Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
File:                     A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft (raw, json)
Hash identifier:          BxN/F7JY5PqDWyEN+F/fxINi5F4ohe5YTF9+cQAPO/s=
Subject key identifier:   B6:9E:5C:22:49:BF:5C:DE:E5:75:2D:E4:FE:39:32:CE:A5:0C:1B:0F
Authority key identifier: 03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51
Certificate issuer:       /CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
Certificate serial:       019CC9AD21674994778E8DFD1E737BE0DB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
Manifest number:          1878
Signing time:             Sat 07 Mar 2026 19:01:32 +0000
Manifest this update:     Sat 07 Mar 2026 19:01:32 +0000
Manifest next update:     Sun 08 Mar 2026 19:01:32 +0000
Files and hashes:         1: A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl (hash: rRDV5n7/lXni5x0eAnLLZlkVZfCXC5e0p+eV1ps+mY8=)
                          2: G3AePD2W8by_05untDFoas2wVbw.roa (hash: C7aIOYdQMQOaQtFECr7bWJxyPf8Fuvr3aR1A54RPx9M=)
                          3: NdtTEs20dkxfICeXOI1a_zE5bjg.roa (hash: CC61i+Iskxl9VrH0+/CY6ZPO9cAdAYPFiZKSdlc1ps8=)
                          4: d5lqlCtSuJ0g8PyIC5qQPpBp3lQ.roa (hash: wnG6RNC4htPSNVlkkHuwEaiUqtjEsFITXIToRqRR44g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c9:ad:21:67:49:94:77:8e:8d:fd:1e:73:7b:e0:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03c33e43ef56527a169d6ac6d7e62c63d1973051
        Validity
            Not Before: Mar  7 19:01:32 2026 GMT
            Not After : Mar  8 19:01:32 2026 GMT
        Subject: CN=b69e5c2249bf5cdee5752de4fe3932cea50c1b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:56:b9:0b:5e:e1:6b:9b:92:a6:68:db:90:
                    47:d7:06:c5:4e:de:ae:a6:43:7e:d4:e8:16:1a:bd:
                    74:4d:e6:7c:07:85:9e:a1:77:b9:67:48:a8:31:07:
                    3e:7e:33:37:24:ae:47:cc:b8:bb:42:0b:1c:cc:3e:
                    eb:89:c6:9d:8b:81:e4:35:39:97:99:73:59:ab:db:
                    4a:e2:6a:f7:1c:0e:57:53:b3:3c:21:8f:89:ef:ba:
                    c5:33:3d:2a:54:38:6f:17:a3:3c:04:0c:b4:77:ee:
                    0c:ca:e9:20:5d:73:52:18:14:0f:06:1d:4f:94:43:
                    b1:09:0d:4a:c0:7b:5c:9f:90:be:4c:31:c6:27:cb:
                    19:bb:17:5b:a8:a5:c4:c7:e0:5c:73:a3:57:d4:3d:
                    e9:75:0e:57:32:ad:b4:72:5b:81:da:a7:92:1d:c4:
                    b1:13:24:74:3e:b9:07:87:0d:0a:05:7f:3b:bd:4f:
                    38:d9:c1:5c:15:0f:31:2e:b4:39:30:19:9d:8f:42:
                    cb:a6:7f:71:16:71:d1:df:2e:ea:ef:5c:ad:a6:71:
                    1b:68:84:d2:24:f9:6f:23:7f:ac:cf:87:da:6e:89:
                    5f:18:d0:b4:ce:50:7e:27:ee:d0:ae:e1:c9:3e:ad:
                    64:db:ce:12:48:bc:fa:03:2d:3c:46:ce:36:fc:e6:
                    a5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:5C:22:49:BF:5C:DE:E5:75:2D:E4:FE:39:32:CE:A5:0C:1B:0F
            X509v3 Authority Key Identifier:
                keyid:03:C3:3E:43:EF:56:52:7A:16:9D:6A:C6:D7:E6:2C:63:D1:97:30:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c17c15-a142-4b37-b8fe-a3a3eb879f2b/1/A8M-Q-9WUnoWnWrG1-YsY9GXMFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fd:ba:17:d1:04:87:84:87:39:0c:43:b7:de:13:b7:7b:fb:
         47:6c:02:42:d7:12:b7:a8:2d:b3:b0:3d:5c:42:59:14:12:c4:
         12:9c:b5:64:7a:9c:41:79:c4:58:8b:2f:f0:7b:92:d0:1f:ab:
         45:56:85:d2:e9:22:72:6f:4e:eb:e2:32:a9:6c:c5:bf:62:74:
         c5:00:a5:50:60:b3:76:af:a8:e0:f9:a3:98:f0:38:3e:3c:2c:
         cc:dc:e8:e9:d6:a7:f5:5c:ff:f0:69:66:68:2c:f7:97:42:36:
         9b:3b:66:f5:e4:36:a7:53:7d:e8:0e:dd:8e:83:02:09:f7:6b:
         82:12:70:5f:b2:2b:7e:8f:d5:bb:50:88:67:f8:5c:ff:d8:49:
         d8:5a:27:02:86:aa:f2:73:ca:a0:6b:bf:ec:ae:dc:96:64:d9:
         fd:a9:39:66:4b:33:d3:5d:f9:7a:c8:03:f8:e9:5b:12:27:22:
         e6:f7:45:94:5a:09:57:2f:69:7c:61:b9:5a:70:10:a1:3d:7d:
         23:fb:ae:a8:b9:2a:f5:17:13:02:f6:ee:bd:5e:d8:aa:a8:7c:
         65:c0:e7:1c:7c:79:1f:c5:e0:e3:8a:4b:32:89:78:ee:b3:a8:
         5a:a8:82:a9:d7:c0:a8:1a:56:27:41:a7:02:9b:65:1f:f9:04:
         39:80:a4:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzJrSFnSZR3jo39HnN74NthMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYzMzZTQzZWY1NjUyN2ExNjlkNmFjNmQ3ZTYyYzYzZDE5
NzMwNTEwHhcNMjYwMzA3MTkwMTMyWhcNMjYwMzA4MTkwMTMyWjAzMTEwLwYDVQQD
EyhiNjllNWMyMjQ5YmY1Y2RlZTU3NTJkZTRmZTM5MzJjZWE1MGMxYjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6JWuQte4WubkqZo25BH1wbFTt6u
pkN+1OgWGr10TeZ8B4WeoXe5Z0ioMQc+fjM3JK5HzLi7QgsczD7ricadi4HkNTmX
mXNZq9tK4mr3HA5XU7M8IY+J77rFMz0qVDhvF6M8BAy0d+4MyukgXXNSGBQPBh1P
lEOxCQ1KwHtcn5C+TDHGJ8sZuxdbqKXEx+Bcc6NX1D3pdQ5XMq20cluB2qeSHcSx
EyR0PrkHhw0KBX87vU842cFcFQ8xLrQ5MBmdj0LLpn9xFnHR3y7q71ytpnEbaITS
JPlvI3+sz4fabolfGNC0zlB+J+7QruHJPq1k284SSLz6Ay08Rs42/OalTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLaeXCJJv1ze5XUt5P45Ms6lDBsPMB8GA1UdIwQY
MBaAFAPDPkPvVlJ6Fp1qxtfmLGPRlzBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUt
YTNhM2ViODc5ZjJiLzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jMTdjMTUtYTE0Mi00YjM3LWI4ZmUtYTNhM2ViODc5ZjJi
LzEvQThNLVEtOVdVbm9XbldyRzEtWXNZOUdYTUZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv26F9EE
h4SHOQxDt94Tt3v7R2wCQtcSt6gts7A9XEJZFBLEEpy1ZHqcQXnEWIsv8HuS0B+r
RVaF0ukicm9O6+IyqWzFv2J0xQClUGCzdq+o4PmjmPA4PjwszNzo6dan9Vz/8Glm
aCz3l0I2mztm9eQ2p1N96A7djoMCCfdrghJwX7Irfo/Vu1CIZ/hc/9hJ2FonAoaq
8nPKoGu/7K7clmTZ/ak5Zksz0135esgD+OlbEici5vdFlFoJVy9pfGG5WnAQoT19
I/uuqLkq9RcTAvbuvV7Yqqh8ZcDnHHx5H8Xg44pLMol47rOoWqiCqdfAqBpWJ0Gn
AptlH/kEOYCkqA==
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:30:04 2026 by rpki-client