Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          cJB+sJ+5o7SQBjiXDb3Xgs/xNzmAqGiS86+xz3pE8X4=
Subject key identifier:   7D:9D:8F:A9:1B:59:90:20:D9:BE:A5:CF:CE:77:2D:76:6B:F9:78:EB
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       019D39AEA05ADE48D369ED7882072ADA7231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          070B
Signing time:             Sun 29 Mar 2026 13:00:38 +0000
Manifest this update:     Sun 29 Mar 2026 13:00:38 +0000
Manifest next update:     Mon 30 Mar 2026 13:00:38 +0000
Files and hashes:         1: DYsiQqVjAuJI8byUG8mKd0jSQh4.asa (hash: YMrGSqc7KqHO4j1lgZTxY1WoFwm99rirLTct3gzShT0=)
                          2: UMfLn4hPH5R_1hQD4UOLCtDtmiU.roa (hash: gXIOBSbjWI6IVjh8IXmjFidTPNW2xP/m42MptHiY2Wk=)
                          3: ZLPqhzCBZnWKf6Ejj9mHPZInK0A.roa (hash: fDVxJt+eTWzb1YGH406MqF2UxgyF9iK3BrieNaTLjIM=)
                          4: _HpIO26oTlp3ah6eb8LpZJn4sZU.asa (hash: rNwAJLoUrEajetBo8sWHQzmyDtFszLMTuAjSH9z1rL4=)
                          5: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: IEIJ+S3wgvI5ma3AHP0Hn3P+Y3Ep935mWhE0Fhboo4E=)
                          6: sIrL6b_di1kxEMzg3ieNCdw3WJ4.roa (hash: Wu+8arEyxXYyHRsQgH9EF3izIIcpQmHoeba8OxIgES4=)
                          7: yfQb9AlKC_r1qbW7JgUEAWbb2SE.roa (hash: V6bi9bW+gyxZUdO/fUkn/b7FLfhAgD7Kio8Z4leJS74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:ae:a0:5a:de:48:d3:69:ed:78:82:07:2a:da:72:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Mar 29 13:00:38 2026 GMT
            Not After : Mar 30 13:00:38 2026 GMT
        Subject: CN=7d9d8fa91b599020d9bea5cfce772d766bf978eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:26:ba:05:40:31:4c:bf:b6:b5:68:7b:f9:
                    2e:83:4c:9c:93:2b:7c:74:a1:7a:36:ac:db:67:1a:
                    eb:0e:84:c9:0b:a0:d7:53:a1:aa:02:70:9e:66:c5:
                    4d:d4:8f:88:1a:73:b4:16:fa:0b:c4:40:6c:d5:ef:
                    09:1a:a4:cf:27:7b:e0:09:d7:bc:be:ed:2c:87:61:
                    3e:49:49:fd:d8:09:98:97:48:b6:e8:bc:40:50:61:
                    6c:e2:b9:30:a1:03:34:50:0e:28:7f:67:b8:63:7c:
                    e8:4b:54:56:f5:77:af:ad:64:4b:01:c4:e4:ba:44:
                    93:e2:dc:d9:29:74:f1:86:90:a8:da:5d:0d:ab:05:
                    f9:68:1e:08:6c:2b:dd:8b:2e:2d:a8:c9:e3:a2:dc:
                    23:7b:e2:63:72:5d:0f:de:bb:8c:12:34:48:51:97:
                    e5:cb:7f:84:e4:a9:a7:ea:30:1a:91:64:53:4d:ed:
                    e6:91:7d:2d:7c:73:c5:0b:83:e4:e6:18:6f:43:9f:
                    6e:b2:ab:db:f2:8d:8c:03:56:5e:cf:d5:a2:51:6e:
                    60:c4:14:fc:bc:49:5a:67:fd:66:17:7a:8e:85:9b:
                    d0:e0:bb:26:aa:0b:f1:02:85:2a:47:a2:0d:9b:77:
                    39:69:0b:f7:47:a7:f9:41:b2:55:38:65:59:44:19:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9D:8F:A9:1B:59:90:20:D9:BE:A5:CF:CE:77:2D:76:6B:F9:78:EB
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:35:91:2d:19:55:61:2d:16:d5:70:02:43:34:41:ad:1d:8e:
         f4:6e:17:51:ef:46:1c:38:8c:19:b9:f6:23:8e:ac:18:5c:f8:
         dd:7a:aa:da:5e:c8:32:e2:88:8f:d9:70:ae:1b:88:29:d2:f5:
         38:58:1e:61:2a:70:5b:d1:7f:bf:f4:68:4d:57:ff:6e:d1:de:
         ef:a3:1a:11:ce:3d:6a:32:4b:37:81:00:d7:fa:69:11:0b:59:
         d5:79:86:ee:f0:71:2a:de:84:bc:ea:3e:6f:45:74:62:cb:bb:
         15:44:76:e1:94:92:e9:1a:0c:3a:c5:20:85:f8:88:ff:95:a9:
         d0:a9:fa:30:c4:d8:03:f5:6e:48:1f:c8:2a:af:d9:6c:ab:ba:
         38:a6:d1:c2:c1:eb:6c:ad:9f:b4:b1:63:7e:e1:8b:f8:69:e1:
         06:aa:ec:3f:52:8c:40:ba:3e:45:78:4d:4b:b9:b7:0f:77:ba:
         64:4c:77:9a:18:4c:03:45:43:b7:ed:57:28:aa:ac:52:2e:bb:
         93:29:84:8e:c4:4d:b3:df:70:eb:45:0c:b9:a6:94:04:7c:86:
         9a:01:6d:3f:21:89:e8:50:6f:37:7c:da:1c:aa:e1:77:b7:7f:
         e4:41:56:69:1f:ed:64:36:40:35:5f:87:0f:22:1c:e2:f5:b8:
         fe:83:21:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:25:04 2026 by rpki-client