Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File:                     8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier:          C+SgMU8VJnwWDcY0XfCfq17CRp1GV7Yo3mtkFalisMw=
Subject key identifier:   AF:C1:33:02:FF:68:EB:CC:E4:0F:D0:DB:45:FC:0E:11:A2:3B:1D:3D
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer:       /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial:       019CAB6BB3A8D5FFA22B96B1A4A82A08C65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number:          1844
Signing time:             Sun 01 Mar 2026 22:01:27 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:27 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:27 +0000
Files and hashes:         1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: LD8c3lfz1L2FeEYanNBX2TDdlhUjvWM+/ObTxYmIU8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:b3:a8:d5:ff:a2:2b:96:b1:a4:a8:2a:08:c6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
        Validity
            Not Before: Mar  1 22:01:27 2026 GMT
            Not After : Mar  2 22:01:27 2026 GMT
        Subject: CN=afc13302ff68ebcce40fd0db45fc0e11a23b1d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:ff:9b:b7:a9:5a:a2:93:25:55:8e:5c:ee:
                    0d:70:c0:ea:e1:13:db:b3:41:1e:69:73:d3:2c:a0:
                    f5:a6:ef:8b:a6:8d:80:cb:ac:4c:88:77:36:8a:28:
                    fc:6f:93:17:66:e8:3c:0a:74:c9:85:4d:15:3c:90:
                    46:d1:48:bc:f9:2c:6a:44:7e:29:11:4a:bd:4f:b5:
                    17:9f:5a:89:98:94:ef:5f:87:64:ef:79:f9:34:5e:
                    62:b4:11:ae:8d:e6:61:08:06:87:95:0d:1e:b2:d7:
                    3f:58:17:38:54:4b:24:58:79:6a:da:40:7b:36:bf:
                    f6:8e:72:c6:f0:a5:be:24:2a:14:4a:e8:06:b8:ed:
                    2c:0d:6e:dc:fa:58:53:57:55:94:c9:74:92:56:c6:
                    18:ee:7d:9e:2c:05:3e:f8:70:ef:84:f3:46:3d:ac:
                    da:f6:cd:4c:05:76:18:90:7c:62:96:5e:ef:f3:bb:
                    5a:b4:b4:9e:58:6f:b5:b6:d7:ed:12:5e:ac:9d:1b:
                    13:20:f2:3d:0a:1c:94:22:0e:40:5b:6c:10:69:b1:
                    f6:0d:3b:c6:74:4b:b9:3f:99:60:87:49:f8:d7:ab:
                    ad:88:f6:f5:72:f5:e2:49:cf:82:2a:48:24:7b:6f:
                    45:2d:4c:54:7e:f4:6e:95:a4:d1:d7:8a:8e:16:df:
                    43:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C1:33:02:FF:68:EB:CC:E4:0F:D0:DB:45:FC:0E:11:A2:3B:1D:3D
            X509v3 Authority Key Identifier:
                keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:46:19:77:95:ea:58:68:e8:c1:ea:0b:f2:8c:ef:7a:6e:ae:
         76:08:d6:98:e8:32:04:fc:84:3f:c9:2d:ee:da:c8:c6:f5:3d:
         bd:80:61:bd:e0:35:7c:9f:ca:71:2f:c8:4d:d3:51:dc:ad:de:
         3f:c8:ae:11:82:66:60:7f:11:b5:c3:ff:f4:81:cb:10:fb:7d:
         58:39:e5:59:9e:66:d7:21:6f:d6:05:50:1c:8d:b2:ea:f6:9b:
         67:7b:cc:a0:df:6c:a0:96:cc:04:df:45:ec:bf:b5:b9:95:5e:
         7f:16:44:a8:5c:5d:77:6b:5e:b1:da:4d:a7:00:d5:50:7f:c0:
         4b:71:87:46:d3:13:43:2b:5c:84:10:ef:e0:14:3c:df:29:f1:
         f1:e7:f2:30:77:57:e4:bb:72:b9:a8:58:f1:39:67:90:06:f4:
         58:3b:a3:5b:f7:5e:19:3c:ce:f2:12:b9:65:a7:58:e7:30:a1:
         b5:1e:48:b1:fd:ff:24:e5:cd:48:a0:fa:d2:c8:e7:4e:ee:03:
         19:92:f8:c4:ad:a2:89:6b:e4:f9:61:bf:b0:45:51:7b:3a:30:
         6d:74:a1:5c:2a:f1:8d:20:81:2a:6b:7d:68:1e:95:df:1b:96:
         5f:9e:ae:2c:f7:1d:58:75:fd:6b:53:c4:81:bb:31:e2:0a:f8:
         84:71:1d:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra7Oo1f+iK5axpKgqCMZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxNWZmZjhhZGM2ZWU3NTEyNzJjMGE5MWQwNWRjYWZmN2U4
ZDJkNjkwHhcNMjYwMzAxMjIwMTI3WhcNMjYwMzAyMjIwMTI3WjAzMTEwLwYDVQQD
EyhhZmMxMzMwMmZmNjhlYmNjZTQwZmQwZGI0NWZjMGUxMWEyM2IxZDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGP/m7epWqKTJVWOXO4NcMDq4RPb
s0EeaXPTLKD1pu+Lpo2Ay6xMiHc2iij8b5MXZug8CnTJhU0VPJBG0Ui8+SxqRH4p
EUq9T7UXn1qJmJTvX4dk73n5NF5itBGujeZhCAaHlQ0estc/WBc4VEskWHlq2kB7
Nr/2jnLG8KW+JCoUSugGuO0sDW7c+lhTV1WUyXSSVsYY7n2eLAU++HDvhPNGPaza
9s1MBXYYkHxill7v87tatLSeWG+1ttftEl6snRsTIPI9ChyUIg5AW2wQabH2DTvG
dEu5P5lgh0n416utiPb1cvXiSc+CKkgke29FLUxUfvRulaTR14qOFt9DRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/BMwL/aOvM5A/Q20X8DhGiOx09MB8GA1UdIwQY
MBaAFPFf/4rcbudRJywKkdBdyv9+jS1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQt
YzNmNGI5ODU3MTRjLzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wYWM5ZDAtZmU1YS00MDAyLTkyZWQtYzNmNGI5ODU3MTRj
LzEvOFZfX2l0eHU1MUVuTEFxUjBGM0tfMzZOTFdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0YZd5Xq
WGjoweoL8ozvem6udgjWmOgyBPyEP8kt7trIxvU9vYBhveA1fJ/KcS/ITdNR3K3e
P8iuEYJmYH8RtcP/9IHLEPt9WDnlWZ5m1yFv1gVQHI2y6vabZ3vMoN9soJbMBN9F
7L+1uZVefxZEqFxdd2tesdpNpwDVUH/AS3GHRtMTQytchBDv4BQ83ynx8efyMHdX
5LtyuahY8TlnkAb0WDujW/deGTzO8hK5ZadY5zChtR5Isf3/JOXNSKD60sjnTu4D
GZL4xK2iiWvk+WG/sEVRezowbXShXCrxjSCBKmt9aB6V3xuWX56uLPcdWHX9a1PE
gbsx4gr4hHEdaQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:18:27 2026 by rpki-client