Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          PJqeFwv3GdXc11mAxaVaxBAIO8D4EIrJxjGSmGL3oK8=
Subject key identifier:   81:3B:A8:3C:AA:2B:9F:3B:F3:91:B0:19:72:FC:66:5B:0B:2F:3B:D0
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       019D269637F5AB5E300E81C65687F7B6AC50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          056D
Signing time:             Wed 25 Mar 2026 20:01:11 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:11 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:11 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: ISm81RqgQ367MmECJ/GsNuaAUnSbPu1oozI9jk1dQeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:37:f5:ab:5e:30:0e:81:c6:56:87:f7:b6:ac:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Mar 25 20:01:11 2026 GMT
            Not After : Mar 26 20:01:11 2026 GMT
        Subject: CN=813ba83caa2b9f3bf391b01972fc665b0b2f3bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:99:56:92:38:2b:2a:ac:94:2f:ad:cc:6d:
                    8d:26:32:8a:91:bf:35:2c:70:44:90:fe:d5:ec:a0:
                    7c:13:95:34:1c:2f:93:7b:5f:08:39:48:54:d1:41:
                    85:a5:14:42:a5:75:f7:f3:7c:1d:04:9f:66:33:d8:
                    5a:a8:20:60:42:87:eb:59:67:48:b6:02:77:06:b1:
                    fd:ce:02:03:0a:c6:01:4e:69:b9:30:3e:c4:0e:0c:
                    e8:01:df:a5:4e:3b:4e:bd:77:86:47:3e:a6:c4:ff:
                    5c:7d:eb:3d:fa:bf:a6:f5:b8:0f:1b:91:ef:7e:11:
                    8d:ac:2b:52:6e:dd:c3:84:f7:ac:a9:d9:76:2f:87:
                    12:64:0b:11:60:93:61:44:d2:5f:46:81:00:c4:60:
                    df:f1:5e:2f:f6:f1:ba:91:e6:e0:7f:69:87:d3:b4:
                    11:61:d0:16:99:06:24:17:c6:2f:e6:07:3f:6e:84:
                    e9:b7:0a:52:5b:56:54:67:25:3b:87:a0:aa:28:ef:
                    6b:5f:e4:38:07:c3:d8:3e:66:1e:58:6b:4d:07:02:
                    41:d9:ea:2f:0f:29:e4:dc:df:ed:64:30:f2:84:de:
                    11:1c:8b:d3:89:69:5d:00:fc:23:a9:bc:3c:ec:02:
                    11:6e:bf:11:72:bf:bd:ca:95:93:2b:b8:82:53:32:
                    f9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3B:A8:3C:AA:2B:9F:3B:F3:91:B0:19:72:FC:66:5B:0B:2F:3B:D0
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:62:1a:5f:14:4a:1f:de:ce:9e:46:ad:9f:3a:18:72:c3:
         32:a9:7a:e3:66:08:e0:80:ce:83:e4:df:d6:f2:ac:07:0b:b4:
         b8:a0:33:50:12:1a:64:87:df:0d:f3:47:32:50:6b:c6:df:de:
         1d:88:8a:66:67:1a:21:1c:79:fe:35:06:58:07:18:37:e7:06:
         64:3e:41:da:5e:9f:aa:7c:89:e5:fc:07:64:12:83:0f:f5:dd:
         0a:39:76:a3:05:a6:07:b5:67:3b:47:cf:9c:9b:bf:5f:d5:d5:
         65:d8:36:07:9f:bf:df:2b:ad:67:2a:84:98:9d:2a:be:fa:00:
         3e:6c:c4:fa:67:2b:ff:49:97:20:db:6f:32:77:89:42:52:e4:
         45:16:81:0a:b4:24:1d:1a:fe:55:c6:6f:a2:fd:1c:4a:14:74:
         19:3b:bf:cc:b5:b1:14:bc:95:54:b4:de:a8:03:76:05:3c:0f:
         5a:c8:3f:66:c0:45:a3:4f:08:4e:11:e4:79:bc:b5:80:e9:a2:
         21:37:bd:8f:64:65:3f:37:fd:b6:40:bb:3d:6e:c9:a4:96:1a:
         c0:74:68:e2:4f:56:f1:1a:f9:39:78:8c:6c:dd:64:cb:86:c2:
         a7:80:e7:60:52:cd:92:19:aa:ad:28:f9:1b:65:50:2d:a2:6d:
         44:f8:e1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:03 2026 by rpki-client