Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
File:                     8mJAZfhrTPmEjex9q4ak24bBXhE.mft (raw, json)
Hash identifier:          s17uBz388PDdW9w/oFvLosiTc84kGn5fQM9C0HWNjU4=
Subject key identifier:   1F:08:77:62:38:04:3F:7A:EC:7A:82:9A:36:AB:9B:E4:6E:84:A7:D6
Authority key identifier: F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11
Certificate issuer:       /CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
Certificate serial:       019D37C0F0F187691FD8C7300EF9167B0DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
Manifest number:          047E
Signing time:             Sun 29 Mar 2026 04:01:24 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:24 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:24 +0000
Files and hashes:         1: 8mJAZfhrTPmEjex9q4ak24bBXhE.crl (hash: pjKY30b+h2fEQr8qNB+zE+pRYhptTrCluGXPQaM2zoA=)
                          2: B9dQBunPgCxrLiUL8opifDj2bOM.roa (hash: fWD90xCndzZ4WlkSeFBibUlZH38mskA/RfgbZjV3SFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:f0:f1:87:69:1f:d8:c7:30:0e:f9:16:7b:0d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2624065f86b4cf9848dec7dab86a4db86c15e11
        Validity
            Not Before: Mar 29 04:01:24 2026 GMT
            Not After : Mar 30 04:01:24 2026 GMT
        Subject: CN=1f08776238043f7aec7a829a36ab9be46e84a7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:4f:7e:60:f2:29:7a:67:d8:86:52:1c:a3:
                    b8:02:c2:e2:d2:54:f8:32:3f:34:b1:44:cd:bc:03:
                    2a:b2:89:bc:c3:f3:01:dd:23:79:79:34:21:85:54:
                    0d:6a:d8:11:ba:0b:bc:15:4b:9f:6d:be:1a:ce:cb:
                    fb:46:db:7d:1c:b4:88:a7:a1:0e:df:d1:79:fe:09:
                    ff:72:66:e8:a9:55:4e:ed:7e:18:f8:7b:c1:f2:fd:
                    dc:32:cd:df:db:df:da:3e:65:eb:32:c6:4b:64:be:
                    af:14:42:49:30:7b:7e:c9:9a:4f:10:d6:85:6c:26:
                    b9:dd:0e:a9:83:86:8f:e7:2e:45:02:80:9d:f4:15:
                    b6:98:9b:06:84:06:91:63:bb:e7:c6:24:50:38:4f:
                    ff:69:0e:e5:e5:e1:7f:cd:49:00:3c:22:84:66:85:
                    fe:05:8a:96:48:b8:18:79:a9:68:21:62:de:8c:cf:
                    c9:ab:c6:a7:4d:19:33:79:bc:76:dc:7e:52:f0:c9:
                    2c:57:64:90:f6:83:f4:63:03:79:bc:d1:0b:79:4d:
                    aa:e1:60:f8:bb:58:2a:2e:69:70:bd:26:cb:2e:c3:
                    e7:44:df:2b:c8:27:fd:06:ee:ef:bd:52:4b:ba:d1:
                    98:13:d5:79:4f:55:23:7d:e6:f7:8a:87:6b:84:aa:
                    57:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:08:77:62:38:04:3F:7A:EC:7A:82:9A:36:AB:9B:E4:6E:84:A7:D6
            X509v3 Authority Key Identifier:
                keyid:F2:62:40:65:F8:6B:4C:F9:84:8D:EC:7D:AB:86:A4:DB:86:C1:5E:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mJAZfhrTPmEjex9q4ak24bBXhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/818491-d657-42c8-bc9a-e5470c52d4dd/1/8mJAZfhrTPmEjex9q4ak24bBXhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cb:bf:b6:49:ef:87:70:52:7a:aa:29:fd:bc:28:73:84:34:
         51:95:e0:20:7b:30:61:54:48:e4:74:d2:76:cd:ae:92:19:30:
         2e:75:5f:50:2a:32:ed:f0:c1:41:93:1e:4b:ce:6a:01:ff:56:
         f9:b6:51:33:04:59:60:ef:1f:1b:19:8b:1d:01:af:94:8c:8c:
         11:6f:b3:79:0c:e7:58:05:cd:fb:cc:5f:b3:f1:55:d2:57:91:
         8d:29:19:28:37:6a:94:d0:9d:ef:dd:3a:9c:6a:41:b0:af:4a:
         ef:f1:ab:e9:9f:6c:5a:0f:a1:87:25:1f:4c:17:6f:b0:46:d1:
         66:55:75:36:77:21:bb:8a:ab:f8:d1:08:5c:56:96:a9:91:50:
         fb:b9:15:f5:39:56:69:47:35:4f:10:fd:11:72:73:74:1f:58:
         fe:44:82:26:44:d0:64:8b:d5:3b:9f:b4:85:66:9b:fd:c0:24:
         44:df:55:53:be:81:86:4a:d2:9d:46:e2:59:96:b1:59:5b:21:
         7c:e8:cd:b9:02:4c:71:6f:42:de:1e:d3:76:1c:9f:2a:b0:bc:
         4a:0c:26:d7:fd:94:6a:e4:22:2b:d9:25:a3:45:71:d9:5c:a6:
         df:aa:18:52:87:88:3b:da:4a:bc:4a:2d:c4:e8:71:d4:53:fa:
         52:89:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:06 2026 by rpki-client