Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          +1f6YjpYJsVZQzjIL65SCqFOLuVI32eVm8lebwETI1A=
Subject key identifier:   44:B5:1B:84:8D:8D:C0:4F:72:ED:B6:00:D9:6F:F3:16:FF:6E:99:CD
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       019D28BBFA251BF144C0A32DF3D4602760DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1889
Signing time:             Thu 26 Mar 2026 06:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 06:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 06:01:40 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: 4vWgYK5yxK8zt/vh+N/MYZM8szb/qn8YvvvPR4MrrGk=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:fa:25:1b:f1:44:c0:a3:2d:f3:d4:60:27:60:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Mar 26 06:01:40 2026 GMT
            Not After : Mar 27 06:01:40 2026 GMT
        Subject: CN=44b51b848d8dc04f72edb600d96ff316ff6e99cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4f:85:72:45:e2:f7:b1:a5:3a:04:b1:25:1b:
                    24:f1:3b:04:fa:30:f3:52:85:c3:fc:1e:12:2e:cd:
                    cc:c7:31:67:62:18:fb:3f:cb:5b:ed:e1:95:34:1e:
                    97:7f:45:e8:11:01:ff:e1:d9:50:7d:8c:fb:7e:ff:
                    85:34:48:41:c7:b7:33:96:79:10:10:17:26:29:51:
                    e1:26:31:58:98:59:74:ca:01:e6:bd:fd:1c:c7:1b:
                    d8:97:26:d4:ce:41:03:7a:f6:ab:6d:a8:43:28:29:
                    0c:4d:d4:13:3a:ca:41:07:a7:c3:f3:91:7c:c4:c7:
                    5d:c5:5a:a8:52:8e:cb:15:68:0b:d1:ee:71:4c:f7:
                    3f:67:99:18:38:28:28:26:cf:73:9d:94:ee:7b:7f:
                    49:0f:c8:d3:eb:c5:5d:22:56:5c:76:8e:d8:b9:af:
                    f7:21:19:f7:8b:94:7f:b9:30:8f:33:ef:df:d0:c9:
                    7e:4b:fa:01:55:1d:f4:1c:a2:b3:e7:29:41:ea:fa:
                    43:9e:bf:64:aa:50:07:3b:85:e7:8a:25:71:49:40:
                    29:00:84:95:d4:41:7f:8b:ee:d9:e7:1c:15:4a:5a:
                    1c:f5:84:8b:d3:49:93:ec:64:3f:ab:93:89:a1:77:
                    c8:b6:61:73:29:4b:1a:49:a3:e0:4e:b1:61:77:0d:
                    40:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B5:1B:84:8D:8D:C0:4F:72:ED:B6:00:D9:6F:F3:16:FF:6E:99:CD
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:56:31:48:11:ea:6c:b7:13:83:7b:23:bf:81:90:f5:bf:2c:
         3e:4e:23:a8:9a:3b:95:d2:39:0e:c5:0e:e3:16:03:cf:a0:2d:
         eb:68:16:3b:32:d0:a0:4c:53:0c:58:35:80:fd:88:8d:50:7d:
         e3:a3:7f:f1:42:e0:87:97:ca:39:b6:11:5d:bf:f2:fa:d8:b8:
         dc:b5:f9:49:bd:d3:0c:3d:0c:2f:c6:fe:79:a8:76:39:2b:09:
         f9:86:3d:3d:35:39:56:18:a2:ea:39:4d:72:61:93:87:df:ea:
         52:77:cb:b2:c1:07:54:55:eb:cb:c8:e6:ad:91:28:92:d5:51:
         61:ab:1f:c1:73:d8:da:77:77:f2:50:48:ce:ed:76:59:5b:4f:
         54:3b:5b:7e:96:57:85:9a:ff:63:53:d6:4a:8e:19:0b:b8:d1:
         13:77:ec:d0:c8:38:17:9d:c1:4b:50:bb:70:8d:80:7f:74:91:
         6b:94:52:41:4d:df:28:72:6c:2e:c0:33:e8:92:e4:51:b5:90:
         d8:a7:ae:e6:be:8c:2b:8a:22:ef:73:80:04:ea:ba:05:64:8c:
         87:e7:5b:c3:8f:9f:90:bd:34:9f:24:de:41:25:0a:1c:d7:0a:
         91:56:a4:76:25:31:45:2c:b4:44:ac:9b:b5:07:c6:77:e0:56:
         eb:f4:63:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:23 2026 by rpki-client