Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
File:                     _FlUn23SuDFEuIDCPwb7o7JdOYY.mft (raw, json)
Hash identifier:          pc6hsXFCBOgd7uUL3PHKvI0+vRpqYCgFF0xS5kpV3Sc=
Subject key identifier:   27:25:9C:98:15:4A:BB:47:C2:AB:88:F6:92:6D:CE:7D:66:89:7B:7A
Authority key identifier: FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86
Certificate issuer:       /CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
Certificate serial:       019D2C2AA93644FA895CE19825FAAA49A3E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
Manifest number:          1283
Signing time:             Thu 26 Mar 2026 22:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 22:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 22:01:26 +0000
Files and hashes:         1: _FlUn23SuDFEuIDCPwb7o7JdOYY.crl (hash: p9JwdRmEsCMzPwLFaK/zKrzyfXZTVBvtMeBDYT3PZYg=)
                          2: o_T_HTHs0KSiz-VeTzvUEtH700c.roa (hash: j5lWUOt2iKu1wnonlrAU9TS/DtJ/+Bc/VySYwnhPo7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:2a:a9:36:44:fa:89:5c:e1:98:25:fa:aa:49:a3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc59549f6dd2b83144b880c23f06fba3b25d3986
        Validity
            Not Before: Mar 26 22:01:26 2026 GMT
            Not After : Mar 27 22:01:26 2026 GMT
        Subject: CN=27259c98154abb47c2ab88f6926dce7d66897b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:f7:40:21:69:e5:09:9c:1f:d1:4c:b1:b1:
                    4b:b0:38:a3:19:ef:e6:92:ef:24:ce:ed:59:a6:33:
                    22:b1:5e:28:49:6a:1b:5e:52:4d:4d:3c:40:d4:0a:
                    e9:a9:23:76:a7:79:48:af:f9:be:8e:3b:2b:0f:cd:
                    2f:cb:f0:92:9e:4e:9c:19:2b:cc:8f:2b:aa:ab:56:
                    df:10:ec:14:db:e6:74:6c:85:2b:f3:00:66:23:b8:
                    44:f4:1d:2c:e4:e2:eb:1f:0a:61:c7:66:9c:ca:02:
                    f4:68:db:1c:3b:2a:8c:05:0f:da:6b:79:85:03:80:
                    4f:a0:1b:ee:67:e0:5f:37:4f:01:cf:bd:db:77:fd:
                    8a:a1:31:0b:38:f2:b0:93:d0:b5:a4:4b:62:a9:7d:
                    4e:1f:3c:90:20:33:40:64:f8:fd:eb:9a:a3:c3:29:
                    cc:9e:ba:8e:3a:02:31:45:9b:85:b0:46:fb:49:8a:
                    03:6e:4f:df:d2:1b:5d:28:40:e1:ff:86:35:63:e8:
                    97:13:8f:1f:73:ce:84:04:41:dd:b0:58:cc:79:3f:
                    dc:e7:8d:59:19:3b:bd:14:94:58:70:85:6d:ef:ea:
                    38:c2:ad:09:07:c4:6d:00:bb:53:1a:2c:47:4f:ff:
                    38:45:88:8b:40:90:de:b1:91:85:88:55:0e:e6:0d:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:25:9C:98:15:4A:BB:47:C2:AB:88:F6:92:6D:CE:7D:66:89:7B:7A
            X509v3 Authority Key Identifier:
                keyid:FC:59:54:9F:6D:D2:B8:31:44:B8:80:C2:3F:06:FB:A3:B2:5D:39:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FlUn23SuDFEuIDCPwb7o7JdOYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/964035-381a-41b0-9fdd-f65d33a9926b/1/_FlUn23SuDFEuIDCPwb7o7JdOYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3f:29:4c:f8:bf:9d:fa:05:3d:d1:c5:26:50:2e:97:a0:c6:
         29:12:3e:8f:d9:a2:75:a6:25:a1:bc:4d:da:1a:9d:b1:13:8c:
         29:95:2c:80:bb:cf:27:47:a7:a1:8e:43:6b:29:79:73:ae:2a:
         d7:7f:91:19:0d:c9:5d:1e:2b:7a:31:29:07:02:16:9f:95:7f:
         48:c9:31:b0:a7:35:0b:82:2f:d9:af:d2:87:d0:7d:3c:97:1b:
         53:c1:a8:e3:be:03:9f:eb:20:3e:18:90:4b:69:11:43:d1:0f:
         c8:3c:27:f8:48:c8:62:8b:5c:c7:ce:9b:87:f9:8d:0f:35:f6:
         86:e5:60:f0:b2:28:82:86:e3:08:0f:86:85:75:e4:40:2c:06:
         80:0e:97:e3:c6:7d:11:47:ca:89:8b:c9:c3:8a:98:04:ba:ef:
         3d:05:5a:c6:1b:8a:4b:8e:fc:6d:e0:45:77:49:e6:98:d0:89:
         6e:d3:6e:6c:5d:05:7e:81:ae:b2:ba:38:c3:62:fc:b3:1b:00:
         09:68:60:cd:cd:86:e5:18:a0:86:6a:5d:a0:19:02:16:22:58:
         c6:32:86:8a:51:20:2f:05:e9:b9:f3:31:60:33:26:1c:06:e0:
         45:90:c9:5f:d9:8c:2c:43:dc:7f:b4:f7:ea:eb:45:ef:46:a0:
         b8:f9:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:08:28 2026 by rpki-client