Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File:                     flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier:          gFPEc6JBo5r59HY/ltozSFiSUHdFB2bJdI3bG84UzcE=
Subject key identifier:   73:2F:BC:5F:15:90:48:29:06:90:E3:F3:5A:6E:AD:5A:58:AA:E6:6B
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer:       /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial:       019D2583A85C295DF58CA530F58C85D8BA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number:          179D
Signing time:             Wed 25 Mar 2026 15:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 15:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 15:01:18 +0000
Files and hashes:         1: 0Wah9lDQL0CoLEgawmzR8dhxyAc.roa (hash: ee0vXYwpzwNhjYiRTv9x+OGC9lOC07tlDhvLzTb9boo=)
                          2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: XcSp1K80XMlyiZK4vIqwbTwzEqwBBNWOIhs83Pi3NdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:83:a8:5c:29:5d:f5:8c:a5:30:f5:8c:85:d8:ba:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
        Validity
            Not Before: Mar 25 15:01:18 2026 GMT
            Not After : Mar 26 15:01:18 2026 GMT
        Subject: CN=732fbc5f159048290690e3f35a6ead5a58aae66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:81:2a:1d:df:c5:bb:3b:5f:64:d0:62:3b:
                    d3:f4:d9:ac:37:65:86:5d:66:e8:f7:56:14:71:17:
                    c3:ce:87:29:14:e4:50:a6:62:69:00:10:c8:a6:3b:
                    09:f1:c0:d6:8e:80:de:2b:3d:81:cd:24:d9:5f:d0:
                    a6:8b:f9:7e:29:0f:c5:32:87:ba:c5:da:81:06:46:
                    ec:07:af:80:e4:2c:e6:aa:9f:1e:67:24:3d:d2:37:
                    a2:ce:ca:d6:4e:3d:c1:21:e9:0c:a2:e4:30:f8:b0:
                    76:2b:e1:5e:6a:16:29:55:3b:9c:d6:a4:e4:45:f2:
                    fd:48:c1:3d:f5:c3:97:1f:0a:92:c1:93:af:d6:0b:
                    50:44:9f:fc:85:5c:e9:f5:06:37:70:0f:20:52:97:
                    26:3f:bb:e5:1d:0e:5e:bb:a2:8c:9f:90:4d:85:b6:
                    f4:75:8d:f3:5b:aa:7e:d5:77:b3:6b:88:95:63:d1:
                    c9:45:b7:5c:5f:2a:e8:17:9c:4e:9f:7f:e7:a1:c4:
                    ae:90:d2:20:ff:4f:2a:d5:ef:39:25:29:b3:29:16:
                    28:8d:e8:b1:cf:2b:4b:09:42:10:9d:e8:dc:c1:28:
                    ae:18:8f:06:f4:e0:45:e5:e5:a1:40:a1:86:5a:b6:
                    c3:a2:0a:1a:b2:0b:eb:9b:95:d5:14:5c:35:3a:6f:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2F:BC:5F:15:90:48:29:06:90:E3:F3:5A:6E:AD:5A:58:AA:E6:6B
            X509v3 Authority Key Identifier:
                keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:23:df:50:04:68:b1:a1:c9:c1:e1:f2:56:ee:8e:a3:92:b8:
         91:30:29:fc:93:4f:4f:79:69:70:30:b1:6a:73:5b:02:db:dd:
         a6:17:01:1c:f4:d1:58:75:cc:96:ce:c9:8c:78:bd:51:b7:1d:
         c0:be:d0:c9:a3:a7:55:3d:6a:93:67:18:af:83:ad:58:fe:77:
         69:54:97:c2:03:71:8a:3d:74:67:ff:9d:0a:39:97:cc:87:95:
         89:ae:05:a9:1c:f1:b5:eb:d0:df:56:51:f3:80:1f:44:28:51:
         c4:d5:cf:98:ed:e8:82:1f:96:4a:31:aa:14:59:05:fe:ea:d9:
         25:e9:c7:d1:d9:4f:c1:56:b7:10:5f:d4:c3:34:17:0a:db:1c:
         ef:bc:31:3e:2e:77:b9:89:e3:b3:46:a8:b0:6a:40:21:42:0d:
         f2:c5:51:2f:9a:28:9a:78:62:4d:e8:b0:26:cc:77:6d:81:fb:
         7b:2e:60:24:7f:47:fd:56:ae:cf:58:c8:04:f5:4e:fd:8e:69:
         dc:a4:30:12:e4:8b:9b:80:48:ec:e6:7f:a1:f4:ba:71:8a:dd:
         97:fc:cd:f2:1c:b1:03:b9:a4:e0:e8:a9:82:e5:36:b5:ba:6b:
         dc:42:03:45:b1:37:59:fc:16:6c:ef:dc:26:6e:23:9a:e5:e6:
         2f:d3:d5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:11 2026 by rpki-client