Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
File:                     1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft (raw, json)
Hash identifier:          wP2x1or3/eVuK+ggyjQHhohds89kQCduDf2gs1zUfu0=
Subject key identifier:   3B:A1:A2:F6:6B:16:A7:36:12:84:16:A4:89:73:51:06:92:99:0C:9E
Authority key identifier: FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA
Certificate issuer:       /CN=fadbe65b28ff25667409cce635be096e3e6defca
Certificate serial:       019D26CD68531B2B73AFD9300C03EC9BE169
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
Manifest number:          0913
Signing time:             Wed 25 Mar 2026 21:01:28 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:28 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:28 +0000
Files and hashes:         1: 1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl (hash: QloP4WtPZyVGw3reZP+l93EPCzOdlaVj6+YjjrelCrk=)
                          2: fLaxsW89f11aQKq9KNmjn6zptGA.roa (hash: HbgZ5Aywh4i4Y3ASONqgQY+RDwgBhWmFhWjC2EBV7i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:68:53:1b:2b:73:af:d9:30:0c:03:ec:9b:e1:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fadbe65b28ff25667409cce635be096e3e6defca
        Validity
            Not Before: Mar 25 21:01:28 2026 GMT
            Not After : Mar 26 21:01:28 2026 GMT
        Subject: CN=3ba1a2f66b16a736128416a48973510692990c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:fc:a8:79:bf:55:73:5a:6c:5d:ae:94:91:
                    ad:6c:b6:84:40:c6:4c:7e:66:8d:9d:88:1f:c4:e6:
                    f3:84:fd:a4:93:bd:b9:31:93:b7:dd:c9:75:89:93:
                    be:c0:a7:f0:59:48:b3:bc:39:e8:ce:67:c6:fe:a0:
                    b9:a1:11:ec:f6:2e:e9:ea:bb:70:e5:f3:b5:f8:47:
                    eb:40:28:80:92:f2:fe:ac:f2:54:c3:9c:bb:ac:e7:
                    56:ad:5d:89:e6:23:72:b4:6f:f2:77:c6:4c:34:cd:
                    38:5c:1b:d1:c4:12:12:6a:d7:03:5a:50:8d:d6:03:
                    21:05:ca:ad:ea:06:aa:24:47:63:ec:2a:94:ab:20:
                    94:78:98:fa:04:8e:8e:c9:7e:69:d1:87:68:85:3c:
                    67:91:f1:b2:da:a6:fa:b7:20:95:1d:48:90:f8:0f:
                    1c:5b:ba:8e:87:b0:3b:94:ee:8a:93:f6:5f:b8:b4:
                    82:c9:a9:ed:c8:eb:fd:d1:45:b0:e2:69:62:4a:c3:
                    5a:99:ea:eb:ae:6f:e9:43:d9:5e:b8:12:d5:ae:b3:
                    7c:00:f3:15:8b:ba:af:7f:bb:f9:74:c3:4d:36:0a:
                    42:29:2e:61:40:5d:8c:fe:70:f3:66:6f:4e:ca:bb:
                    ae:e4:c7:8f:2c:44:ac:0f:a0:cf:38:fd:da:77:6b:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:A2:F6:6B:16:A7:36:12:84:16:A4:89:73:51:06:92:99:0C:9E
            X509v3 Authority Key Identifier:
                keyid:FA:DB:E6:5B:28:FF:25:66:74:09:CC:E6:35:BE:09:6E:3E:6D:EF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48e976-3707-4685-a5f9-961b78d9d4bc/1/1-tvmWyj_JWZ0CczmNb4Jbj5t78o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:50:18:31:50:a7:47:cd:aa:c2:34:49:66:45:48:b1:f5:e8:
         57:93:2d:d7:72:7c:53:e5:bf:d8:37:2c:e6:47:76:ce:62:e7:
         7b:4d:f6:a3:8f:53:41:29:42:2c:cb:f4:10:11:cb:a9:a3:03:
         cc:7b:03:6b:69:21:60:85:9e:a9:10:74:39:db:ce:d4:95:a7:
         b7:07:39:36:6b:8f:7f:2b:73:f6:34:c1:fa:4c:2d:85:40:e4:
         c3:17:d0:58:fd:d3:e1:d8:a2:6d:a7:a4:2f:6e:dc:4d:e9:e3:
         6b:a7:21:c0:da:0a:16:73:88:19:13:7b:c9:0a:df:7f:c3:87:
         97:67:c5:a0:a5:fd:50:29:cd:81:96:72:89:f4:7e:95:bf:5b:
         c4:ab:95:48:aa:08:52:be:43:3f:38:d5:72:51:6d:ba:6d:00:
         33:cf:ca:f6:fc:6c:6c:66:02:b8:10:75:7c:cd:87:f5:dd:77:
         9c:a2:fd:76:8f:db:a8:2e:8f:d2:97:81:94:e5:41:bb:d3:4d:
         7a:3e:34:80:e5:e2:0b:e6:c6:a7:f8:60:7d:b3:12:65:81:62:
         cb:55:aa:13:7b:38:57:c4:a4:22:ad:63:e6:56:e3:ae:c0:99:
         fa:15:25:4b:49:a5:18:80:9a:7a:e5:cf:7d:63:72:e0:cb:c2:
         84:71:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:32 2026 by rpki-client