Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
File:                     8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft (raw, json)
Hash identifier:          5l9kXs2iNyYaOww0GyVMUkUI2Xyp4ZR0O9EiANqGzmo=
Subject key identifier:   E0:0A:BB:00:F5:9B:8E:E6:1D:E1:8A:F9:89:33:4C:68:03:6E:7E:27
Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4
Certificate issuer:       /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
Certificate serial:       019D38663EADD4DDAA7C3E201822F008FD43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
Manifest number:          1013
Signing time:             Sun 29 Mar 2026 07:01:57 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:57 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:57 +0000
Files and hashes:         1: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (hash: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20=)
                          2: 8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl (hash: Sy3X1jkUd+tBa+SiEAmG5eiwFufSB31vmUI6qFYYPOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:3e:ad:d4:dd:aa:7c:3e:20:18:22:f0:08:fd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4
        Validity
            Not Before: Mar 29 07:01:57 2026 GMT
            Not After : Mar 30 07:01:57 2026 GMT
        Subject: CN=e00abb00f59b8ee61de18af989334c68036e7e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:a1:2f:55:99:1f:a9:91:34:1b:ff:92:cc:
                    2d:cb:5e:a6:92:8f:9f:64:22:f5:44:8d:f8:0c:99:
                    0d:d0:0c:9a:64:64:43:2b:1c:67:92:3d:ba:ac:b6:
                    20:08:a1:e8:47:f9:7a:6b:d1:10:2f:49:47:5a:ae:
                    46:c9:94:02:0c:e4:99:5b:21:aa:7d:bd:b8:1e:12:
                    a5:1c:55:a8:46:66:fc:ea:3b:20:71:91:92:e6:ac:
                    06:97:39:19:19:89:82:67:bf:6d:16:c4:64:02:46:
                    db:2a:c7:3a:0c:c0:13:e4:3f:56:3e:29:1f:43:dd:
                    3f:be:0e:53:31:5d:c2:26:dd:a5:1f:e6:09:97:5d:
                    92:60:9d:f5:2a:14:92:dc:a5:81:82:85:85:11:3c:
                    99:5a:75:b2:94:c7:bf:7f:f2:4d:70:f9:f7:7d:35:
                    2e:07:07:1f:6a:b2:f1:7a:ee:6b:90:2f:dc:e5:3f:
                    c1:f3:64:47:30:c2:98:69:db:e5:58:d8:e8:a3:79:
                    ff:21:9c:21:66:f2:af:3a:c7:14:62:c5:7f:49:10:
                    16:e4:96:77:79:09:27:3a:97:9a:51:de:49:4c:db:
                    26:6d:56:d5:26:06:85:f4:45:4d:62:a7:5f:13:95:
                    32:bd:c0:81:fe:41:cc:1a:ee:b5:74:36:f8:6e:a3:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0A:BB:00:F5:9B:8E:E6:1D:E1:8A:F9:89:33:4C:68:03:6E:7E:27
            X509v3 Authority Key Identifier:
                keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:a2:22:d3:56:b8:57:d6:75:ab:1b:88:2a:26:ba:f0:e6:
         c7:83:82:8c:38:44:2c:ed:86:2f:06:54:ff:8e:cb:79:8d:19:
         03:4a:2f:00:73:a9:2b:ef:d6:ee:f1:87:04:ee:a7:ea:3a:0b:
         d6:af:ed:81:c3:3d:40:2f:67:ae:d4:3a:6b:11:35:9f:6e:53:
         92:23:25:7d:4d:1d:6b:3b:80:73:ba:e7:04:9a:3d:a4:6b:c7:
         bf:9d:88:6f:21:92:52:72:a7:05:6d:60:88:05:1b:d1:f7:b4:
         d2:c5:03:7c:b0:1b:37:59:13:b8:ca:a2:ad:40:c1:77:e0:67:
         26:96:be:8e:9a:51:eb:95:1e:1f:77:25:56:25:cd:ea:54:3d:
         63:07:96:bc:e1:d8:6a:7b:b5:98:da:73:11:40:7f:e4:22:66:
         af:98:6c:57:c0:4e:ea:a8:c0:74:e7:ba:1b:a6:fb:28:4e:de:
         e8:9b:9d:5d:df:45:f2:8e:fe:c3:b0:34:1b:99:e1:64:02:9d:
         76:65:48:a7:d6:49:79:01:bb:26:b3:5e:e8:45:31:0f:a7:2a:
         80:a2:51:f3:7b:f8:16:bf:a2:0e:94:40:d4:d1:59:c5:27:af:
         84:57:db:c0:3f:ea:8b:15:50:e8:ef:29:6a:5a:f5:4c:b3:00:
         d3:f0:bd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:29 2026 by rpki-client