Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
File:                     8HH00RnQt0-2bjen74eNRJ1U3cg.mft (raw, json)
Hash identifier:          mTYuqDu764LaGL4dRKUQ8IcikcqOOla8P64GRuPnbA0=
Subject key identifier:   24:79:95:5A:73:D6:CF:F7:68:90:7A:D0:08:FB:05:F0:A3:88:2B:59
Authority key identifier: F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8
Certificate issuer:       /CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
Certificate serial:       019CAAFD8AC461190411F6C9E7347264269D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
Manifest number:          1861
Signing time:             Sun 01 Mar 2026 20:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 20:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 20:01:08 +0000
Files and hashes:         1: 8HH00RnQt0-2bjen74eNRJ1U3cg.crl (hash: 0aTTZmT8dySVHsFC4SPfNwqIb5lovz4Zia/UBBr5J0Q=)
                          2: JTGa6gnVCnC_0aiY47Op1UuqiXg.roa (hash: Ks2YhvrwgXilKIV5biVYzNEQiDr4tEwP3nbyii0EPRs=)
                          3: Vvb80MYSkguz6_4hy1kdfE1ltwA.roa (hash: sqkJWQ9Xeo1TklNk71WrnovXu2Ri41sp487lWIh/DUU=)
                          4: jFj46lu_4u0ubIJMiYtU4-hn078.roa (hash: G0bQ//8p+NwdW+KNpaWOQBklpF5Yu3De2ZhKpunhcY8=)
                          5: ndNKivh3eGWkwwwoBkB-DTBLeAk.roa (hash: 1Ul5VkOu4uH6nlTFxGEpna5ymLuVxA+ZTlonloh+hpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:8a:c4:61:19:04:11:f6:c9:e7:34:72:64:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f071f4d119d0b74fb66e37a7ef878d449d54ddc8
        Validity
            Not Before: Mar  1 20:01:08 2026 GMT
            Not After : Mar  2 20:01:08 2026 GMT
        Subject: CN=2479955a73d6cff768907ad008fb05f0a3882b59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ef:f6:08:37:03:64:80:b3:42:21:2a:92:63:
                    29:b1:43:37:11:48:27:2b:19:16:6c:eb:15:4d:4e:
                    2b:cf:88:b4:c2:44:75:10:46:c8:67:df:f3:2a:8b:
                    88:2d:e5:94:a5:3e:50:b4:2d:57:79:1e:d2:16:62:
                    75:33:ea:e3:6c:35:8c:5b:56:1a:81:4e:14:7e:20:
                    c6:b5:64:f3:c2:27:3a:3c:ad:85:67:7c:53:5b:11:
                    c7:7f:8c:e2:a1:c9:fb:26:df:f7:2e:19:f8:ae:db:
                    b6:56:fc:b2:41:ff:6e:d3:46:f1:ff:8f:d5:54:5f:
                    45:71:89:cf:76:75:d0:65:b0:f4:85:1f:ea:0c:ba:
                    f8:ef:79:5f:f4:41:dc:fe:e9:ee:3d:75:50:fe:49:
                    53:d5:bf:5e:1c:1f:48:a2:51:57:5c:4f:6e:14:12:
                    53:ee:90:79:1a:14:f0:1e:ad:0f:a6:05:a9:3f:a0:
                    a0:26:2c:f6:a0:8b:27:7a:8c:41:95:11:c1:ff:c9:
                    77:bc:63:da:2a:1a:72:15:c7:f2:96:5f:52:fd:6f:
                    c2:08:4d:fd:15:01:75:3c:aa:69:69:58:ab:02:49:
                    15:9e:1e:fe:5c:a5:90:8b:6c:ab:54:e4:05:6e:79:
                    97:cd:1f:a9:81:cf:c3:64:00:12:ef:b8:bf:e1:0b:
                    b0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:79:95:5A:73:D6:CF:F7:68:90:7A:D0:08:FB:05:F0:A3:88:2B:59
            X509v3 Authority Key Identifier:
                keyid:F0:71:F4:D1:19:D0:B7:4F:B6:6E:37:A7:EF:87:8D:44:9D:54:DD:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8HH00RnQt0-2bjen74eNRJ1U3cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6a9682-201b-4e01-ba09-07474524ef9a/1/8HH00RnQt0-2bjen74eNRJ1U3cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3c:6b:5d:a4:6d:d2:d3:07:67:60:6f:24:c1:27:20:e5:81:
         69:48:8f:37:cc:2a:0a:b2:3a:cc:66:75:b8:e2:0c:eb:d8:ac:
         18:7d:7c:31:df:c2:07:4a:bb:d7:7c:52:c1:20:6b:af:cf:69:
         bc:bc:8e:e3:78:ea:aa:2f:1d:61:12:36:ad:c2:c2:c9:f1:c4:
         eb:0e:1c:95:03:15:82:54:b9:bf:7e:94:71:b6:f2:8a:d2:f2:
         ef:07:fe:04:92:51:fd:4f:96:23:99:17:f6:cf:cd:b2:cd:7f:
         18:84:1c:98:57:09:c1:d5:44:f3:0b:71:1a:a1:3e:89:cb:89:
         0f:c5:38:01:7d:77:d0:e1:2b:2d:7d:8d:e1:6d:2f:78:8f:98:
         7d:ac:22:66:fd:62:1a:25:33:d0:69:7e:b8:f2:9c:97:ef:f1:
         b7:3e:e6:b1:29:72:32:b5:d8:a9:14:39:97:80:bc:8b:2b:7b:
         87:de:c3:f0:27:cb:cc:cb:a2:a3:56:fb:3b:a7:97:74:52:b4:
         c2:2d:d3:8a:81:74:38:79:aa:58:96:45:8f:72:ec:e7:78:8f:
         91:6e:ac:9a:1d:4e:02:81:df:d9:46:1d:20:73:53:bf:79:27:
         96:ca:74:24:34:cb:7d:ad:19:c7:34:eb:d3:84:0b:28:de:18:
         2f:04:b8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:48 2026 by rpki-client