Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File:                     fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier:          LdQzPHKa9VZQCk54M/hRS0+y4vTuVUcp0T+DXerhoHc=
Subject key identifier:   34:89:C0:97:FE:83:F9:84:D5:93:90:9A:10:5A:35:A6:68:7C:FC:2E
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer:       /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial:       019D330857670C4D43BBC477C96C2DF31DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number:          1750
Signing time:             Sat 28 Mar 2026 06:01:17 +0000
Manifest this update:     Sat 28 Mar 2026 06:01:17 +0000
Manifest next update:     Sun 29 Mar 2026 06:01:17 +0000
Files and hashes:         1: 0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa (hash: PjhLMPqDKMFvKvIdwwT6W9RFU/bl/Jjyt27qCybKXQU=)
                          2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: 4FMxAhJ4AIFaSHJz4zk84pDunlk4J5JG9BCHvfd1IqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:08:57:67:0c:4d:43:bb:c4:77:c9:6c:2d:f3:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
        Validity
            Not Before: Mar 28 06:01:17 2026 GMT
            Not After : Mar 29 06:01:17 2026 GMT
        Subject: CN=3489c097fe83f984d593909a105a35a6687cfc2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:d2:e0:f8:0d:92:14:86:70:92:88:e9:b8:
                    0e:ba:e7:42:e8:78:c9:f3:4c:ed:75:bf:00:0f:e3:
                    78:5f:03:59:3e:8e:43:08:f9:d4:63:8e:fd:db:ae:
                    84:48:5f:6b:88:cd:f8:23:89:e6:de:4a:06:3c:c8:
                    06:e1:a5:72:1d:4e:8a:54:f2:ea:29:27:a0:03:85:
                    7d:0f:37:da:4f:fb:7b:ca:53:15:dd:cc:90:d2:7d:
                    b4:95:ea:2b:0d:0d:1e:5f:6b:c9:96:df:3b:18:19:
                    94:7e:c9:df:bf:5b:36:12:e2:2a:71:92:90:c3:fc:
                    89:60:f2:90:39:80:81:b7:a6:88:d4:1e:77:11:d8:
                    f2:fa:b1:af:e1:5d:87:75:cd:6a:1c:43:53:f2:ee:
                    33:b4:c5:73:39:fe:36:69:a3:9d:1c:04:f3:61:64:
                    1c:0b:7b:c9:6c:80:56:98:07:a9:c9:19:50:fa:3d:
                    98:c2:47:56:5b:4e:8f:e5:64:e1:e5:1b:ff:2c:f6:
                    b4:9a:d8:10:98:ad:25:40:f0:4f:52:6a:9e:b3:65:
                    98:6f:45:2b:6f:38:d8:60:cb:24:d1:3c:1e:56:4b:
                    26:7c:b1:19:b3:53:79:73:2f:7b:8c:67:a4:0e:98:
                    2f:ce:10:9f:51:7c:14:ff:73:92:e6:e8:ee:93:99:
                    6c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:89:C0:97:FE:83:F9:84:D5:93:90:9A:10:5A:35:A6:68:7C:FC:2E
            X509v3 Authority Key Identifier:
                keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:94:93:02:f4:f3:fa:94:34:dc:b9:04:8f:a7:1a:27:e3:c3:
         1b:7c:2e:06:68:ed:b5:71:3e:c2:b7:bd:c4:ff:bc:bc:13:57:
         b0:6e:75:80:b0:d5:42:5f:27:bd:4d:38:b1:96:40:64:b3:a1:
         fb:5f:f6:36:0b:2a:e3:fc:54:9b:5a:81:58:33:ea:e3:85:e8:
         1a:d0:d8:88:d3:56:da:94:d9:a6:86:21:db:73:4f:33:33:30:
         19:50:a4:72:4d:d7:d5:5c:91:93:64:51:c4:e1:cd:9f:a7:3b:
         89:2a:eb:2b:b6:bf:11:ed:21:29:05:6b:42:37:07:b6:21:a3:
         5a:01:92:b0:ec:95:d3:5a:4c:a7:38:c5:1a:d0:5a:26:0d:17:
         92:02:29:81:ec:cb:9e:67:3d:91:dc:6a:74:06:e7:3d:3e:36:
         ed:33:1b:34:f8:42:28:7d:dd:c3:b3:14:f8:b9:84:d4:1c:75:
         0c:49:cf:af:b8:cd:aa:91:57:40:cf:64:1e:f2:c7:a6:9f:44:
         be:f8:98:c0:b3:8a:b3:54:e8:86:ec:3e:05:2d:47:59:e2:86:
         98:16:74:ed:9f:10:78:20:bb:4d:49:40:25:7c:45:b0:6b:e2:
         4a:b8:5e:6b:10:01:32:73:ce:25:e8:29:1c:21:27:cb:15:a8:
         52:7e:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:14 2026 by rpki-client