Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          mKmG5M1iKvKHmvKoJmVrSLw9Nf8xVD57rMNJctDhk4A=
Subject key identifier:   ED:86:06:B3:53:1B:0C:7A:D1:80:D1:2B:81:88:AB:16:D0:8C:4F:B3
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       019D284E4CD2FD607BB328570C03F589231A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 04:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:53 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:53 +0000
Files and hashes:         1: LWui8AzaPFASP_4ivNyGkEz1ysQ.roa (hash: lMC5CJ6/t2xSIhms0GWqMAwmNRtMrmrsLXuQBgs3rpY=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: yX/Lfsl7QD35Y9oQfvpmGwcNlTa4YtZHx/MlgYCkN1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:4c:d2:fd:60:7b:b3:28:57:0c:03:f5:89:23:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Mar 26 04:01:53 2026 GMT
            Not After : Mar 27 04:01:53 2026 GMT
        Subject: CN=ed8606b3531b0c7ad180d12b8188ab16d08c4fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:74:45:5d:86:b2:be:bc:fb:a0:7e:ad:ad:
                    5d:0c:5f:07:33:8d:30:21:ec:58:ae:a1:69:36:4e:
                    1e:7b:0c:2d:4e:76:84:a5:1c:0f:a2:e6:65:92:ad:
                    07:49:16:72:8f:2b:f3:cf:80:84:c1:d7:84:92:8c:
                    87:df:05:5c:0d:7b:5a:7c:6f:56:46:e6:ef:c2:e9:
                    df:c8:81:d5:00:21:14:54:d7:9d:d4:0e:13:29:7a:
                    93:71:25:46:75:98:68:fe:e6:76:8d:72:30:64:9e:
                    6d:26:26:5f:34:8c:2b:ed:b5:72:4f:ef:55:54:8d:
                    b4:a4:46:18:ec:cf:c6:8f:30:db:2c:d3:51:32:95:
                    2d:cb:61:09:03:d1:68:d5:34:13:39:2c:b5:81:05:
                    7e:59:8a:cd:24:1c:5c:ed:ce:5f:e0:5a:a8:8d:ae:
                    8f:8a:63:7a:53:49:3c:99:b9:a9:6c:68:17:43:70:
                    e0:bd:97:a9:74:75:f9:2b:92:ad:ce:5f:6b:5e:f7:
                    f1:19:00:49:59:ea:4b:eb:4a:cd:eb:9a:5a:dd:b2:
                    8f:d1:fd:09:f9:c2:66:c1:5e:1e:02:4a:f9:dd:aa:
                    04:43:8c:a3:ca:38:29:b2:a7:49:f1:ae:8b:eb:c1:
                    e8:31:03:54:9b:1c:e5:56:c4:b2:7f:d9:c0:0a:e3:
                    6e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:06:B3:53:1B:0C:7A:D1:80:D1:2B:81:88:AB:16:D0:8C:4F:B3
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c2:39:99:8f:8d:5f:a0:72:ae:8e:d0:ae:c3:a6:c4:57:1d:
         5d:fb:ed:a6:30:e5:32:75:4f:d0:32:78:ba:c3:28:c3:63:a2:
         c8:05:0f:13:39:58:b6:da:9b:7e:6a:cb:8d:f6:b4:68:2d:73:
         9e:c9:7c:5a:d9:f2:a0:b7:f2:31:5b:cc:b5:34:4f:e7:a1:67:
         4a:a1:a0:36:cd:d2:7b:5d:d3:a5:1a:75:0b:7b:cc:44:20:2e:
         96:01:f3:f3:b3:f0:70:cc:71:71:27:ae:81:d6:e3:ab:8b:60:
         7a:74:b5:7c:f2:c5:01:a3:09:15:8d:d3:e5:8a:29:3e:2a:a2:
         81:a0:51:33:88:2f:c6:52:65:aa:d4:a2:57:21:79:3e:0b:2f:
         40:8a:c1:8f:8a:d5:4b:af:07:e5:90:a0:63:b5:07:73:33:4b:
         05:76:95:42:74:90:31:59:a2:83:99:9e:4b:61:90:82:48:c2:
         82:cd:4e:5a:42:85:5b:5f:63:8b:11:89:3c:d5:f8:b7:f2:b2:
         09:6c:fa:37:16:8b:63:40:66:7b:55:9b:f3:0c:60:0f:2a:f6:
         9f:1e:0e:72:61:73:cc:6c:76:8a:e1:08:34:ec:81:6b:20:da:
         a3:6a:ee:70:4a:d9:04:95:d5:a1:43:b9:1d:3a:a0:06:36:07:
         e1:cb:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:59 2026 by rpki-client