Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
File:                     F-s-AEUBmMitRev4PhMCGbk2Q6U.mft (raw, json)
Hash identifier:          bIyp9OBDky8o7dcyAOgKKDpti/V1D757Y4Gc6CM6LQo=
Subject key identifier:   C9:FB:C9:D0:54:9C:30:56:6E:1A:44:7B:0F:2C:C5:36:2E:34:6F:16
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Certificate issuer:       /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial:       019D265F005ADEB46F91338CC73D5C73CC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
Manifest number:          0D06
Signing time:             Wed 25 Mar 2026 19:00:53 +0000
Manifest this update:     Wed 25 Mar 2026 19:00:53 +0000
Manifest next update:     Thu 26 Mar 2026 19:00:53 +0000
Files and hashes:         1: F-s-AEUBmMitRev4PhMCGbk2Q6U.crl (hash: X9sPLrNYUEFiSrLQt9AcBJY1QEhsMrBNt+Gx6MeizQQ=)
                          2: GiUXlZf0zBfuYBBAMHy9_aajdyg.roa (hash: L1PeZQ+K2VXr/kDHBD4XOdsQ7Gs1xXT9UeTey1KljtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:00:5a:de:b4:6f:91:33:8c:c7:3d:5c:73:cc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
        Validity
            Not Before: Mar 25 19:00:53 2026 GMT
            Not After : Mar 26 19:00:53 2026 GMT
        Subject: CN=c9fbc9d0549c30566e1a447b0f2cc5362e346f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:c0:5b:de:ca:eb:5d:48:04:0d:1d:07:c3:
                    01:f4:2c:e7:94:1f:a7:59:0b:e9:f5:2b:55:40:37:
                    6e:22:93:90:db:fe:f1:b7:88:ff:d1:6b:ed:ba:e5:
                    04:dd:93:06:ff:36:4c:d9:a5:c0:93:53:1f:65:27:
                    1d:81:fa:3c:a5:68:a7:bc:0e:e2:03:0e:35:c6:26:
                    6c:52:e5:73:d4:e6:a1:6c:d8:26:18:29:e2:02:d1:
                    22:25:4b:b5:63:d6:1f:b3:93:30:96:35:10:71:81:
                    b8:a6:9c:af:bb:e3:93:71:e9:d0:ed:3f:48:71:fc:
                    dc:dc:7e:36:3b:7c:fe:d0:33:d3:2b:e0:62:ac:84:
                    66:e9:23:ec:c8:24:52:ba:4d:4f:38:6d:18:f8:52:
                    41:cd:0a:ba:d3:2f:4b:9a:05:fe:b6:4e:73:54:93:
                    04:3d:4a:f3:96:ba:f5:09:c6:9c:d7:59:97:20:f7:
                    17:74:98:ed:0d:42:39:ca:4e:15:12:e7:16:34:bd:
                    83:57:ad:59:34:c1:65:c3:ae:d7:b8:16:4d:e6:37:
                    72:d6:12:e6:a3:e0:3b:96:11:84:66:28:89:19:5e:
                    06:4a:b9:25:48:b7:af:0f:7c:17:90:44:8c:9f:96:
                    db:58:6c:26:b5:ff:0b:a7:85:fe:c6:59:43:98:28:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:FB:C9:D0:54:9C:30:56:6E:1A:44:7B:0F:2C:C5:36:2E:34:6F:16
            X509v3 Authority Key Identifier:
                keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:9d:24:c9:9c:c4:7d:b6:4e:da:ad:6e:e9:6a:9f:b6:28:35:
         1c:d1:00:90:8a:10:49:56:ba:5b:37:6b:3f:b5:6c:20:fe:a1:
         9f:ec:fd:79:d0:54:58:fa:56:85:f2:de:11:64:9d:c5:9d:cd:
         45:d5:d5:a2:f3:bf:a6:a7:e7:eb:9f:68:fc:6f:ce:e1:3f:b8:
         11:bf:c0:b0:f2:89:07:1f:77:b7:76:4a:56:ba:8d:f9:72:8a:
         69:9a:8e:4d:58:c9:2a:3f:88:0f:df:2a:71:6b:d2:3a:1b:6e:
         5d:d5:16:c5:30:ab:29:64:b5:eb:2b:c7:0b:de:59:8d:59:01:
         9a:28:1a:b1:00:65:5e:0a:fd:a5:2a:d9:58:5a:83:38:a4:04:
         b3:a3:12:70:fc:74:b0:fb:63:ae:c9:09:ef:e3:c4:cb:21:cd:
         11:f3:96:5e:83:f5:1a:ad:09:d9:77:75:fa:c0:19:f3:d6:88:
         5d:14:7c:4a:a1:c7:d3:89:c6:22:73:12:bf:f4:83:e5:0b:d0:
         40:0f:d2:e8:66:ff:da:fa:bf:d3:14:4c:6e:d1:8a:71:15:ad:
         50:c4:e9:a0:7a:83:38:b1:16:a6:83:36:53:36:9a:91:27:d6:
         33:2d:bc:b3:14:08:62:80:fb:85:3d:63:51:e5:7c:a5:d7:40:
         c5:cd:2d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:08 2026 by rpki-client