Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
File:                     8EoYcV28tIU2j6_pm4riyfBK92M.mft (raw, json)
Hash identifier:          dcTWIibBxkdmp6UAmyoCn7AmO95LkIJwVRiJSSk7i0E=
Subject key identifier:   44:C7:DF:DD:EB:D5:6E:A8:9B:AD:2A:68:AD:05:7C:DE:EB:AB:B5:EE
Authority key identifier: F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63
Certificate issuer:       /CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
Certificate serial:       019CAB6B6CCD27196373A996F30E3A1D5DE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
Manifest number:          0FA6
Signing time:             Sun 01 Mar 2026 22:01:09 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:09 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:09 +0000
Files and hashes:         1: 8EoYcV28tIU2j6_pm4riyfBK92M.crl (hash: +xug1FjC+3bBzPQDCqbLaJXC0G+c3OfBdESw8H408U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:6c:cd:27:19:63:73:a9:96:f3:0e:3a:1d:5d:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a18715dbcb485368fafe99b8ae2c9f04af763
        Validity
            Not Before: Mar  1 22:01:09 2026 GMT
            Not After : Mar  2 22:01:09 2026 GMT
        Subject: CN=44c7dfddebd56ea89bad2a68ad057cdeebabb5ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:31:0c:c8:9f:e6:c7:c7:a1:71:05:47:2a:
                    8d:23:9f:d5:a2:d5:fb:3a:00:67:1c:75:90:fc:9f:
                    e8:dc:89:43:69:21:74:34:c0:ff:f9:f2:bd:f8:fc:
                    ca:26:d5:fa:44:5a:0b:c9:15:b5:7d:b5:c8:27:da:
                    46:38:a8:0e:c0:28:74:b3:66:e9:b3:b7:68:fb:64:
                    a7:c7:f8:66:16:a1:b0:74:b5:47:0d:b5:b3:71:15:
                    15:32:80:46:d5:40:ed:cc:d3:74:57:79:a2:70:92:
                    6c:a4:4f:20:3c:05:27:49:ae:eb:94:34:9c:f4:0a:
                    5a:ab:ee:ab:ee:98:8c:37:79:39:6e:b7:3e:bf:4a:
                    a3:f6:28:a8:16:41:fd:44:8e:f4:a8:02:6d:77:2c:
                    47:25:a7:26:8e:35:eb:fb:bd:92:21:60:46:66:18:
                    d2:49:82:f4:8e:b5:8f:75:f7:be:c6:5c:c6:4c:1b:
                    36:0d:77:c5:20:9b:53:43:78:18:bb:e6:3d:e5:06:
                    d6:6e:96:89:1c:e1:d7:7e:e1:11:25:88:f1:f3:00:
                    56:86:67:16:ea:9a:bc:4a:b6:49:33:92:a7:84:3a:
                    4d:54:bf:df:bd:07:57:90:73:d8:c4:0b:ca:87:96:
                    da:33:3d:b1:dc:d0:03:65:c9:b2:e0:8a:a4:d1:58:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C7:DF:DD:EB:D5:6E:A8:9B:AD:2A:68:AD:05:7C:DE:EB:AB:B5:EE
            X509v3 Authority Key Identifier:
                keyid:F0:4A:18:71:5D:BC:B4:85:36:8F:AF:E9:9B:8A:E2:C9:F0:4A:F7:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EoYcV28tIU2j6_pm4riyfBK92M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/042d8b-6510-47c2-95a2-0f41007a4ce0/1/8EoYcV28tIU2j6_pm4riyfBK92M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:ed:db:62:71:df:d9:05:75:13:5e:d8:97:c0:68:88:8d:
         06:84:ec:c2:49:31:5e:22:68:68:0a:ed:38:06:24:dd:e9:31:
         5b:1f:1b:44:c1:4a:9a:f7:be:5b:6f:ab:bb:3a:67:e0:14:63:
         96:33:aa:de:31:80:2e:b5:19:91:2c:ed:53:3a:78:77:77:da:
         34:44:8e:d6:8e:27:68:be:88:4e:53:74:ef:6c:69:aa:8a:cb:
         56:4a:dd:83:92:15:da:70:66:75:df:1a:f0:39:d3:4f:08:52:
         4b:e4:4f:fd:c8:5f:7c:db:0f:dd:11:22:ca:e8:b7:12:7e:7d:
         41:1d:e3:e5:5c:d2:53:49:3c:9c:c0:d3:74:39:54:91:d8:94:
         a4:69:a8:67:5d:e2:a0:ac:14:10:58:a0:0e:95:4e:4f:be:db:
         fb:1e:72:73:91:e4:3c:85:8c:0a:be:8d:82:5b:bf:bc:91:65:
         0c:c8:bb:3e:48:74:2f:7d:0f:a3:4a:86:3b:45:9f:39:4a:8e:
         f4:99:61:73:ed:31:6e:21:f3:2e:bb:a7:2a:b8:1d:08:fe:bb:
         1e:69:ba:7b:13:a7:a2:a7:d2:a7:09:ac:4b:82:cd:72:b9:eb:
         d6:f5:d3:05:5e:ee:ba:be:35:0a:5d:f0:78:49:73:3d:0b:49:
         ac:0a:92:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:22 2026 by rpki-client