Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File:                     ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier:          0eg3PVCxoqJcnIW2nzEuLuuYK38+IhyyvUUeny3X8Oc=
Subject key identifier:   C1:FA:DE:2F:86:1D:8F:FF:95:08:2D:E5:4B:9E:66:46:2E:C7:E9:1E
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer:       /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial:       019D25F16A2575C310A3654179F91095B8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 17:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:11 +0000
Files and hashes:         1: LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa (hash: nyHkLsfhGAO1IMHGjtbS9IePSmtztG5W8H1g0UXxIt0=)
                          2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: bmIa1QwTz82L1nS3G6VWVItbxlD8fbcnDlyP1yaUohc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:6a:25:75:c3:10:a3:65:41:79:f9:10:95:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
        Validity
            Not Before: Mar 25 17:01:11 2026 GMT
            Not After : Mar 26 17:01:11 2026 GMT
        Subject: CN=c1fade2f861d8fff95082de54b9e66462ec7e91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a1:2f:02:d1:e1:45:a4:fd:8d:58:78:81:f9:
                    05:98:a2:15:35:83:6d:b7:33:a2:d8:5f:4e:e6:8f:
                    3d:51:0b:1d:cd:5c:2f:c5:32:dc:81:74:8d:08:c4:
                    2f:93:a4:ba:27:a5:93:30:f8:fa:47:fc:b6:a0:46:
                    8d:6c:aa:9d:49:9b:89:5f:c8:56:6c:9b:e9:ca:ab:
                    bf:bd:51:5c:9a:b3:39:74:c9:8e:1a:68:29:a6:de:
                    81:ea:b9:55:12:c7:e5:ad:37:06:1c:e4:93:ce:2e:
                    c1:90:2c:18:4a:ec:df:a3:53:7b:d9:d5:ac:3d:4a:
                    ed:fe:d2:b7:94:0d:1a:ad:dc:81:ff:74:2c:84:f2:
                    c7:31:ee:89:cc:ce:45:47:1f:ce:c0:6a:76:fe:dd:
                    6a:34:e5:de:11:e8:b9:11:29:6a:10:b9:61:51:61:
                    d1:ad:9f:ff:15:23:09:34:a1:23:37:7b:2b:04:72:
                    c6:a4:da:eb:fa:93:7a:42:94:e5:27:c7:ab:b3:c0:
                    05:3c:bf:3b:d3:76:62:98:ba:6f:95:6b:1e:a3:0c:
                    07:75:67:d1:4a:70:92:a8:6e:d9:e9:60:84:0f:e5:
                    26:46:34:62:17:11:2e:66:25:5e:ff:f3:88:ed:4a:
                    a8:21:a6:9d:e8:7d:b1:93:88:91:43:10:e1:d1:8e:
                    bb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FA:DE:2F:86:1D:8F:FF:95:08:2D:E5:4B:9E:66:46:2E:C7:E9:1E
            X509v3 Authority Key Identifier:
                keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:dd:4b:5c:52:90:16:32:54:74:0d:1f:75:b3:61:cb:e5:c9:
         0b:12:8a:d2:d3:b0:5f:84:66:36:f9:c3:83:63:c9:64:6b:d4:
         1a:04:1a:96:e4:02:f6:18:46:0c:4b:ac:35:cb:14:92:c9:9f:
         e1:8c:ed:b9:f8:de:6c:14:cc:6a:ce:48:fe:d8:22:df:3d:bf:
         41:f8:11:b1:30:03:2b:33:0a:12:2b:e9:65:17:90:3b:02:69:
         ca:31:28:4e:7d:54:43:b4:90:bd:16:18:a6:90:21:e4:10:af:
         85:27:7c:0c:d0:43:b6:03:c1:eb:9a:19:54:f1:04:f5:41:42:
         62:f4:b5:46:0a:47:aa:95:ec:fc:08:14:e4:cc:93:51:a0:a3:
         1e:a8:1a:fa:b9:40:1a:73:9b:1a:5d:b1:d8:0d:10:e7:dd:c6:
         8b:e9:19:b4:32:74:ea:c7:43:11:9f:b7:4f:ff:62:2c:60:bc:
         21:ee:7e:1b:c6:56:a9:42:01:00:e0:4f:69:71:30:96:56:75:
         11:1d:ec:aa:04:46:b4:ab:3d:24:a2:7a:56:7a:9c:0f:24:58:
         13:5b:96:b7:6d:48:df:8a:65:bc:ad:41:b1:d5:86:51:03:9a:
         6f:56:04:77:b0:28:75:43:90:a6:4d:69:5d:b9:a4:09:f2:28:
         85:52:40:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:23 2026 by rpki-client