Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File:                     FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier:          nietCDxgzuW0D2/be2hVwwP+FoEtvDFXYCoCiQEbpTg=
Subject key identifier:   F0:30:1C:5E:8D:05:1B:70:B6:90:EF:7E:E6:B2:CD:00:E6:1F:88:09
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer:       /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial:       019D27E065EA7DC133DFF345AAD517799702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number:          0A4C
Signing time:             Thu 26 Mar 2026 02:01:50 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:50 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:50 +0000
Files and hashes:         1: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: PoFWDUZJysKTgF0wF9+lAhRNuvmst+zLBAOBjOZep4s=)
                          2: cxAjEm62CMAOsVOQZcXd95P12ac.roa (hash: bNDKClgOgAIHrP/LgJgPvv3PiPcCnhX0Vjjf2lgZuNw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:65:ea:7d:c1:33:df:f3:45:aa:d5:17:79:97:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
        Validity
            Not Before: Mar 26 02:01:50 2026 GMT
            Not After : Mar 27 02:01:50 2026 GMT
        Subject: CN=f0301c5e8d051b70b690ef7ee6b2cd00e61f8809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a6:41:d6:e0:01:77:31:e2:94:dc:73:d7:68:
                    e3:83:c4:3f:0e:0d:5a:b2:8c:20:d3:27:79:38:52:
                    0d:88:f2:d5:dc:67:6b:10:d1:74:a5:c6:69:7e:0a:
                    26:2f:9d:a7:9d:25:65:e0:0d:07:ad:d6:7c:b4:a9:
                    9e:84:da:60:c0:20:d3:04:9d:76:83:64:45:52:65:
                    dc:f0:52:ab:d1:cf:ca:4c:ab:5c:41:81:4b:88:ce:
                    25:72:81:af:a6:f8:57:2e:63:b6:ed:ac:a3:25:f1:
                    4a:c8:78:f2:49:df:9a:65:d1:1d:40:c5:1d:9f:b1:
                    ab:c7:96:b1:c4:18:76:ea:a8:96:7c:99:8b:8d:a0:
                    3e:06:d7:41:f2:8f:78:aa:e3:b4:d8:18:85:19:69:
                    e1:1a:8f:05:52:f4:dd:b8:18:d6:80:4c:15:b4:d4:
                    7f:2d:1a:87:10:d6:57:b1:a1:4d:e0:64:82:66:91:
                    35:06:1e:36:23:56:3c:f4:85:20:e0:e6:b5:3a:ac:
                    b3:ff:97:e4:54:ef:6c:02:dd:03:6f:bb:32:8d:3f:
                    42:56:1a:f3:03:ad:28:c9:40:cb:d5:d1:39:bd:83:
                    12:78:15:54:83:d3:12:6d:76:0e:5e:4f:20:eb:81:
                    59:7a:c0:ab:a7:bc:83:57:27:5b:b8:b1:7a:d5:5e:
                    0d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:30:1C:5E:8D:05:1B:70:B6:90:EF:7E:E6:B2:CD:00:E6:1F:88:09
            X509v3 Authority Key Identifier:
                keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7c:f1:a3:db:96:5c:8d:db:98:4b:56:fc:63:e2:8b:6b:da:
         24:e5:0a:38:ad:97:72:1f:4b:ad:c7:47:df:62:3e:a6:4f:ba:
         7e:04:75:f2:aa:87:f4:aa:93:29:3e:2b:27:80:1c:89:d5:97:
         41:04:08:38:eb:aa:ab:a2:d2:2c:26:ec:b1:4f:55:10:36:21:
         1e:cb:d3:d2:7d:c2:fc:d7:7c:93:5e:f4:7d:21:00:56:b7:77:
         61:9b:f4:4b:ed:e3:0b:0c:41:f5:4c:aa:bc:27:9b:84:b9:d9:
         82:c5:f6:90:3f:84:cb:d0:79:67:eb:b0:7f:bc:15:16:dc:3e:
         37:72:e1:34:5d:5d:af:41:ba:98:4c:db:8c:7b:40:3b:02:15:
         49:65:e8:79:e0:ab:3f:0c:7a:49:5f:85:81:4e:b3:0b:c5:a5:
         30:26:43:3c:c5:b8:c9:cb:90:4f:65:15:e3:0c:25:e0:4b:8d:
         69:f0:66:b4:e1:67:79:9e:cd:84:64:aa:f4:e4:71:04:89:71:
         44:1a:d6:67:89:20:d9:ef:25:10:8d:87:fc:c3:f4:b2:59:47:
         25:80:5f:3e:ec:48:ed:30:6e:41:36:59:69:00:a8:83:5f:6b:
         a2:64:39:53:35:cd:af:ed:fc:b7:1d:bc:74:50:96:dc:f9:04:
         43:7b:c9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:19 2026 by rpki-client