Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File:                     FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier:          zIMP0x6NPs5mZekdLmlkbO8qGfNrU1qFelayKE6/cL0=
Subject key identifier:   C5:06:52:09:A2:E3:16:9F:D6:51:B0:6F:20:7F:82:89:61:F9:18:2F
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer:       /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial:       019D27A866DD9EE65ED6D9814FF9309C7BAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number:          1861
Signing time:             Thu 26 Mar 2026 01:00:40 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:40 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:40 +0000
Files and hashes:         1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: b5XJ7m9VsKNW969qleDcXVX9T9DBGTSN4+VEEsvrOms=)
                          2: gAwSKHbFYp1R0rXy4HL7BwP5ZEk.roa (hash: MyfIsufvzyrn5zaFEUf1MX96j9I2a+9VKXg9iJpm1hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:66:dd:9e:e6:5e:d6:d9:81:4f:f9:30:9c:7b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
        Validity
            Not Before: Mar 26 01:00:40 2026 GMT
            Not After : Mar 27 01:00:40 2026 GMT
        Subject: CN=c5065209a2e3169fd651b06f207f828961f9182f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:70:3b:27:45:e9:19:4c:2f:46:8c:80:f6:
                    ed:01:a0:29:ea:c5:dd:2f:9e:7d:27:f9:07:41:a5:
                    5c:40:d3:34:b7:62:3a:94:ad:c4:23:20:f5:90:51:
                    c4:92:7e:cc:04:cd:70:49:4c:e6:ff:5f:d6:93:d4:
                    b3:a3:55:37:30:0b:f8:aa:07:e5:0f:59:23:44:e4:
                    07:2f:7a:50:e6:29:cf:d5:8a:1a:bc:29:60:d2:a4:
                    ca:2d:79:89:4b:82:0d:e0:7d:35:a2:ed:30:9c:57:
                    e1:cc:56:05:9b:32:8b:17:e8:be:f1:d8:a5:0c:ae:
                    f4:cb:ab:c6:c2:de:13:67:e5:ae:2b:1a:d2:af:34:
                    0b:64:ee:9e:02:99:14:b7:6a:d8:db:8e:fc:87:b3:
                    8b:5d:c1:97:4e:3d:6c:57:7c:2e:93:86:ea:fe:d4:
                    64:85:24:bc:fe:a2:91:e1:8a:ee:1f:b3:e6:3a:f9:
                    46:41:f6:9b:50:b2:df:af:3b:c6:aa:3f:63:4e:93:
                    2e:05:65:82:15:3f:a7:dc:a0:7c:17:ff:e9:c8:34:
                    1b:50:6b:a3:18:af:19:de:21:bb:3e:11:d2:f9:23:
                    d6:d5:65:bc:0f:89:94:9c:7b:01:6b:71:25:5c:1b:
                    cf:d0:aa:0e:24:48:88:03:04:9a:10:7a:3d:1f:cb:
                    5d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:06:52:09:A2:E3:16:9F:D6:51:B0:6F:20:7F:82:89:61:F9:18:2F
            X509v3 Authority Key Identifier:
                keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:a7:1d:5b:10:e8:7f:0e:83:94:00:51:cf:43:02:20:a7:
         9b:22:9b:2d:11:15:5b:e6:a1:e3:30:ca:92:bd:87:56:ea:4a:
         db:25:48:ba:a6:9a:73:f3:99:bf:fe:47:01:20:1a:94:ca:fc:
         47:8d:6c:7d:21:6c:66:9c:18:a1:a0:20:47:9f:c8:69:0a:d1:
         a6:ec:aa:8e:f7:8b:53:11:6f:7f:41:96:50:dd:66:f2:e8:6d:
         cf:a5:aa:41:9d:77:80:e0:92:92:f7:a4:c1:6b:e5:2a:cd:05:
         24:d7:b3:59:f2:ba:59:aa:91:81:81:19:b8:e1:e6:17:4b:1f:
         02:02:ee:d6:8f:8a:aa:e9:0e:a6:5c:cd:6b:3d:97:de:56:49:
         ec:bc:1f:2c:90:55:64:4b:60:d8:b8:1b:1e:b2:04:dd:f3:b0:
         5a:83:de:f8:f0:aa:9a:4f:87:14:cf:90:3f:10:b4:34:4e:4f:
         6c:08:42:ca:7d:b4:7c:c2:9c:26:7a:e1:d9:2f:03:77:ac:fc:
         72:5d:d3:39:3b:dc:fc:82:aa:a1:97:e8:a9:59:ca:56:d1:08:
         8e:2e:6d:ed:ff:4c:34:a9:e1:4a:48:6d:c1:f8:4d:f9:b6:53:
         4d:27:44:00:52:ff:26:f0:1d:18:fc:07:25:24:0b:39:86:5f:
         a3:22:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:20 2026 by rpki-client