Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
File:                     fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json)
Hash identifier:          M0mbmi5EF+faBEWjLFOQvpaRfYp32SRJPWfqjDUT4pw=
Subject key identifier:   51:B0:E9:68:61:26:27:3E:6F:6D:A9:19:7A:38:2A:92:7E:5A:38:70
Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75
Certificate issuer:       /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
Certificate serial:       019D28164AAF4BF37BACEB4B3318D8F6731C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
Manifest number:          0492
Signing time:             Thu 26 Mar 2026 03:00:42 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:42 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:42 +0000
Files and hashes:         1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: slfYFItyKkfE1SJodJtvp19PF8XXmdU9lPuJB0JQt68=)
                          2: s7AnIMBWFcao-dbPnG3NGpeppdE.roa (hash: uM0/Gb1QJj63m1aOHeWULTaWA/xK5/bpQpEosjfVypk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:4a:af:4b:f3:7b:ac:eb:4b:33:18:d8:f6:73:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75
        Validity
            Not Before: Mar 26 03:00:42 2026 GMT
            Not After : Mar 27 03:00:42 2026 GMT
        Subject: CN=51b0e9686126273e6f6da9197a382a927e5a3870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:65:cb:cc:96:67:74:c1:75:e2:85:a1:d5:
                    bc:91:d2:67:f8:6f:d4:b1:b2:c7:fc:b9:d5:25:b5:
                    c6:74:e8:8e:6a:66:05:2d:0e:ae:8f:f3:ed:fa:7f:
                    d1:f1:ee:6e:6d:5b:e7:87:f7:e7:f5:1b:8e:a5:1a:
                    28:a1:f8:20:2e:d5:7d:23:06:1f:34:82:0c:86:eb:
                    46:b2:5c:8b:31:7d:70:c7:e4:80:a3:ac:32:7b:9c:
                    49:39:5b:6f:ca:5a:97:96:2e:0d:23:8c:6e:85:b2:
                    89:35:99:73:90:60:83:b6:8a:b1:a4:dd:03:99:9d:
                    51:1a:94:fa:05:f9:68:2d:14:f6:98:51:59:10:c1:
                    7d:70:94:b7:1b:35:46:dc:06:b8:e2:d4:73:f8:5e:
                    46:2e:2c:6c:eb:c4:13:1d:8d:f4:f5:b9:96:68:01:
                    9a:e0:af:e5:ee:1e:61:d6:22:78:0d:a6:35:e9:57:
                    5c:ff:35:26:3c:e3:62:a9:fb:f1:a1:07:7c:f7:3b:
                    12:6e:e9:af:cb:75:88:2e:91:28:73:86:27:11:4d:
                    04:7e:05:d0:89:97:23:ce:46:26:ad:8e:73:1d:92:
                    56:e6:a9:47:43:68:fc:89:03:0a:e6:b0:12:c8:a4:
                    47:d2:90:e3:d1:2f:c5:8a:b0:97:21:ef:8c:8e:49:
                    b1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B0:E9:68:61:26:27:3E:6F:6D:A9:19:7A:38:2A:92:7E:5A:38:70
            X509v3 Authority Key Identifier:
                keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9e:0a:9e:ff:47:86:b7:84:ca:56:de:d8:2a:e6:63:69:dd:
         35:9d:aa:69:f5:b7:20:c3:a3:88:d2:97:4b:44:fd:d9:2e:d2:
         5d:53:a1:69:cd:7e:71:85:92:45:33:42:fe:5e:48:2e:b9:e8:
         ec:63:74:49:20:0e:89:6f:a4:86:4a:ea:45:ab:65:4b:85:53:
         bd:1c:75:da:1b:ba:7e:9c:9a:e7:50:80:90:fb:bc:a2:48:f1:
         74:88:0e:24:b6:6c:5f:31:67:95:91:63:2c:f6:c5:b4:d7:76:
         9f:c1:08:3a:4d:ea:8d:a7:6c:9b:80:89:f1:f6:a7:09:64:58:
         86:92:f3:bc:42:39:a6:98:41:eb:79:7c:94:b4:03:48:3e:ff:
         7d:24:76:75:1a:83:d6:ee:3e:8e:2b:04:c8:29:d0:81:51:8c:
         7c:85:88:4e:de:e0:92:20:1e:d4:a7:5d:f3:52:db:2e:ea:cc:
         44:66:11:aa:c9:09:ab:b3:c2:7d:bb:26:03:1c:7c:b4:7e:d9:
         a5:2f:79:39:3e:cd:42:cc:c2:82:bc:17:a7:a1:8c:c6:d9:38:
         bb:91:4f:cf:a6:c6:51:68:51:59:e0:b3:c3:ea:fb:e5:ce:63:
         a1:51:02:e4:e6:ee:34:c4:26:1d:61:16:07:ca:59:e6:55:41:
         4e:d6:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:32 2026 by rpki-client