Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
File:                     FltW5Vtv77wg20rOb9dWxz10H5w.mft (raw, json)
Hash identifier:          KdeUxZjGAyzX6OU909V4becNAZB3q28ShbauWpydYDw=
Subject key identifier:   0F:92:0A:27:E2:5B:5C:02:91:43:47:66:DD:08:E4:A8:E3:91:6F:EB
Authority key identifier: 16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C
Certificate issuer:       /CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
Certificate serial:       019D2A727F33994CBC2BCBAF06272D3406E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
Manifest number:          05E2
Signing time:             Thu 26 Mar 2026 14:00:39 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:39 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:39 +0000
Files and hashes:         1: 1QUTqjVRf3WO2uBrVpxK_TeZJGI.roa (hash: CO13+mc4SGDYYeU1j9VlsVtCT9IIqX88ma+GQJWpzmE=)
                          2: FltW5Vtv77wg20rOb9dWxz10H5w.crl (hash: EV6iqCT1m7g4eO5HV7U/w9vG1dTbDAQDxjNyd8tRuNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:7f:33:99:4c:bc:2b:cb:af:06:27:2d:34:06:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165b56e55b6fefbc20db4ace6fd756c73d741f9c
        Validity
            Not Before: Mar 26 14:00:39 2026 GMT
            Not After : Mar 27 14:00:39 2026 GMT
        Subject: CN=0f920a27e25b5c0291434766dd08e4a8e3916feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:9e:1f:36:c0:d3:f5:86:d5:db:17:91:62:
                    19:47:a4:48:ae:60:4e:03:8f:5c:e1:89:cd:bf:3d:
                    12:e6:9e:79:ee:b0:fb:51:bf:31:c7:e3:8a:d1:e9:
                    e6:e5:07:3a:8e:9d:8e:88:52:32:cf:b8:cb:86:11:
                    bf:75:b5:5e:47:9e:ac:f2:c9:ce:ee:fb:d7:cb:bd:
                    30:b8:dd:ac:04:0e:71:ba:7b:15:74:1e:72:84:50:
                    c5:af:1f:1a:85:ac:99:2a:7e:7b:37:9e:ae:d8:b0:
                    23:b9:d7:bb:84:15:22:ae:f3:3e:03:56:42:5d:da:
                    04:0e:ca:bd:bc:21:dd:ef:4e:f2:0f:c8:8d:36:b1:
                    b6:90:42:d7:e4:d6:4d:ec:4c:7f:bf:f4:8e:16:68:
                    44:bd:67:30:15:de:78:c4:7c:d5:87:23:2e:94:fd:
                    77:a5:8e:81:66:74:0a:7b:a3:a0:4f:2c:48:29:45:
                    21:c4:aa:59:43:de:d0:c7:1c:b9:f7:0c:c1:9c:00:
                    aa:1f:86:b7:eb:ba:ef:84:21:cc:79:fd:e7:24:fd:
                    d7:b9:b7:23:56:d8:60:e6:6b:37:17:5f:60:f9:ba:
                    95:d9:9c:4c:f0:d3:28:e3:de:b2:16:cb:88:51:68:
                    6e:31:f5:c3:67:ce:25:84:7a:38:9d:90:6e:72:28:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:92:0A:27:E2:5B:5C:02:91:43:47:66:DD:08:E4:A8:E3:91:6F:EB
            X509v3 Authority Key Identifier:
                keyid:16:5B:56:E5:5B:6F:EF:BC:20:DB:4A:CE:6F:D7:56:C7:3D:74:1F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FltW5Vtv77wg20rOb9dWxz10H5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5f793d-97f9-4aba-9ba1-b5d13a0189a5/1/FltW5Vtv77wg20rOb9dWxz10H5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:90:dd:97:4e:a4:bc:10:b3:6f:cf:88:ae:99:18:07:ea:ac:
         5a:3f:52:83:a4:70:32:ab:e4:cc:0f:93:fb:dd:9e:9e:9d:12:
         28:6e:b9:73:55:15:77:70:ed:12:04:d4:60:4a:ef:1b:5b:07:
         7c:4c:a3:da:8a:71:45:bf:80:6b:06:b7:7b:11:c2:c9:32:4d:
         45:b6:66:f9:df:b6:3d:a2:73:a9:ac:43:19:f0:b9:a1:39:7c:
         73:59:ac:c4:b9:14:5e:53:54:1f:84:e2:8f:3e:b1:7a:3e:2f:
         30:4c:16:08:05:bf:34:85:28:3c:5e:f3:bd:c2:33:4a:bc:8d:
         20:12:d6:60:ad:f6:14:09:37:ef:03:3b:80:6a:c8:a5:45:71:
         a4:57:da:30:0f:d9:0d:00:fc:19:9c:5c:dd:9e:26:b2:0e:0c:
         cc:12:2a:21:70:b8:f0:cc:77:41:90:c4:ed:9e:59:b5:f6:86:
         cd:b4:a1:4f:48:0c:75:4d:ab:03:14:b4:3e:ba:16:7a:38:f2:
         e9:66:0c:f0:cf:32:a8:38:65:c5:2a:3c:32:60:1b:1c:46:be:
         8e:0e:9e:c3:fd:e1:a3:ed:fc:38:83:09:2a:dd:82:61:33:93:
         58:ec:90:b4:28:1f:7e:fd:7d:9a:5e:89:46:ea:b3:f9:ab:8a:
         de:ff:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:30 2026 by rpki-client