:e8:51:b9:fe:
         f7:9a:dd:ec:f9:61:3b:33:d9:aa:d2:d4:40:e4:a2:68:27:7b:
         9a:04:69:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:56 2026 by rpki-client