Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
File:                     8VCW_jOQRJyTboVwYdSmll1AijE.mft (raw, json)
Hash identifier:          zr1+Q0v7WjqNFb4ZzkXAbtkfvkywnFvdT9isGt4ZzAg=
Subject key identifier:   7E:15:3E:4A:4B:E9:91:BB:00:7D:5A:F1:60:2D:B0:4C:2E:2A:9F:8A
Authority key identifier: F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31
Certificate issuer:       /CN=f15096fe3390449c936e857061d4a6965d408a31
Certificate serial:       019D389C29C40293788B364769C2E27BBB3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
Manifest number:          0E95
Signing time:             Sun 29 Mar 2026 08:00:51 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:51 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:51 +0000
Files and hashes:         1: 8VCW_jOQRJyTboVwYdSmll1AijE.crl (hash: FoO/92Lyc+G2UPLOzggUl0pYgpVfatfi9mFHakvr16E=)
                          2: WOvdhijn_s2DZtcctLEpLuIdUNw.roa (hash: Z7s2Qx4CcpmhX86cISi/NLHh5qOxWJPe6Z62x5xT1Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:29:c4:02:93:78:8b:36:47:69:c2:e2:7b:bb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15096fe3390449c936e857061d4a6965d408a31
        Validity
            Not Before: Mar 29 08:00:51 2026 GMT
            Not After : Mar 30 08:00:51 2026 GMT
        Subject: CN=7e153e4a4be991bb007d5af1602db04c2e2a9f8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:be:47:17:aa:0c:98:0a:99:e6:f6:05:33:
                    44:c9:2d:b0:03:d7:a0:5f:c1:30:a1:db:cb:3f:aa:
                    73:ba:87:de:17:21:90:de:ef:a9:81:04:99:2e:43:
                    fe:6c:82:39:55:b9:00:6b:4f:ff:1e:45:2d:d0:d8:
                    f5:3f:5b:ec:ec:a5:0f:0d:db:6b:a9:51:46:47:d2:
                    5e:93:c9:52:7c:7f:10:80:65:3e:fb:44:ff:ac:c3:
                    d1:1a:a1:35:f4:b0:61:a8:86:66:ef:72:94:72:ad:
                    b8:0b:8b:ad:eb:44:50:95:9d:c9:dd:63:80:f4:08:
                    87:52:68:61:00:af:24:31:d6:a2:04:51:92:1b:7d:
                    0f:91:73:cb:6f:99:1d:23:59:17:ff:74:0c:81:27:
                    cf:66:e2:e3:d5:90:ef:46:b8:7d:47:81:ef:4b:78:
                    8b:8c:e5:ee:48:f6:6e:0a:74:ee:ff:95:77:cb:74:
                    3c:a5:2f:9b:57:69:ea:52:52:6c:18:be:a8:3b:26:
                    8c:3d:b8:86:03:2d:1d:67:b8:2e:61:e7:42:cb:f9:
                    c5:0a:7e:a9:76:24:ac:dc:9f:cf:a1:28:ea:46:99:
                    d9:a1:c3:8f:07:af:1e:cf:38:0b:b6:9c:19:8e:8d:
                    85:bc:7c:d5:cb:b4:5e:57:87:6a:fe:f0:8b:77:be:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:15:3E:4A:4B:E9:91:BB:00:7D:5A:F1:60:2D:B0:4C:2E:2A:9F:8A
            X509v3 Authority Key Identifier:
                keyid:F1:50:96:FE:33:90:44:9C:93:6E:85:70:61:D4:A6:96:5D:40:8A:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VCW_jOQRJyTboVwYdSmll1AijE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/5d6d69-8880-4a92-8756-5815fd3da297/1/8VCW_jOQRJyTboVwYdSmll1AijE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:36:b3:a3:4c:50:6c:e3:c2:84:e1:21:fd:fe:cb:fe:35:
         05:49:0a:80:85:9e:33:53:f6:09:8e:37:f1:03:1c:11:1d:c9:
         62:e9:e1:13:ab:74:5d:c1:c8:98:b7:6e:f8:34:df:fd:98:23:
         a5:01:4e:bd:0c:d6:0b:df:ce:78:85:24:4c:89:d4:04:2d:2b:
         34:e3:99:25:5e:68:73:b1:78:eb:bc:c2:3e:aa:57:88:b1:4f:
         4b:fa:4d:1c:ae:ea:a8:33:99:66:f6:3c:50:8a:eb:2f:73:7c:
         4c:35:6d:33:80:83:f2:5a:d1:1f:d3:15:50:76:bc:f7:b1:58:
         ea:dc:cd:30:38:5a:5c:95:e3:ae:ca:a4:6d:ab:8b:e6:74:78:
         c8:5f:3b:a9:fd:4b:dc:00:21:f7:0f:d2:9c:e6:9a:74:b8:4e:
         27:54:75:49:17:6b:99:b2:01:a2:d6:4d:8e:99:f2:25:c6:22:
         5f:7b:6e:d8:ac:a6:4e:65:21:4a:2f:ac:cb:7f:53:86:3e:4b:
         ee:9f:1f:73:4b:6c:cd:a5:80:3f:e7:d0:2a:68:2d:58:93:7a:
         a7:b2:81:72:fb:c2:15:3f:d0:60:97:68:07:4d:ce:78:82:7b:
         10:1b:c9:33:34:61:cd:61:cc:92:46:79:ec:0d:17:8e:0a:62:
         c3:00:55:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:33 2026 by rpki-client