Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
File:                     87WowAlYJeE_Rr2zcLf9ypufilI.mft (raw, json)
Hash identifier:          SjfJ8sG3IPpTgMwVyvWHlZRlaaSNN2EyV96B+1378PA=
Subject key identifier:   FD:E1:06:E6:94:85:FC:2B:CE:89:89:F2:93:4D:51:3C:6C:F3:D9:C4
Authority key identifier: F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52
Certificate issuer:       /CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
Certificate serial:       019D2B4EC8EDB7CFEED529CB09DD50CE73DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
Manifest number:          03F5
Signing time:             Thu 26 Mar 2026 18:01:16 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:16 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:16 +0000
Files and hashes:         1: 3GSfCOp1qnomvR3CmYO9EsBhC7o.asa (hash: xfoU+Ips6oEaOKv6Fib2vuh0GAZn1Zkx/WZm05j9NRo=)
                          2: 87WowAlYJeE_Rr2zcLf9ypufilI.crl (hash: zx3XVJH6pUfWjfS1snowVFb6119k0gjm0JBfIfCDlWo=)
                          3: kvsR5vGqCUlad7hcwSexC9HOmQU.roa (hash: BQWcBL0pNsLmhZ/6jOKzXhoMqdBErbR1kzhV9E5bnP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:c8:ed:b7:cf:ee:d5:29:cb:09:dd:50:ce:73:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3b5a8c0095825e13f46bdb370b7fdca9b9f8a52
        Validity
            Not Before: Mar 26 18:01:16 2026 GMT
            Not After : Mar 27 18:01:16 2026 GMT
        Subject: CN=fde106e69485fc2bce8989f2934d513c6cf3d9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f2:4a:f6:4e:2d:f8:56:07:95:6d:12:b1:a9:
                    a9:fa:9a:97:9e:53:61:57:33:cc:35:3c:0a:0b:7a:
                    14:15:45:f8:20:c0:05:75:4a:20:da:ea:31:ff:db:
                    3c:bf:58:f5:cf:ce:9e:be:03:a9:5c:7c:57:a7:ac:
                    42:34:61:44:5f:5a:ef:80:cf:89:d2:97:7f:b9:a9:
                    a8:89:72:d3:9f:21:58:7b:aa:24:e3:31:e7:c9:15:
                    cd:a5:fe:56:e8:69:1c:04:e4:02:00:68:e7:8c:7a:
                    64:c9:31:e3:da:d5:ef:92:d8:97:f6:a6:b1:e8:df:
                    de:31:5c:4a:92:88:4b:1a:8f:ea:ad:c0:1d:71:49:
                    64:d2:8f:bf:68:44:9d:cc:b2:3b:29:ae:3b:f6:e1:
                    09:09:db:9f:1f:7c:e7:3a:ab:d2:9f:f4:a8:e1:19:
                    3d:da:81:69:61:26:54:ef:11:2e:05:d3:b4:d9:db:
                    1d:3e:3d:a6:f0:60:91:29:8a:48:16:74:f1:29:b7:
                    cc:4e:be:30:14:05:5c:0f:8f:08:9f:27:32:41:44:
                    56:0d:97:ff:d1:08:26:ef:b1:ab:04:86:c6:91:1e:
                    ae:9a:a5:2d:6a:db:39:20:0e:a4:68:4e:23:ec:6d:
                    42:f2:0d:76:3d:5f:6a:32:ad:7c:b0:0e:7c:4f:45:
                    f5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:06:E6:94:85:FC:2B:CE:89:89:F2:93:4D:51:3C:6C:F3:D9:C4
            X509v3 Authority Key Identifier:
                keyid:F3:B5:A8:C0:09:58:25:E1:3F:46:BD:B3:70:B7:FD:CA:9B:9F:8A:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87WowAlYJeE_Rr2zcLf9ypufilI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e2666e-69e1-437e-a021-2926bbc16796/1/87WowAlYJeE_Rr2zcLf9ypufilI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:22:0f:9e:87:f6:df:a5:83:7b:03:88:b2:54:4a:9d:96:f5:
         36:1f:12:39:82:4e:26:a5:c8:67:f2:09:cc:1c:23:04:86:47:
         f6:32:7c:05:44:22:07:34:7b:46:b5:39:0d:32:24:0a:38:a9:
         8a:99:00:67:e4:bf:c9:4a:86:50:f9:46:dc:a0:3e:7c:94:3e:
         db:65:e2:85:bb:6c:be:d0:69:45:d3:3f:0c:73:23:7b:44:16:
         e3:24:39:df:ac:6b:86:02:ea:f6:c7:50:c8:74:4e:1b:5d:05:
         e8:f7:db:ee:cb:dd:57:7d:6a:4b:2a:db:39:6a:63:31:be:ba:
         c4:47:02:2e:bf:de:ab:d6:3e:c3:d3:e8:dc:0b:52:6b:0f:7c:
         57:ee:b3:8d:a9:93:26:5c:f2:53:80:2d:ad:6c:2a:a4:7d:e7:
         16:71:6b:bd:b4:cc:97:99:22:56:f0:18:76:da:69:f7:ca:0a:
         f3:7d:b4:3e:7e:84:63:ba:a6:f7:37:91:c8:20:a1:89:2b:da:
         5a:57:20:5e:9b:5a:0c:b6:56:bc:1c:14:55:29:83:20:b9:19:
         98:f3:53:37:1d:2a:44:c3:c5:2d:62:5b:14:74:9e:74:80:4d:
         b9:ae:9f:11:da:ba:de:0d:08:09:56:7b:55:b2:c6:4c:ae:86:
         31:bd:98:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:42:35 2026 by rpki-client