Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
File:                     O8RoMnEppQF7l23I7aydG56aFMw.mft (raw, json)
Hash identifier:          qvxYYKep4/5N8d5FITSMpDofoZwQXEus9jJrR99JVGY=
Subject key identifier:   6B:63:D0:BF:7A:2A:FE:0F:79:46:48:5C:45:7A:76:63:C0:55:33:10
Authority key identifier: 3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC
Certificate issuer:       /CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
Certificate serial:       019D984FAD91CC8330F95C7CC90DB8526471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
Manifest number:          184C
Signing time:             Thu 16 Apr 2026 22:00:51 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:51 +0000
Manifest next update:     Fri 17 Apr 2026 22:00:51 +0000
Files and hashes:         1: O8RoMnEppQF7l23I7aydG56aFMw.crl (hash: MCKIQM0XI2/US2cy55wqb5Tz5+iMUz++FdPhTWsOWGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:ad:91:cc:83:30:f9:5c:7c:c9:0d:b8:52:64:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
        Validity
            Not Before: Apr 16 22:00:51 2026 GMT
            Not After : Apr 17 22:00:51 2026 GMT
        Subject: CN=6b63d0bf7a2afe0f7946485c457a7663c0553310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ca:08:6c:b9:b0:fa:04:d4:42:c2:15:69:7c:
                    f3:09:be:d3:be:29:2e:6f:f5:f4:78:3a:1e:fb:ae:
                    95:68:07:2f:42:05:72:0c:80:8b:c7:31:b1:14:46:
                    45:72:b6:81:d5:7e:e3:7d:bf:26:06:fb:88:df:0f:
                    69:1e:42:24:05:69:af:51:52:37:8a:14:0e:ab:dc:
                    4d:0a:e7:5e:e9:90:69:63:a8:ad:eb:f3:15:39:44:
                    11:b7:84:37:db:35:55:68:4a:aa:cc:ef:db:c3:8a:
                    df:d4:52:f5:93:d6:2c:d4:ec:3b:09:bd:1b:50:e7:
                    f4:c4:68:c7:e4:04:0c:5a:4f:bf:48:bf:00:0b:3f:
                    25:ca:b8:12:2c:56:a3:17:7f:4f:a0:f5:11:82:25:
                    2d:f0:65:70:d6:2a:c7:13:da:1f:e1:4b:c9:67:9b:
                    9c:e4:87:2a:f7:cb:eb:03:04:c5:f8:1c:f1:23:c9:
                    18:5e:d8:ee:af:6d:62:dc:47:00:14:91:47:aa:bd:
                    d2:2f:04:69:29:d1:17:aa:4a:0e:4a:ff:37:00:c6:
                    15:f4:06:57:9e:b2:ca:ff:99:60:1e:ee:ed:0e:30:
                    00:42:b3:ca:fc:9d:c1:9f:ed:3f:b7:dc:9a:0e:f6:
                    44:5f:e1:90:6c:eb:08:27:86:e0:39:1f:dc:1e:75:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:D0:BF:7A:2A:FE:0F:79:46:48:5C:45:7A:76:63:C0:55:33:10
            X509v3 Authority Key Identifier:
                keyid:3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:d6:87:1f:37:a0:0f:ea:17:6f:63:62:25:6d:d3:07:3a:
         48:8c:3d:46:e5:57:29:25:31:1c:ed:4c:14:31:8a:fb:1a:36:
         25:9a:38:bd:86:dc:61:20:6e:39:dc:ab:4a:94:0d:bd:78:81:
         54:b7:d9:38:f3:da:fc:50:f6:82:c9:4e:10:8b:55:a9:a9:ad:
         c5:a0:7c:23:3f:cc:9f:42:f5:80:60:bd:7d:87:db:61:af:43:
         e7:8c:58:0b:d5:72:d8:cf:9c:5a:03:50:f3:e2:d9:e7:87:3b:
         3e:30:83:9b:26:5a:d3:f6:2c:c7:1a:0c:cf:88:f9:31:9d:7d:
         9d:f6:f8:c2:c0:ac:18:74:8e:d6:0c:c2:15:80:54:9a:7d:b9:
         ee:19:03:c8:cd:74:9a:59:26:34:a7:1b:08:ad:01:3f:53:a1:
         c8:a6:c7:7a:40:bb:26:4b:4b:ec:b1:22:b8:a6:18:e2:4d:21:
         cd:26:8f:97:68:6e:01:dc:9c:47:c5:db:6e:ad:f7:6f:6d:cc:
         32:d2:75:0d:98:75:c8:2c:39:58:30:cd:ed:ae:23:75:15:9c:
         94:88:5a:65:57:a4:70:ae:b9:0a:f3:64:16:75:34:96:34:74:
         e3:62:be:79:09:be:4e:9b:5c:5b:42:d6:b4:95:f6:07:2f:4b:
         98:cc:72:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:34 2026 by rpki-client