Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
File:                     98ci2uJwhooZg4p81JnVnCZ52JE.mft (raw, json)
Hash identifier:          VPuBBNP+O/qJbnjF+N1jgHb6LLNllMLBsnfobWq3TZM=
Subject key identifier:   FC:B6:90:94:E7:EB:F0:76:77:0F:FF:18:1A:4C:4F:ED:ED:6D:5C:77
Authority key identifier: F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91
Certificate issuer:       /CN=f7c722dae270868a19838a7cd499d59c2679d891
Certificate serial:       019D2695E15CA9C5658E046C579BDEAAED68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
Manifest number:          0774
Signing time:             Wed 25 Mar 2026 20:00:49 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:49 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:49 +0000
Files and hashes:         1: 6yx-hlX2k3FRL0OGcdbdnhCXDLc.roa (hash: hiif9D0W/a5cIuWmQF/v/caYp1mtbUtJIKKVOQpQZ+w=)
                          2: 98ci2uJwhooZg4p81JnVnCZ52JE.crl (hash: D71sStMxcntFwV0M1Cm8JVZHNb6IleDldVbnTE9FlBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:95:e1:5c:a9:c5:65:8e:04:6c:57:9b:de:aa:ed:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c722dae270868a19838a7cd499d59c2679d891
        Validity
            Not Before: Mar 25 20:00:49 2026 GMT
            Not After : Mar 26 20:00:49 2026 GMT
        Subject: CN=fcb69094e7ebf076770fff181a4c4feded6d5c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:41:84:52:83:ad:64:20:9b:69:4a:c2:2f:
                    39:b4:0a:15:66:d6:9b:1c:bd:e0:99:6a:66:9d:72:
                    60:73:ef:3b:e6:dc:d9:d0:41:c2:fd:a2:2b:8c:73:
                    a5:c7:4f:b9:fb:44:31:92:bb:5f:d2:bc:8b:e5:a6:
                    23:b0:60:cd:74:ef:1b:c1:24:c6:d2:90:da:71:00:
                    4e:98:ab:5e:99:ef:c3:b5:dd:3d:b5:16:80:21:41:
                    b1:11:84:0c:10:b9:b2:f8:b2:51:27:fe:5d:ec:65:
                    29:ed:a8:11:5f:de:43:0b:8f:d8:e7:81:ed:3b:11:
                    dd:07:84:0a:bf:8d:3a:77:37:b2:17:9b:79:1b:83:
                    e6:1b:bc:61:97:9b:54:5f:3d:6d:1a:2c:43:5c:f9:
                    18:ed:51:2e:b3:b7:7d:b4:66:70:1a:cd:c0:f1:78:
                    5d:fd:e8:7d:64:72:2e:46:d1:f9:85:79:95:34:d3:
                    ff:9a:a9:5a:14:9b:bf:35:a4:33:15:d4:a1:a1:93:
                    40:6d:27:8d:8c:7a:ff:b0:11:26:8c:4a:f7:f6:52:
                    fb:42:06:e8:c1:88:2c:3e:ae:33:0b:1b:de:4f:64:
                    ce:e5:8e:fa:50:37:7e:92:db:d1:d8:61:e4:fc:c6:
                    bb:c0:16:ae:e8:92:eb:2a:19:1f:f6:d0:ce:88:e8:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B6:90:94:E7:EB:F0:76:77:0F:FF:18:1A:4C:4F:ED:ED:6D:5C:77
            X509v3 Authority Key Identifier:
                keyid:F7:C7:22:DA:E2:70:86:8A:19:83:8A:7C:D4:99:D5:9C:26:79:D8:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98ci2uJwhooZg4p81JnVnCZ52JE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/50e0f1-4614-4358-937a-2ede6727e139/1/98ci2uJwhooZg4p81JnVnCZ52JE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:26:bf:e3:d9:ae:ed:25:f9:af:c7:62:73:14:3b:0b:ed:aa:
         bb:a3:85:05:48:ac:6f:0c:12:9b:a0:1b:34:4b:f9:5f:db:e3:
         ce:94:74:47:c4:25:5f:b2:24:53:e8:7b:58:f0:5a:13:dc:78:
         b9:f9:e9:fc:81:f1:4b:27:f7:5e:26:60:5c:47:92:ce:3f:6f:
         21:29:c0:b5:41:de:55:19:b1:f7:a6:a3:ad:97:bf:17:66:a0:
         01:d1:6e:74:4d:ce:e9:c6:e6:d6:68:eb:33:8e:42:f3:16:1a:
         f6:ff:96:e5:ef:ff:38:db:58:6c:e2:ec:60:4b:7f:e6:6d:fe:
         4b:bb:0d:c7:4d:fa:5b:80:e1:6c:2b:5c:da:76:a3:a5:01:de:
         79:b0:8d:9f:6b:95:69:77:c8:6f:f6:34:85:f0:f0:07:6c:64:
         73:d1:10:d8:fe:92:aa:c1:b7:fe:56:ec:7f:e0:93:ae:84:e8:
         83:7f:38:d0:03:7f:19:f7:dc:d0:76:22:46:4e:00:5e:4e:41:
         56:4a:51:b1:5c:62:b5:96:a8:fe:55:35:d7:51:64:29:7a:2f:
         06:ec:bc:44:8c:db:e5:fc:4c:ab:f0:78:54:72:8c:2f:3b:5b:
         c5:0e:da:c5:64:d9:9e:d4:e0:c9:89:c6:28:18:c7:ce:e6:e9:
         59:08:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:11 2026 by rpki-client