Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          i3snspD3qTGmQO7AYSQLTZJwQHqGgBvmHGAsmrnqXa4=
Subject key identifier:   71:8B:DA:E5:65:8E:63:38:1F:C5:26:6F:8D:1D:12:CF:6E:FC:59:B3
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019D1CB70E4E017BE782087AE37194723C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          18A3
Signing time:             Mon 23 Mar 2026 22:00:51 +0000
Manifest this update:     Mon 23 Mar 2026 22:00:51 +0000
Manifest next update:     Tue 24 Mar 2026 22:00:51 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: QPimw5QTlKP+CmZDBvuajzFp803BzFGMHfJUlGAw2GQ=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 24 Mar 2026 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:1c:b7:0e:4e:01:7b:e7:82:08:7a:e3:71:94:72:3c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Mar 23 22:00:51 2026 GMT
            Not After : Mar 24 22:00:51 2026 GMT
        Subject: CN=718bdae5658e63381fc5266f8d1d12cf6efc59b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:37:07:4e:66:56:49:9e:fe:58:ac:ab:64:fa:
                    ee:50:3f:90:08:e4:7d:45:41:26:86:05:9d:89:7d:
                    1d:6a:a9:51:7c:ae:59:e9:29:c6:ec:b1:8c:74:ce:
                    e5:ab:ac:80:40:1f:f7:cc:70:e7:63:6e:41:c3:8e:
                    5f:ce:99:09:bc:2b:5e:5c:3b:67:bc:7d:0d:e6:47:
                    02:32:ef:2d:c6:45:3c:4a:35:a0:f2:01:1a:c0:0d:
                    75:cc:82:ec:f2:a8:8e:75:80:06:aa:2a:1f:e8:5b:
                    3a:6f:1b:fd:0f:58:46:fd:cb:16:7a:ad:1d:a7:96:
                    7e:ab:c1:e4:7d:05:8a:63:de:c9:f5:47:d5:ae:5b:
                    f3:b4:24:68:50:43:e3:ae:ab:5d:f4:ed:c5:2a:34:
                    6c:46:c7:a2:8a:68:ca:b7:ae:22:bc:04:ae:2a:b0:
                    e8:bb:fa:27:de:81:2b:30:d1:0b:bf:a2:fd:c6:a2:
                    f6:c0:40:0a:ee:9c:47:c9:89:7d:62:c6:ba:04:a9:
                    90:a8:0f:74:08:43:3c:2a:e7:5a:81:f5:6c:cb:89:
                    74:0d:06:8c:9c:d1:db:b9:d3:ab:a1:50:bb:f0:21:
                    bc:2e:d2:8d:de:fe:19:56:64:f9:51:4e:bb:72:51:
                    ce:5d:3c:d3:80:27:d5:b3:61:fa:87:16:2b:86:b1:
                    b2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8B:DA:E5:65:8E:63:38:1F:C5:26:6F:8D:1D:12:CF:6E:FC:59:B3
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5e:1a:9d:ee:a0:a0:26:1a:41:70:11:63:75:24:c0:0a:c7:
         14:12:a2:35:71:7f:07:75:f9:23:7c:de:ab:17:11:6f:6b:0d:
         cc:d2:5e:e1:f5:8f:e0:2e:22:81:8c:e3:4d:75:2a:17:5a:1a:
         48:59:11:e4:34:39:99:92:4d:42:19:19:97:64:e3:a7:96:bf:
         e4:f2:bc:61:df:6b:cc:b1:72:e3:f6:8b:bc:51:6c:e0:0f:af:
         c4:73:76:0a:0c:01:2b:05:bc:20:85:c3:3f:74:34:92:27:a3:
         a6:b1:73:51:46:5d:3d:db:52:dd:f1:08:41:8b:60:43:06:a4:
         af:98:bb:1e:f8:c3:72:12:02:70:f7:1d:52:cc:8b:9b:8f:ec:
         10:c0:be:69:eb:25:2c:dd:ad:13:24:38:42:90:3f:db:89:ee:
         f7:b9:f9:54:b9:65:93:f5:7b:b2:a3:fe:6d:d8:85:22:20:67:
         c6:54:b4:82:74:59:28:04:e3:e7:94:47:a8:58:40:d0:ff:88:
         e7:80:4a:c5:17:b2:b7:06:3e:01:d7:4c:fd:c9:b5:b2:c6:bb:
         4e:98:0d:aa:82:b9:05:a1:81:3e:30:b1:2b:fa:9c:67:47:44:
         58:3c:67:fe:7b:e1:7c:7c:34:41:a4:14:3c:b6:2f:23:12:a5:
         8a:bc:8f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 04:24:07 2026 by rpki-client