Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
File:                     8ihddApeiSzQvm8iT00_Tp1t0cQ.mft (raw, json)
Hash identifier:          +uVQ+4zAHjm/kpf6+eVE7lnvd94N8T4GZ2lTjKwEuOQ=
Subject key identifier:   18:61:BF:AC:54:C0:4F:69:E9:B1:75:88:E2:63:78:C3:B5:DF:E6:AE
Authority key identifier: F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4
Certificate issuer:       /CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
Certificate serial:       019CAD90A48F2873942679127A6B7186985D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
Manifest number:          0800
Signing time:             Mon 02 Mar 2026 08:01:03 +0000
Manifest this update:     Mon 02 Mar 2026 08:01:03 +0000
Manifest next update:     Tue 03 Mar 2026 08:01:03 +0000
Files and hashes:         1: 8ihddApeiSzQvm8iT00_Tp1t0cQ.crl (hash: OROAYERxIdVpfZIIZcD9hfCXO14clDHU9B/aO8mbfUU=)
                          2: 9Pq-Sb3grrW64Sf_9Ud99U3jJE8.roa (hash: UvG3lMMpHAs1Kqa7iKgc9zEnznEf/HzGZcTb0fKC5kU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:a4:8f:28:73:94:26:79:12:7a:6b:71:86:98:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2285d740a5e892cd0be6f224f4d3f4e9d6dd1c4
        Validity
            Not Before: Mar  2 08:01:03 2026 GMT
            Not After : Mar  3 08:01:03 2026 GMT
        Subject: CN=1861bfac54c04f69e9b17588e26378c3b5dfe6ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:93:0f:29:2a:a9:af:06:71:50:b4:52:57:
                    27:c0:41:29:73:8f:bd:c4:8f:18:6a:c9:0e:6b:fe:
                    07:b4:d6:20:13:33:6c:e2:e0:6c:6a:35:70:ee:ea:
                    68:30:80:d4:20:b2:28:6c:60:e8:5c:e4:9d:10:63:
                    1b:16:b3:95:b5:6b:6d:fb:5a:d9:34:a0:e8:1a:b6:
                    92:1d:85:7a:05:2e:aa:da:fd:ad:e9:8f:77:c0:c2:
                    fe:d8:1b:f8:a6:89:31:be:e4:02:c9:04:bc:87:8d:
                    a8:a5:b5:97:20:f3:5c:d0:55:14:17:88:e1:6b:ea:
                    d9:b7:05:9a:bf:70:79:1f:89:6f:f7:ab:c0:ef:60:
                    94:5a:ae:62:b2:d0:aa:0c:4d:1a:e8:45:bd:b3:3e:
                    40:db:fe:68:df:a1:a1:05:a6:5c:63:94:b7:09:4c:
                    63:9b:d1:96:92:13:71:5a:55:45:9f:b5:1f:d4:71:
                    e3:88:40:50:61:e5:74:d4:1f:38:ce:b1:cd:a6:d2:
                    80:87:60:c8:0c:18:9e:1e:38:04:6d:7c:53:ca:a7:
                    2f:b0:bb:1e:c0:2d:64:dd:01:b6:88:d5:aa:b3:1a:
                    a3:2e:08:f8:47:68:4e:e5:4f:72:fb:fd:2e:e7:66:
                    4e:ed:9a:8c:7b:c9:8e:a5:2b:38:2b:85:21:7d:0c:
                    b9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:61:BF:AC:54:C0:4F:69:E9:B1:75:88:E2:63:78:C3:B5:DF:E6:AE
            X509v3 Authority Key Identifier:
                keyid:F2:28:5D:74:0A:5E:89:2C:D0:BE:6F:22:4F:4D:3F:4E:9D:6D:D1:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ihddApeiSzQvm8iT00_Tp1t0cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/330e6b-5675-4a26-b849-f1c259dbe63e/1/8ihddApeiSzQvm8iT00_Tp1t0cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:17:3a:0a:48:be:25:94:eb:fd:e8:4e:7c:40:13:12:b5:2a:
         9e:1a:29:37:63:2a:39:b8:34:ca:1a:e6:86:e1:98:72:cc:87:
         01:a4:cb:a5:d8:98:dd:cd:49:d8:ef:c0:7f:79:c5:03:1f:3f:
         75:b3:86:f7:8b:03:d8:07:93:b3:18:60:d1:03:11:3a:47:8d:
         8b:1f:94:b1:0e:f3:c5:14:21:1b:9f:2c:c7:db:38:9c:d7:8c:
         f0:2e:be:72:34:36:e4:eb:25:7a:8e:95:00:2c:a5:38:9d:aa:
         5a:40:45:d6:49:6e:4d:2b:51:6f:be:d2:ce:f4:cd:df:42:28:
         cc:b3:90:93:b8:d2:fe:bc:a2:53:55:db:61:f6:5c:c3:3f:1e:
         94:d1:ea:64:94:c4:98:6e:48:de:8d:a2:a0:94:0d:3d:4f:2f:
         6a:46:a3:a7:de:6d:65:4a:88:19:bc:dc:7b:37:f3:6c:61:b9:
         e9:08:8e:56:b9:c8:43:5a:d4:28:01:30:13:90:38:47:41:57:
         84:29:98:bd:90:01:7c:c1:65:d7:54:42:59:2a:10:98:9e:66:
         33:7e:d0:4d:30:1a:56:95:db:c4:0f:67:8b:1c:8c:78:8d:7c:
         d7:24:cd:68:cf:eb:8a:6b:89:db:a2:41:aa:29:4f:c2:a1:be:
         c2:13:8b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:06:28 2026 by rpki-client