Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
File:                     8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft (raw, json)
Hash identifier:          0NzBtv3vPu3bYmaRIpf+9qybc2KVkqr20zyUyOVixpo=
Subject key identifier:   5E:B4:A8:F9:13:45:73:79:B3:DF:BB:66:93:5F:AF:CA:E4:9A:88:A1
Authority key identifier: F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45
Certificate issuer:       /CN=f2beed4df207c3609adfded80dddd9316f0a9b45
Certificate serial:       019CAB6BE0649010E294FAE8E987D709F969
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
Manifest number:          1847
Signing time:             Sun 01 Mar 2026 22:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:39 +0000
Files and hashes:         1: 8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl (hash: ktyo2cTMmiIBWyg35LI5E31dX8Jz+y6EVepDeq2Pul0=)
                          2: t-l9Vs8ayE79aW3oHxMqNfSEsqc.roa (hash: zSRFRPiAG5UhuNuJs++2UpnJZqPU6QT/6ncvooD2vh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:e0:64:90:10:e2:94:fa:e8:e9:87:d7:09:f9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2beed4df207c3609adfded80dddd9316f0a9b45
        Validity
            Not Before: Mar  1 22:01:39 2026 GMT
            Not After : Mar  2 22:01:39 2026 GMT
        Subject: CN=5eb4a8f913457379b3dfbb66935fafcae49a88a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:d4:ba:4b:97:ba:f9:06:c4:af:93:2c:1e:
                    db:01:24:f0:a0:f7:3d:f0:4b:26:a0:5d:b6:3d:be:
                    9f:d4:e3:4b:b5:4e:41:91:bc:96:b2:70:89:03:5a:
                    5a:7c:51:4a:95:1f:17:09:75:e9:d2:1d:95:11:ab:
                    9f:dc:2b:04:4e:2e:b1:6c:53:0b:13:ce:36:c9:b2:
                    72:61:3f:25:99:f0:d0:44:03:4f:4a:70:fa:30:c3:
                    ae:3a:9a:72:e3:b2:c0:5a:dd:da:46:64:ba:38:4a:
                    4c:1c:36:0a:a2:3a:90:d5:e9:94:e3:89:3d:17:aa:
                    9b:85:07:fa:46:cf:5b:50:a0:b8:f2:02:5b:49:30:
                    1f:da:38:fa:f4:df:6f:76:4d:d5:e3:d8:bf:fd:5a:
                    79:d5:5d:d8:53:01:1d:03:29:ad:f1:e9:32:c4:62:
                    76:61:ac:cb:21:92:28:c8:1e:9f:be:2a:c6:de:b0:
                    d9:c4:a7:5f:ce:a2:40:14:3f:99:b7:03:12:b2:2c:
                    7b:1e:d5:55:6e:f1:c6:3a:0c:4d:28:72:9a:09:1d:
                    9d:9b:47:44:d0:0d:ca:0f:b2:79:5d:dd:8f:39:2e:
                    1f:b9:61:2b:57:3c:2c:af:e3:27:03:a3:26:47:eb:
                    d6:e0:35:f6:35:a7:30:e8:09:3a:b9:d8:b8:1f:b9:
                    81:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B4:A8:F9:13:45:73:79:B3:DF:BB:66:93:5F:AF:CA:E4:9A:88:A1
            X509v3 Authority Key Identifier:
                keyid:F2:BE:ED:4D:F2:07:C3:60:9A:DF:DE:D8:0D:DD:D9:31:6F:0A:9B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r7tTfIHw2Ca397YDd3ZMW8Km0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6bcba-a996-4bb5-ba4a-a46153145cf8/1/8r7tTfIHw2Ca397YDd3ZMW8Km0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d4:50:c0:31:a1:32:0f:3c:6d:83:b7:13:45:03:0b:c7:fc:
         c0:5d:19:a7:da:a6:a0:91:1b:16:39:a7:ad:45:9c:2d:12:aa:
         e2:2f:3d:b3:ba:ac:c1:2c:e6:fe:80:b4:79:e5:5a:03:e1:67:
         db:6d:e7:26:75:1e:76:13:be:87:34:12:3b:9f:b5:72:a4:d4:
         62:28:4e:a0:76:e8:f0:32:5a:0b:7c:5e:28:87:28:ae:dc:1c:
         d2:f9:dd:24:0d:88:9e:1f:01:ec:58:ee:3f:47:f1:08:6d:30:
         bf:52:97:7d:aa:ef:17:36:64:11:54:cc:1f:d9:2a:4b:e6:df:
         b6:ec:3e:44:99:5a:93:9b:df:da:5d:5f:70:4f:ef:5e:b2:74:
         19:12:e7:4b:f1:60:18:0a:5c:74:98:47:18:c6:93:de:40:9c:
         80:f4:13:dc:f6:fc:bc:2e:e6:a6:54:cd:2b:6a:91:73:45:83:
         bc:f5:41:c7:70:52:3b:1e:f9:16:58:47:b0:41:83:4b:a3:8a:
         65:9f:58:f3:97:75:a3:7e:eb:b1:85:37:79:5e:13:a7:cf:36:
         70:44:fe:35:54:35:79:34:42:f3:97:5c:21:07:78:f8:85:06:
         c0:23:da:89:e1:2b:7a:1a:c3:80:bf:61:c7:6f:95:fb:22:37:
         37:0c:12:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra+BkkBDilPro6YfXCflpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyYmVlZDRkZjIwN2MzNjA5YWRmZGVkODBkZGRkOTMxNmYw
YTliNDUwHhcNMjYwMzAxMjIwMTM5WhcNMjYwMzAyMjIwMTM5WjAzMTEwLwYDVQQD
Eyg1ZWI0YThmOTEzNDU3Mzc5YjNkZmJiNjY5MzVmYWZjYWU0OWE4OGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fzUukuXuvkGxK+TLB7bASTwoPc9
8EsmoF22Pb6f1ONLtU5BkbyWsnCJA1pafFFKlR8XCXXp0h2VEauf3CsETi6xbFML
E842ybJyYT8lmfDQRANPSnD6MMOuOppy47LAWt3aRmS6OEpMHDYKojqQ1emU44k9
F6qbhQf6Rs9bUKC48gJbSTAf2jj69N9vdk3V49i//Vp51V3YUwEdAymt8ekyxGJ2
YazLIZIoyB6fvirG3rDZxKdfzqJAFD+ZtwMSsix7HtVVbvHGOgxNKHKaCR2dm0dE
0A3KD7J5Xd2POS4fuWErVzwsr+MnA6MmR+vW4DX2Nacw6Ak6udi4H7mBFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF60qPkTRXN5s9+7ZpNfr8rkmoihMB8GA1UdIwQY
MBaAFPK+7U3yB8Ngmt/e2A3d2TFvCptFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEt
YTQ2MTUzMTQ1Y2Y4LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9jNmJjYmEtYTk5Ni00YmI1LWJhNGEtYTQ2MTUzMTQ1Y2Y4
LzEvOHI3dFRmSUh3MkNhMzk3WURkM1pNVzhLbTBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAdRQwDGh
Mg88bYO3E0UDC8f8wF0Zp9qmoJEbFjmnrUWcLRKq4i89s7qswSzm/oC0eeVaA+Fn
223nJnUedhO+hzQSO5+1cqTUYihOoHbo8DJaC3xeKIcortwc0vndJA2Inh8B7Fju
P0fxCG0wv1KXfarvFzZkEVTMH9kqS+bftuw+RJlak5vf2l1fcE/vXrJ0GRLnS/Fg
GApcdJhHGMaT3kCcgPQT3Pb8vC7mplTNK2qRc0WDvPVBx3BSOx75FlhHsEGDS6OK
ZZ9Y85d1o37rsYU3eV4Tp882cET+NVQ1eTRC85dcIQd4+IUGwCPaieErehrDgL9h
x2+V+yI3NwwSiQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:22 2026 by rpki-client