Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
File:                     fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft (raw, json)
Hash identifier:          d3UofNICLXFrks3lPgzGGbp2WOZM6t9H5umLqaL8nLQ=
Subject key identifier:   F3:E8:25:6A:5E:21:78:37:57:59:A9:6E:65:A9:70:E5:DE:5B:57:6E
Authority key identifier: 7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9
Certificate issuer:       /CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
Certificate serial:       019CE748FF41277F9A03E002E3B9B519FEC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
Manifest number:          8D
Signing time:             Fri 13 Mar 2026 13:00:46 +0000
Manifest this update:     Fri 13 Mar 2026 13:00:46 +0000
Manifest next update:     Sat 14 Mar 2026 13:00:46 +0000
Files and hashes:         1: F-MQ4_q16IIp-IO6Aj9rbXh6FAg.roa (hash: O9ss77MomSSt907FsLWzdFo2wbDsc9Vaw/c7NY0bUPI=)
                          2: Lv7nZi0Ca4VD-5H2MSb5yq4Mxf8.roa (hash: kAeb16gDeMymOsy5vSRtUWw4R89UmFmfcQyy8hoRkQs=)
                          3: a6ILxs7AfRiz-iaAF-l64QD3g3c.asa (hash: 7o07rC7UvT5It+u+RtYxdmApc9D4ts/fYHhAKB3o4vs=)
                          4: fl-aO37XXQmTdf9bFQvR4sML3I8.asa (hash: 095zE2TxY8ZX1/zGISHc5yzKNCHD1HSK1z5BPh0SZNU=)
                          5: fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl (hash: /qld5mGhT1BW/HV1AsMM7F/5Xg5aCkQXDzYFJoWQbKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e7:48:ff:41:27:7f:9a:03:e0:02:e3:b9:b5:19:fe:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e8e09724f472e76689c61dca60a7c641f2ac8f9
        Validity
            Not Before: Mar 13 13:00:46 2026 GMT
            Not After : Mar 14 13:00:46 2026 GMT
        Subject: CN=f3e8256a5e2178375759a96e65a970e5de5b576e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0d:2a:49:01:af:55:ea:f7:92:e9:65:74:3f:
                    63:3e:79:c7:55:c2:50:f0:06:8d:ec:9d:b9:51:f2:
                    45:6d:ec:a3:d3:c9:ba:3b:86:76:fa:55:5e:b5:da:
                    3d:f8:36:80:95:e1:0b:be:a0:bb:c8:19:ac:1e:05:
                    69:bd:37:39:e7:1b:a9:1f:53:d7:18:ff:12:0d:dc:
                    3c:e6:86:b3:0f:57:b2:22:1b:12:f4:26:b5:6f:a8:
                    ea:99:7f:3a:08:9b:55:62:42:e1:b3:b2:2e:f3:e0:
                    e6:71:2b:4c:79:f5:c4:01:8e:10:b8:c1:74:be:e4:
                    8a:ba:e6:ec:e0:06:dd:2d:dc:65:6b:73:63:f4:c2:
                    e3:94:ad:a6:dd:4f:67:cc:e2:9a:ed:73:2c:4b:fd:
                    fa:b7:5c:21:6a:d8:15:49:4a:6d:88:38:8f:db:1b:
                    2b:4e:24:e1:30:e2:7d:94:af:12:29:34:cd:3d:4a:
                    e4:80:1f:4b:59:98:3d:4b:e4:d7:85:a6:a9:e8:c9:
                    d2:84:f9:5a:64:21:99:d8:35:e9:b4:94:d9:1e:a3:
                    b3:02:d1:1f:01:47:6e:9f:63:f7:0c:86:ae:22:96:
                    f7:c9:46:4c:76:73:e8:6c:6b:37:11:11:ab:75:df:
                    81:49:04:d5:f1:9b:72:f0:1c:66:18:fe:d0:0d:c2:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:25:6A:5E:21:78:37:57:59:A9:6E:65:A9:70:E5:DE:5B:57:6E
            X509v3 Authority Key Identifier:
                keyid:7E:8E:09:72:4F:47:2E:76:68:9C:61:DC:A6:0A:7C:64:1F:2A:C8:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fo4Jck9HLnZonGHcpgp8ZB8qyPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ddc27c-7937-4560-be22-dcb5fb33c178/1/fo4Jck9HLnZonGHcpgp8ZB8qyPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:c5:c3:bc:dc:d6:5b:45:19:51:94:a8:6c:c0:a1:58:0a:b7:
         2e:6d:ea:c3:21:c8:b9:7b:61:77:e8:81:10:7b:5c:4c:80:08:
         1c:32:41:26:ed:14:06:02:e7:66:1f:95:3d:f7:87:eb:67:e6:
         e4:fc:43:38:be:30:cf:17:5f:65:18:fe:4a:eb:c8:f6:06:49:
         67:2d:f2:e6:85:b3:ce:00:75:c6:c1:bc:36:a9:1e:0b:b8:30:
         96:67:f5:2c:bc:15:75:ec:8a:fc:85:34:f6:6e:f4:d2:f1:47:
         e8:31:0c:6e:06:b5:b9:36:8e:63:4b:2a:c9:0c:78:35:6e:78:
         6c:cc:df:e1:ba:bf:8d:4e:1b:d7:03:e0:e9:35:5b:36:de:b1:
         6d:19:6f:4c:4c:cd:13:2c:09:05:02:7f:6f:e8:28:69:fd:7c:
         b1:bc:87:45:3c:9f:86:9a:55:78:2a:0d:fc:a8:39:9e:3c:d8:
         a5:54:15:e4:e8:6a:fe:45:d4:48:d9:fc:11:e3:40:12:f5:ff:
         6b:34:45:70:52:65:d0:15:a0:1a:41:ed:fb:f1:2b:a2:a4:7c:
         b1:dd:57:ce:fe:db:7d:ea:b2:c3:2d:13:31:06:57:2d:a3:aa:
         73:d0:33:aa:6d:aa:be:7f:22:c5:b7:2e:98:d7:0f:3b:dc:e4:
         ec:32:a2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 21:30:32 2026 by rpki-client