Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
File:                     Fe_NafEwzkzLXCCxDAM6Vlph34U.mft (raw, json)
Hash identifier:          2Ks6DRhcrofh/WhiNlBfyyWdn97OnKM8PvXU97XSH2Y=
Subject key identifier:   37:A4:5F:CD:99:C2:94:4D:AC:AD:64:C7:8F:DB:3A:5A:C7:FE:73:15
Authority key identifier: 15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85
Certificate issuer:       /CN=15efcd69f130ce4ccb5c20b10c033a565a61df85
Certificate serial:       019D2AE07A647DBCD93102572CB6490C673B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
Manifest number:          3D
Signing time:             Thu 26 Mar 2026 16:00:47 +0000
Manifest this update:     Thu 26 Mar 2026 16:00:47 +0000
Manifest next update:     Fri 27 Mar 2026 16:00:47 +0000
Files and hashes:         1: 89jvJXnh1sGEP1l3k8ak_3r52QU.roa (hash: x9Fl/XRXMk/32nTJD0wvoKgIkMONRMEb7sPTQo8EEEc=)
                          2: Fe_NafEwzkzLXCCxDAM6Vlph34U.crl (hash: LZCeZ5zmp932vdgCMCy7axuB4v7/qMDh7+sbx6ZX0JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:e0:7a:64:7d:bc:d9:31:02:57:2c:b6:49:0c:67:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15efcd69f130ce4ccb5c20b10c033a565a61df85
        Validity
            Not Before: Mar 26 16:00:47 2026 GMT
            Not After : Mar 27 16:00:47 2026 GMT
        Subject: CN=37a45fcd99c2944dacad64c78fdb3a5ac7fe7315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:47:a0:fc:13:54:c1:8d:80:6f:64:e1:54:
                    0e:85:33:7c:94:9b:24:62:a5:32:34:f6:58:a1:1e:
                    1f:c9:2c:a7:30:c0:65:d5:12:06:38:c6:fc:19:c6:
                    48:2a:f1:a3:be:b0:0f:45:cc:e3:94:8a:79:fc:49:
                    35:03:20:90:b9:9f:b0:c3:38:fc:83:85:ec:dd:a4:
                    97:7c:9d:64:f6:d2:f7:9a:72:70:02:93:ff:cc:29:
                    33:32:78:14:a5:5a:e0:e1:8a:f6:df:e2:9a:6a:af:
                    6a:86:8d:95:55:23:10:14:1c:7c:73:08:34:61:73:
                    64:6b:13:54:ee:ed:6c:80:86:31:5a:e1:38:aa:77:
                    93:24:fb:d9:11:07:ae:9b:49:90:78:44:fb:05:40:
                    5f:b6:e9:44:0d:bf:2d:6a:2d:b7:ff:64:f0:d9:f2:
                    63:16:f3:b8:86:39:03:6f:27:a3:01:50:db:32:0d:
                    2e:12:3b:2c:8a:47:ea:36:17:7e:a8:9d:0a:77:6e:
                    23:93:90:f7:a4:48:d2:e9:d2:b0:b5:6c:2b:8d:91:
                    e0:07:2d:70:b0:f7:b0:65:1a:24:30:ca:b2:23:26:
                    f1:9c:5d:46:d7:8f:ca:39:56:c7:c5:98:f3:35:07:
                    ce:28:03:35:14:32:f8:2c:22:e1:73:9e:28:63:c6:
                    2d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:5F:CD:99:C2:94:4D:AC:AD:64:C7:8F:DB:3A:5A:C7:FE:73:15
            X509v3 Authority Key Identifier:
                keyid:15:EF:CD:69:F1:30:CE:4C:CB:5C:20:B1:0C:03:3A:56:5A:61:DF:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fe_NafEwzkzLXCCxDAM6Vlph34U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b39739-2705-4fab-af42-ae225ad6d699/1/Fe_NafEwzkzLXCCxDAM6Vlph34U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:eb:b3:54:9d:9d:b6:e4:6e:40:67:56:e7:bf:3e:00:5d:6b:
         b5:0d:67:c5:23:3e:21:f2:49:23:67:7d:d7:cb:71:76:39:db:
         8a:35:84:c0:a2:67:22:b1:d4:7a:a5:a2:dd:a5:11:de:3a:46:
         f4:cc:2a:5f:e4:1f:df:26:0e:25:d3:0f:db:a7:7b:63:87:24:
         83:67:b0:c2:c6:50:da:6f:b0:62:d3:a0:a9:00:35:af:cf:ce:
         aa:3b:97:e5:84:aa:29:c4:dc:a4:97:92:f3:7c:16:20:df:26:
         9a:66:d4:90:d1:24:4e:50:e0:5b:d4:34:1b:28:7c:4e:1c:4a:
         ad:cc:4c:26:35:54:18:04:25:7c:15:ac:99:ee:75:3b:22:fd:
         6f:8a:46:de:a1:7b:fc:06:39:25:6e:64:69:37:e6:1c:c3:55:
         58:85:c5:3d:90:a8:5b:ce:5e:9d:ed:2d:89:2a:df:26:ca:0f:
         22:45:00:62:96:ba:04:3a:7b:9c:cd:22:57:5a:c1:f1:b2:7a:
         a9:8a:07:bb:06:3d:b6:a3:da:56:30:6c:ad:2e:40:25:71:ea:
         3a:7c:44:84:64:3e:ab:2a:5a:3a:95:38:3b:19:35:3b:57:7c:
         1a:f5:de:ff:03:39:21:66:f0:2d:fa:d6:bc:c7:98:c1:46:2f:
         95:ab:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:38:42 2026 by rpki-client