Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
File:                     FfXEJ7UOueKq98WswbIoljOrU1M.mft (raw, json)
Hash identifier:          +lBSHynDBDKZiyncFS5g6l4FDnLKdUSmxjGphXgI1I8=
Subject key identifier:   96:38:15:58:C4:40:CE:E9:6C:E7:96:A5:8D:44:1C:4A:B1:05:8E:42
Authority key identifier: 15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53
Certificate issuer:       /CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
Certificate serial:       019D27A8B0FD52F2E51F31211F8332D77230
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
Manifest number:          0174
Signing time:             Thu 26 Mar 2026 01:00:59 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:59 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:59 +0000
Files and hashes:         1: FfXEJ7UOueKq98WswbIoljOrU1M.crl (hash: OOWNmZhkHfhNVvwDCX+GOO3TqnwUnnpoBxVhqEQHLWs=)
                          2: QB6IjG25mOKNaxsVjuB38lmC2hs.roa (hash: R3eK+TP7VbOaPSIht9zdm6FFs2zJ4wqUGZxjbXUn4oM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:b0:fd:52:f2:e5:1f:31:21:1f:83:32:d7:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f5c427b50eb9e2aaf7c5acc1b2289633ab5353
        Validity
            Not Before: Mar 26 01:00:59 2026 GMT
            Not After : Mar 27 01:00:59 2026 GMT
        Subject: CN=96381558c440cee96ce796a58d441c4ab1058e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:dd:11:b9:e6:77:a9:af:83:d5:34:c3:a0:
                    c8:68:69:c3:0d:ac:21:3b:fd:85:3d:56:2d:de:8f:
                    7f:36:54:f7:3e:5c:c4:8c:cd:45:0e:1a:4b:b2:52:
                    e9:21:96:00:ee:84:32:56:90:04:4b:20:22:1e:25:
                    46:32:cb:ed:61:00:8d:cf:41:52:81:3e:e8:1e:cb:
                    74:27:df:98:54:b2:09:65:26:96:27:ff:ca:92:10:
                    7a:59:23:fa:21:ef:e5:77:e1:e4:64:19:b6:66:59:
                    e4:62:ed:66:db:9c:db:74:72:11:f1:76:b1:0c:e9:
                    fd:fd:9f:fb:30:97:e4:a3:01:9a:6c:15:3c:e5:7d:
                    67:5c:41:ea:da:41:47:51:5b:53:bf:b9:ea:cd:20:
                    a6:2e:9b:8b:85:d5:26:ef:02:95:6e:f4:a7:98:c3:
                    aa:1d:42:2a:49:61:1b:fb:e4:ab:71:e8:6b:32:63:
                    95:19:5f:09:5e:1f:a5:84:ae:1e:28:b4:e9:52:d1:
                    3c:ec:3d:f1:58:79:f8:00:eb:c8:42:84:de:7b:c8:
                    13:99:cc:16:19:73:7e:cf:45:84:7a:ec:29:35:25:
                    15:d6:22:01:d5:c5:2f:6f:ee:3e:f0:31:18:10:0e:
                    41:dc:59:e5:21:d5:bd:49:02:a7:ec:de:ac:97:95:
                    52:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:38:15:58:C4:40:CE:E9:6C:E7:96:A5:8D:44:1C:4A:B1:05:8E:42
            X509v3 Authority Key Identifier:
                keyid:15:F5:C4:27:B5:0E:B9:E2:AA:F7:C5:AC:C1:B2:28:96:33:AB:53:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfXEJ7UOueKq98WswbIoljOrU1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f2d5e1-c997-46c4-8e60-a5d234586d90/1/FfXEJ7UOueKq98WswbIoljOrU1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:11:5f:a7:0c:40:1c:68:72:54:04:02:ac:53:82:52:f6:
         80:90:1d:cf:5b:e3:06:8a:51:03:27:42:9b:9c:4d:9e:3e:35:
         53:54:98:1a:78:14:ba:b8:93:7b:48:7d:2b:89:ca:f0:d2:af:
         4f:24:c7:c6:58:d0:0d:9f:6f:d4:63:5e:36:34:09:45:21:d9:
         5f:a0:c7:27:99:aa:19:76:37:c0:f8:a3:ce:76:28:62:e3:37:
         15:c9:82:48:d9:d5:76:45:92:e2:b2:98:7e:41:dc:ed:66:82:
         46:74:83:f7:3c:1b:37:f2:79:86:64:75:4c:96:db:c7:f5:66:
         42:4a:39:6d:6c:97:e0:ac:f3:77:88:e4:7c:a1:b3:44:36:15:
         d8:c8:63:2b:81:48:ae:09:6b:e3:34:66:b3:7f:89:3e:43:70:
         8f:e9:0a:77:41:38:0e:64:2e:45:0b:bf:bd:56:6f:7c:51:43:
         64:c6:f6:30:11:a2:4f:2f:e0:45:f6:95:cc:4c:f0:29:58:f2:
         94:e6:da:05:2d:a8:a6:e9:0f:82:34:c8:17:f5:d1:d2:28:4b:
         15:1d:a0:84:8c:12:dd:cf:5b:f0:62:58:5f:81:8b:f8:89:12:
         f4:33:b6:f8:aa:36:76:0b:2a:96:47:7c:e1:81:30:74:46:c8:
         a3:39:e3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:29 2026 by rpki-client