Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File:                     fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier:          maf+cOEGS3EMDPMVao6MI/r7uyIl8lxy38Wri2Br/5Y=
Subject key identifier:   D1:9E:6D:7F:E6:A5:1D:A2:71:40:C5:5F:63:D3:28:28:9E:E4:06:30
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       019D284E1B8559B5AD5D00565F2717ECB268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number:          1894
Signing time:             Thu 26 Mar 2026 04:01:40 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:40 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:40 +0000
Files and hashes:         1: _mrDtR7UUkEZv2J_VBhDtzQIO1I.roa (hash: 82z4R+bFU5sQIWEOZT5D+4EYVzoIe1d3vFP95vZNL4M=)
                          2: fMbiFCTyTzMmg8AfN6taf_m942M.roa (hash: BdnizwfSmLNZb5SUcv7cbeGqrU/Jq6lZwV4GmbZ6TLU=)
                          3: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: QXoqC+00l9DEp33pv8Rq0DrdpecCXCOGkutMiUNiNsE=)
                          4: q-7Ws7q0jDYung0XnxU4hwFEoqw.roa (hash: kLEC8ykLDYdJM5qWo6Fc1YoTmSHEnK8bCiHZuP9btTQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:1b:85:59:b5:ad:5d:00:56:5f:27:17:ec:b2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Mar 26 04:01:40 2026 GMT
            Not After : Mar 27 04:01:40 2026 GMT
        Subject: CN=d19e6d7fe6a51da27140c55f63d328289ee40630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:dc:2e:79:71:0a:a9:c4:38:20:95:5c:57:
                    18:d8:23:e9:51:a7:20:c0:47:dd:84:96:fb:52:7c:
                    d7:bf:1d:8b:37:ec:c9:77:b8:2f:d3:38:72:9e:04:
                    a9:10:aa:99:4f:81:8b:b4:fe:07:69:6e:db:94:28:
                    e7:1f:ef:5b:70:48:d3:e9:b4:38:b2:aa:b9:0c:5d:
                    7d:81:23:56:0b:97:c1:dc:28:38:bc:5e:55:42:9d:
                    a3:ee:3a:76:dc:71:75:4f:1a:ba:e9:9c:d8:36:0f:
                    4d:81:15:0d:f6:c7:90:fa:98:f3:d0:48:16:98:21:
                    c1:ed:21:b6:64:0e:34:8f:9b:e9:c4:93:12:c1:4b:
                    e7:c4:60:a3:f5:20:1d:c0:8b:22:d0:77:64:b6:50:
                    40:bb:15:78:83:eb:c8:95:89:7e:ae:de:34:61:f5:
                    3b:0a:b1:0c:9d:9a:0f:c8:2a:25:6c:1d:d8:8a:3e:
                    c7:8f:d1:b1:11:7d:0f:e6:29:f6:01:9f:15:d4:50:
                    b0:6e:10:c4:39:53:82:72:9b:15:2d:71:42:0f:ae:
                    b8:1f:3a:3d:61:c3:e5:6e:9a:27:02:df:b2:31:32:
                    2d:3e:cf:75:c4:39:0e:cb:75:83:3d:43:d5:63:b6:
                    f9:6e:dd:e5:6d:51:e2:dc:4b:e6:ff:b2:63:25:17:
                    39:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9E:6D:7F:E6:A5:1D:A2:71:40:C5:5F:63:D3:28:28:9E:E4:06:30
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:bc:51:35:ae:7b:69:28:d6:a7:f9:53:a4:54:4a:8d:55:
         ce:3b:e8:01:83:da:91:5f:47:72:7c:1c:c9:c7:0b:c5:21:4e:
         7f:84:9e:82:bf:20:f4:65:5d:fe:49:33:9f:32:65:9d:09:e1:
         d3:14:f4:37:00:7c:7d:02:5f:fb:d3:66:61:3c:b4:cb:7b:88:
         c7:f8:7a:a7:6e:21:41:b4:d8:0f:52:27:e2:7c:7f:1e:dd:a0:
         df:d4:97:65:6d:2d:60:2f:e7:79:48:7f:09:af:5b:8a:40:2f:
         dd:8d:e3:a0:85:b5:db:63:e2:bc:e7:24:35:ee:59:b9:fd:2e:
         58:37:bc:8c:e5:fb:6e:01:73:57:8e:41:2d:ac:cf:63:bf:00:
         ea:a4:13:f8:35:78:e9:be:9b:cb:cb:f2:73:ce:57:3a:55:4e:
         c6:9e:f6:f3:55:5a:7b:5d:e0:fe:e0:87:d5:24:7b:db:21:62:
         23:a9:d9:6c:6a:e9:53:73:e0:bc:a9:1e:68:0a:69:aa:36:57:
         79:57:90:0a:b4:ea:02:05:7f:f6:eb:06:51:3a:33:78:40:3d:
         dd:26:28:d4:ab:a5:6d:6a:fa:50:11:66:69:fc:30:0e:ba:65:
         f8:7d:fc:5c:de:27:82:42:43:f3:6e:f7:da:e6:32:c3:30:57:
         b8:32:38:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThuFWbWtXQBWXycX7LJoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNDVhOWEwMzUzYTMzYzZhNGY5MzYwOGY5ZDI1ZjI3Yzg1
OTQ4YjcwHhcNMjYwMzI2MDQwMTQwWhcNMjYwMzI3MDQwMTQwWjAzMTEwLwYDVQQD
EyhkMTllNmQ3ZmU2YTUxZGEyNzE0MGM1NWY2M2QzMjgyODllZTQwNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8zcLnlxCqnEOCCVXFcY2CPpUacg
wEfdhJb7UnzXvx2LN+zJd7gv0zhyngSpEKqZT4GLtP4HaW7blCjnH+9bcEjT6bQ4
sqq5DF19gSNWC5fB3Cg4vF5VQp2j7jp23HF1Txq66ZzYNg9NgRUN9seQ+pjz0EgW
mCHB7SG2ZA40j5vpxJMSwUvnxGCj9SAdwIsi0HdktlBAuxV4g+vIlYl+rt40YfU7
CrEMnZoPyColbB3Yij7Hj9GxEX0P5in2AZ8V1FCwbhDEOVOCcpsVLXFCD664Hzo9
YcPlbponAt+yMTItPs91xDkOy3WDPUPVY7b5bt3lbVHi3Evm/7JjJRc5YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGebX/mpR2icUDFX2PTKCie5AYwMB8GA1UdIwQY
MBaAFH5FqaA1OjPGpPk2CPnSXyfIWUi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2Qt
MzdhNjBjMzM1YTVkLzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZDdiZWItNmY3OC00MTliLTk1N2QtMzdhNjBjMzM1YTVk
LzEvZmtXcG9EVTZNOGFrLVRZSS1kSmZKOGhaU0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS28UTWu
e2ko1qf5U6RUSo1VzjvoAYPakV9HcnwcyccLxSFOf4Segr8g9GVd/kkznzJlnQnh
0xT0NwB8fQJf+9NmYTy0y3uIx/h6p24hQbTYD1In4nx/Ht2g39SXZW0tYC/neUh/
Ca9bikAv3Y3joIW122PivOckNe5Zuf0uWDe8jOX7bgFzV45BLazPY78A6qQT+DV4
6b6by8vyc85XOlVOxp7281Vae13g/uCH1SR72yFiI6nZbGrpU3PgvKkeaAppqjZX
eVeQCrTqAgV/9usGUTozeEA93SYo1KulbWr6UBFmafwwDrpl+H38XN4ngkJD8273
2uYywzBXuDI4KA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:26 2026 by rpki-client