Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          +ytkqVI4TcDhbsLO1jVKGiyU+o43bztcIEXmz0SgUgk=
Subject key identifier:   EE:00:CD:8E:A3:98:31:33:00:0F:34:CA:64:98:9A:D8:B4:8D:EC:CC
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019D52CA103F9195628C1D57E3BCEFBD6509
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          18BF
Signing time:             Fri 03 Apr 2026 10:01:07 +0000
Manifest this update:     Fri 03 Apr 2026 10:01:07 +0000
Manifest next update:     Sat 04 Apr 2026 10:01:07 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: NnKzRyCMwcQOPn4sRN8QzmnIscCv8iyS3ZmeYAQ/5MQ=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Apr 2026 07:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:52:ca:10:3f:91:95:62:8c:1d:57:e3:bc:ef:bd:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Apr  3 10:01:07 2026 GMT
            Not After : Apr  4 10:01:07 2026 GMT
        Subject: CN=ee00cd8ea3983133000f34ca64989ad8b48deccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:15:16:da:c6:0b:af:c9:fb:ac:ad:7e:ce:7f:
                    52:6c:ba:34:69:73:90:58:a1:00:7b:5a:88:7a:88:
                    2f:f7:ee:b2:ee:15:05:fb:93:4a:64:cf:88:37:7a:
                    a3:d7:05:98:2a:ce:b0:68:9e:cf:a8:42:0b:26:48:
                    ff:03:18:8b:61:3e:ee:ec:c5:4e:51:63:9a:fe:2b:
                    96:e9:ce:8c:f6:a4:66:74:c2:fb:b1:4d:b8:c6:d6:
                    4e:77:b7:fe:41:7a:59:78:99:5a:65:a6:62:d6:a3:
                    ec:51:1e:ce:0a:db:9f:a0:6e:c9:44:79:a1:b5:a5:
                    bd:71:77:45:2d:01:a2:9d:22:b5:55:12:80:eb:c5:
                    75:5c:83:dc:47:d8:45:be:90:b2:43:59:44:45:0f:
                    c4:d3:07:27:06:05:3f:15:7b:5a:db:4c:0e:81:8d:
                    e4:65:cc:de:23:e3:57:a9:92:f4:73:00:b0:1e:e4:
                    dc:7b:4e:b5:27:40:76:6c:e4:fc:1b:15:58:56:12:
                    5d:c6:60:7e:81:6a:51:f7:8c:c5:ad:df:f8:9f:ed:
                    a4:00:5c:90:ba:ce:25:37:dd:9c:4e:1e:1c:a1:fc:
                    40:af:5f:5c:1d:ce:10:ac:53:d1:3e:f5:d9:94:cf:
                    72:e9:32:fb:d4:e8:b8:01:a4:1a:c2:53:eb:29:d9:
                    a5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:00:CD:8E:A3:98:31:33:00:0F:34:CA:64:98:9A:D8:B4:8D:EC:CC
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:9b:1c:35:0b:a3:a6:f2:7d:42:a1:ea:1a:e1:e5:ea:49:e5:
         13:ea:2d:28:bf:37:80:42:13:01:8d:a5:d1:eb:b8:43:a4:fa:
         f4:f8:ff:e5:b6:e6:1d:91:9f:74:3d:da:47:7b:4e:99:27:c0:
         6b:2e:64:ec:27:15:a4:4b:35:60:e3:e2:41:59:53:6b:14:8b:
         eb:f4:9a:f7:d6:39:20:6b:a4:4d:a3:3b:9d:52:8a:b4:d8:23:
         cb:df:af:83:1b:c9:d9:cf:24:28:21:44:6f:18:08:cb:10:1f:
         a1:c4:22:f7:b8:c3:cc:71:fc:66:58:84:3f:a0:7a:a6:0e:1e:
         ec:e9:99:48:ef:61:04:a5:1d:05:34:09:d5:9c:c0:05:15:07:
         1b:a9:7b:55:55:3c:3d:b1:d1:9b:8d:fd:3f:dd:ce:6c:1c:63:
         c0:77:9d:c0:9a:91:4d:38:67:22:1a:c4:bd:5d:e6:2a:41:eb:
         39:c1:ed:0c:a4:90:a0:4b:c8:70:19:88:28:5c:f7:cc:96:d4:
         98:91:80:13:33:57:ab:7c:24:19:96:93:e4:00:45:f1:d3:33:
         e4:b8:17:bf:db:6b:e4:53:2b:b9:d9:50:b7:39:c5:99:21:78:
         90:66:0a:ad:65:8d:e9:7b:92:60:c0:5f:34:99:33:54:6b:97:
         95:c7:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 3 14:21:12 2026 by rpki-client