Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
File:                     Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json)
Hash identifier:          hZgqNtkckhuLsZT/qrmsYwbWnylRx1FDcTmTw1Mdfyo=
Subject key identifier:   D0:92:EC:29:DD:B5:1E:C7:EF:70:57:A8:4D:C2:C3:4D:37:A1:88:39
Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F
Certificate issuer:       /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
Certificate serial:       019D26CD068FD512553255CCEA651E8DB37F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
Manifest number:          06E1
Signing time:             Wed 25 Mar 2026 21:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:03 +0000
Files and hashes:         1: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: ZlBUSZR8wKVi8hOsC1WWChsc8z46q7GY/Gk33WNv728=)
                          2: aBV45nCtW7muN7ru-bpxU44kM1s.roa (hash: /y1XWSIqCBMFz5YEZLL16VNYk0h7Lda5evGQctWGrH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:06:8f:d5:12:55:32:55:cc:ea:65:1e:8d:b3:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f
        Validity
            Not Before: Mar 25 21:01:03 2026 GMT
            Not After : Mar 26 21:01:03 2026 GMT
        Subject: CN=d092ec29ddb51ec7ef7057a84dc2c34d37a18839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:7d:68:5d:3b:19:10:75:0f:2f:8f:8a:9b:
                    8f:c9:5e:54:00:60:bd:77:16:57:c2:e5:5b:28:35:
                    e0:66:4d:38:34:f2:f3:eb:c2:04:8b:5b:d8:e1:d7:
                    70:8d:3f:11:cd:b1:33:01:e4:8d:62:a3:09:38:d3:
                    ff:49:59:a3:f2:01:cc:68:1d:87:1e:22:7a:78:5b:
                    e4:0a:b8:4f:38:da:33:33:f6:df:48:32:0e:92:9d:
                    a4:e1:8d:45:7a:2a:59:04:81:1d:a4:28:fd:4d:80:
                    30:09:f9:ce:e9:e4:77:85:c2:ba:15:77:96:0f:0a:
                    4d:ae:7e:0a:5c:86:32:b2:4b:9e:6c:53:2f:5e:95:
                    90:d6:fe:07:fb:85:03:e6:e7:fe:8d:2f:41:3b:69:
                    65:6c:ab:9b:40:82:2f:69:69:56:cb:b2:b0:d4:55:
                    70:b5:1c:8e:37:16:27:6a:19:9b:7e:20:b8:5f:9a:
                    ac:22:9d:00:0d:27:06:36:ba:e9:63:d2:68:d7:a7:
                    76:01:45:8c:72:cd:85:2f:63:76:f2:e2:44:06:93:
                    9d:d4:b8:a3:43:f1:7c:0a:14:2e:aa:0f:c1:a6:98:
                    5b:81:a8:49:3a:8b:97:64:a5:0e:85:3d:0e:f6:fa:
                    df:ab:c6:7d:b7:5e:65:9b:60:7c:9e:46:38:ff:5d:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:92:EC:29:DD:B5:1E:C7:EF:70:57:A8:4D:C2:C3:4D:37:A1:88:39
            X509v3 Authority Key Identifier:
                keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:43:50:25:fe:72:55:e2:a4:b1:9a:94:d6:75:b2:9f:0f:71:
         b7:91:ae:b5:a8:b9:5d:1f:cc:a5:18:06:ce:f7:9b:d6:14:dd:
         77:12:94:a2:d5:20:8d:9b:ae:9b:85:0d:ee:42:59:f1:1d:54:
         f9:08:8d:60:37:c7:1f:56:45:98:da:e7:66:84:00:c8:a1:28:
         06:85:aa:bc:b6:36:e7:ef:aa:8a:4d:b8:87:d6:50:0c:d6:39:
         5f:10:62:bf:e3:c1:65:e0:cb:1f:a5:82:29:9f:7b:21:fb:d8:
         dd:ec:50:d9:a0:d2:e4:39:6b:91:c7:1d:58:91:f7:4a:66:6a:
         7a:db:04:df:e3:63:79:90:6d:23:c4:f5:0f:09:be:d7:b3:66:
         a6:96:7e:50:9d:61:55:ea:c7:3a:a9:51:a8:e7:d3:1c:43:9f:
         d2:6b:5a:88:07:e4:c0:c1:4a:a7:de:1c:8c:c6:f1:97:6e:45:
         8a:bb:0c:65:b5:a9:4a:5a:fd:d6:1f:ae:43:af:eb:49:a6:41:
         93:c3:e3:c5:22:95:8a:e6:9a:64:e7:49:b7:0c:3a:82:63:3d:
         8a:49:3f:0c:52:2a:df:03:cf:4d:73:28:0e:ba:2b:a2:6d:1e:
         46:73:68:20:32:c5:56:c1:15:8b:73:4f:f0:eb:67:d0:d1:01:
         b3:cb:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:01 2026 by rpki-client