Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
File:                     fTBF_EkdOfUucUWxAAs7hsN97UU.mft (raw, json)
Hash identifier:          qe4EWFJA4KrkPahyP30Rje1y/xuhBJEKBoz641/iS7U=
Subject key identifier:   8E:9F:13:86:67:97:21:0E:75:3B:E4:DC:8D:05:29:DB:4E:3B:B3:01
Authority key identifier: 7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45
Certificate issuer:       /CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
Certificate serial:       019D28BB59D200DA8DBB2E78B206001B7A15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
Manifest number:          1885
Signing time:             Thu 26 Mar 2026 06:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 06:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 06:00:59 +0000
Files and hashes:         1: 3crDSEyG7ySob_hijxcTMyYUys4.roa (hash: kLSowjdlSNlo/Kmz1F6vDoMD6uNefpXjhMVjlDyIcNM=)
                          2: fTBF_EkdOfUucUWxAAs7hsN97UU.crl (hash: aEyNMMKznMIR6BjiY7ZyCQDPSOFENXeCrkgFmRDyWss=)
                          3: rIn8nuXIe5ah0WrNMb3X6_abjqo.roa (hash: 204By/4s2fRNwF4+6Yhppe1fwGO2Tcsoo2WrNB73Sr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:bb:59:d2:00:da:8d:bb:2e:78:b2:06:00:1b:7a:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d3045fc491d39f52e7145b1000b3b86c37ded45
        Validity
            Not Before: Mar 26 06:00:59 2026 GMT
            Not After : Mar 27 06:00:59 2026 GMT
        Subject: CN=8e9f13866797210e753be4dc8d0529db4e3bb301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:25:fc:9b:e1:34:d8:08:62:b0:25:07:dd:
                    5f:9c:b8:33:79:07:13:bf:50:23:59:ff:3a:3f:24:
                    1b:1a:27:76:63:5a:77:87:5b:8c:c1:74:fe:a1:0d:
                    e7:2e:08:ea:27:4e:91:bf:74:8d:aa:20:de:87:8c:
                    f9:53:62:33:c6:d2:4f:4d:0a:66:5c:cb:bc:21:c9:
                    85:94:63:3f:25:bd:da:b7:e1:cd:fd:8d:92:2c:72:
                    f0:66:a2:09:4e:c5:13:0d:85:c3:e9:1b:c6:f3:17:
                    64:6c:88:92:ed:d3:7f:e3:d6:06:1b:65:3c:81:98:
                    be:7f:ce:7f:d3:72:89:f6:d2:1a:78:54:1b:6e:3a:
                    cf:b8:e8:9e:fe:84:a5:bb:98:b6:e6:d7:7b:54:4f:
                    c2:db:12:df:24:f2:5c:da:b2:27:6d:76:1f:dc:bb:
                    64:39:9b:84:d2:56:d5:59:26:c2:f5:e6:38:39:ef:
                    ac:1b:02:4c:8c:39:1f:f5:00:e1:37:36:d2:8e:84:
                    d9:55:f3:33:80:93:2e:cf:d2:b4:74:0c:06:ab:e1:
                    69:43:a6:c3:e3:7f:cf:7a:78:3c:a2:cb:9c:8d:80:
                    85:b5:4a:04:30:75:14:87:a0:ab:d2:0b:c6:12:5d:
                    bb:35:1f:1a:25:f0:9f:38:0d:41:5e:06:16:2c:3a:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9F:13:86:67:97:21:0E:75:3B:E4:DC:8D:05:29:DB:4E:3B:B3:01
            X509v3 Authority Key Identifier:
                keyid:7D:30:45:FC:49:1D:39:F5:2E:71:45:B1:00:0B:3B:86:C3:7D:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTBF_EkdOfUucUWxAAs7hsN97UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1f63db-c963-44bc-a039-8aaa6a90ff95/1/fTBF_EkdOfUucUWxAAs7hsN97UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:8b:a4:fe:34:7d:d5:3a:26:96:a0:15:16:01:ab:3f:d0:b5:
         dc:02:55:1d:15:38:13:7c:7c:4c:4c:43:ef:b5:e8:56:92:32:
         6f:94:ec:f4:46:12:b0:05:34:a8:9d:c8:bf:6a:b9:82:f8:dd:
         22:bf:22:8c:ff:ea:90:62:3f:43:9a:82:e5:7c:9c:32:d7:b0:
         c3:55:8b:84:9b:f6:ef:41:ff:7c:67:a4:ea:f7:bc:ba:80:5c:
         b7:44:c1:08:1a:c8:e8:4d:67:b1:92:5c:11:66:f3:ad:a2:5f:
         cf:31:2c:76:e7:0f:c2:18:46:98:4f:f5:7b:f9:a9:1a:2e:9b:
         30:ea:b5:62:a9:62:bb:62:c5:b9:20:fe:e5:49:4d:b7:9c:42:
         5d:9b:3a:3f:43:1e:e2:51:e5:f1:c4:3f:53:bc:f5:48:81:16:
         d7:39:b1:68:22:d1:19:4d:94:8f:72:dc:72:97:a0:56:13:49:
         e6:75:2a:39:55:92:ae:cb:2e:9c:47:13:37:f7:9d:43:44:9b:
         bc:d2:86:52:c0:16:90:c5:50:7c:f9:ae:fb:26:7e:e7:68:ca:
         a2:1d:23:82:30:91:17:3b:92:82:d8:57:c8:80:e9:9a:74:e2:
         ae:cf:53:62:c0:f5:a0:91:6a:b7:6c:8a:d7:8b:01:d0:a1:34:
         a2:3f:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:07 2026 by rpki-client