Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
File:                     FrUekDbKbnVqAWPDh3ggzV_OEa4.mft (raw, json)
Hash identifier:          i/+8OcCi7+OW2McpGLELi+fNJOUNMdfjaRFmai/Z9zE=
Subject key identifier:   F4:C8:A5:1B:92:35:70:C9:B6:85:8E:92:4D:36:67:E3:22:A9:71:D6
Authority key identifier: 16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE
Certificate issuer:       /CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
Certificate serial:       019D269652FA9AD92628A1A605F0DC339B38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
Manifest number:          0F7B
Signing time:             Wed 25 Mar 2026 20:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:18 +0000
Files and hashes:         1: 8Ti8O8lVR1z6D8YFUZiTqMGP4jk.roa (hash: 5ViJvHucQBKZG/meXecoUTIz7C+9h3b9BWMnp7Pd6ck=)
                          2: FrUekDbKbnVqAWPDh3ggzV_OEa4.crl (hash: abnvK5oB4KJSSKwXcZVlYqfj6CGYE935KKd6MOvtdbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:52:fa:9a:d9:26:28:a1:a6:05:f0:dc:33:9b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b51e9036ca6e756a0163c3877820cd5fce11ae
        Validity
            Not Before: Mar 25 20:01:18 2026 GMT
            Not After : Mar 26 20:01:18 2026 GMT
        Subject: CN=f4c8a51b923570c9b6858e924d3667e322a971d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3d:67:13:a1:f6:3a:47:f0:6c:36:df:bd:70:
                    4f:b0:26:61:4a:62:c4:f8:73:a3:ca:9a:b7:dd:59:
                    1d:29:61:1b:95:44:f1:b5:bc:dd:b2:3e:56:7b:ff:
                    9b:55:ff:8e:0b:e9:d2:fd:66:8a:a5:26:9f:3b:f9:
                    40:df:c7:6b:62:84:f8:ab:90:a5:69:38:81:3f:61:
                    04:34:90:d1:12:25:00:e7:d6:49:43:bd:2c:7e:bf:
                    bf:0c:22:ba:6e:8d:29:16:cc:51:a5:96:a3:e5:81:
                    dd:ca:a2:fc:cd:f9:34:b5:22:dc:1d:59:dd:89:59:
                    79:4f:4c:e1:c1:f8:a1:11:4a:41:2b:23:ad:d1:86:
                    c4:a0:81:a3:cc:d0:2a:d0:eb:d0:b4:1b:f5:a3:a1:
                    5c:15:84:72:31:f0:37:41:74:7c:77:b2:e7:4f:fa:
                    c6:18:b5:8d:3b:a4:4c:b6:d1:0c:3b:ee:df:0c:7d:
                    dc:ad:e7:05:1f:bd:9b:d2:ce:5a:95:d5:17:90:c5:
                    19:c6:38:78:65:af:32:74:6a:ae:88:4d:49:8c:6a:
                    f3:39:2b:b3:f2:a9:1d:37:53:47:48:09:6f:29:84:
                    e9:0a:75:8e:b6:c5:65:b1:71:5f:25:0d:96:41:88:
                    43:bf:e0:f5:c1:89:59:45:5d:99:4c:ec:57:ce:68:
                    bc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:A5:1B:92:35:70:C9:B6:85:8E:92:4D:36:67:E3:22:A9:71:D6
            X509v3 Authority Key Identifier:
                keyid:16:B5:1E:90:36:CA:6E:75:6A:01:63:C3:87:78:20:CD:5F:CE:11:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrUekDbKbnVqAWPDh3ggzV_OEa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/941917-a688-42cd-a8c8-2ec4124dd409/1/FrUekDbKbnVqAWPDh3ggzV_OEa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7b:d3:0e:46:1f:06:b9:27:05:5e:75:42:68:4b:35:32:5a:
         74:9c:25:86:02:77:54:e9:ba:68:78:96:95:f5:55:35:f8:e8:
         d4:25:58:4a:f9:f9:9e:a2:95:26:ee:39:87:21:e3:54:29:b2:
         b9:b7:5b:50:1f:38:94:da:ac:19:c2:06:b6:0a:ef:ed:59:ad:
         30:dd:14:0b:42:33:4f:20:af:1f:9f:5a:c2:b2:12:c4:28:f4:
         30:e7:7d:91:c8:55:34:7d:d2:ee:fd:7e:51:60:59:9e:8b:2b:
         94:ad:45:01:81:e7:6a:a7:1a:7b:20:07:04:dd:30:14:7a:6d:
         90:16:e0:36:0e:b5:72:51:7a:91:73:65:4a:1b:59:87:85:d8:
         22:d8:8e:21:6f:57:2b:0c:a6:f5:a9:55:cd:d3:e2:ec:69:3e:
         c5:85:b0:cf:29:a9:cd:be:35:f5:32:03:df:be:d9:c0:09:66:
         b1:26:98:03:e8:eb:63:e0:00:d2:f8:a4:4f:cd:82:79:91:48:
         a4:16:af:50:a4:0c:5a:38:a5:39:13:89:f2:04:27:ce:93:96:
         ab:c5:73:d5:7a:0e:3f:ef:4f:d4:e7:9e:cb:09:b3:30:ac:2d:
         f1:1f:ba:75:6c:6e:28:08:9f:4e:78:f0:0f:24:1c:89:9d:77:
         d5:1f:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:26 2026 by rpki-client