Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          i9yqObdeJtxjlbOwVjc4cb2Y4NTaUI6c/WyjmHZK+yQ=
Subject key identifier:   4D:02:9F:AC:F6:EB:56:B8:EA:80:5E:9F:BB:E5:F4:7B:7D:1E:8B:53
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       019D2704C7F33D352EA7B20DADD2FE0609CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          1881
Signing time:             Wed 25 Mar 2026 22:01:57 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:57 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:57 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: eB5DPcwju7sOtfjseBuKA/lb3VnCuqn/Mj6tyAmPPm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:c7:f3:3d:35:2e:a7:b2:0d:ad:d2:fe:06:09:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Mar 25 22:01:57 2026 GMT
            Not After : Mar 26 22:01:57 2026 GMT
        Subject: CN=4d029facf6eb56b8ea805e9fbbe5f47b7d1e8b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d0:b9:cd:93:9d:27:8a:b5:cb:0f:ec:b1:05:
                    8b:81:d9:dd:5e:84:85:93:72:37:2d:0c:3f:88:35:
                    44:32:4c:c9:fe:c4:d2:c3:40:0d:8e:35:59:11:07:
                    a7:14:88:dd:0b:f3:da:c4:af:fd:7b:0c:64:90:38:
                    dd:45:ce:09:2f:38:9b:6e:81:e6:fd:ec:55:ac:55:
                    4f:a4:b5:37:43:17:73:ca:6f:6e:30:6f:40:b9:b5:
                    1c:d5:3b:ab:f6:bb:a2:e8:04:72:9f:92:be:1b:1e:
                    d9:9b:ff:d4:b7:74:2f:fd:35:99:37:1d:a9:0e:85:
                    e7:c1:fa:4b:91:b4:a7:0f:8f:c0:a8:4e:4d:e9:88:
                    dd:64:36:a8:f6:82:c8:40:1d:95:f8:ed:89:f0:7a:
                    bb:c5:aa:ae:6a:57:60:b0:d5:c7:c2:cf:2d:8a:e4:
                    f1:40:0c:5e:55:88:3f:d1:a8:cb:18:bb:2a:00:2a:
                    60:5b:94:61:59:83:06:46:65:fd:f4:8f:31:1a:f0:
                    55:71:92:97:56:b5:9c:a8:7f:0b:50:e0:35:7c:c7:
                    29:25:19:dc:b8:e2:9f:a2:a8:74:20:cd:f0:ee:20:
                    99:54:5c:d7:96:f3:85:94:df:a3:bf:1e:a9:17:bd:
                    fe:89:1e:4a:7d:79:95:ff:f2:f7:e0:31:95:32:ae:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:02:9F:AC:F6:EB:56:B8:EA:80:5E:9F:BB:E5:F4:7B:7D:1E:8B:53
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:70:84:65:3b:cd:ea:32:eb:38:27:6d:6b:41:fd:63:ff:4e:
         3b:72:b2:be:4c:a1:2c:b4:25:cb:63:86:5f:18:f0:04:96:fc:
         88:65:dc:7d:2e:2a:25:6c:c4:ac:25:0d:8b:44:7d:89:ac:f8:
         de:f7:89:33:40:31:00:d5:bc:e7:73:ff:02:24:c3:1d:1b:2f:
         62:7e:a4:82:bb:a3:25:e4:df:3e:fe:58:dd:aa:6c:71:87:de:
         a6:b6:70:dc:0f:63:e1:02:91:b8:82:7a:cf:d1:71:15:3a:3a:
         e0:b5:4e:e1:bb:0f:9a:b9:bd:42:84:fb:67:7f:0f:aa:ee:30:
         94:ff:1c:4f:07:f4:35:4d:5f:2b:1c:85:e2:19:82:a1:7f:c2:
         5b:7b:92:69:b9:cc:cd:06:c3:ff:19:54:c3:d8:27:eb:9f:83:
         66:aa:29:7d:e2:a5:5d:2d:ae:0b:cb:0f:1e:1b:14:21:dc:98:
         bc:59:c3:22:11:7d:01:20:33:e1:a7:de:9a:ef:d3:6f:be:d2:
         dc:21:bc:6e:89:0b:80:46:ec:91:a2:57:83:e7:51:45:0b:08:
         05:fd:24:a9:e5:39:2c:1e:d4:25:2e:59:f7:9e:fe:30:04:7b:
         8b:b3:38:20:4e:ff:8c:d4:c9:8b:07:57:99:39:c2:c4:eb:2f:
         d7:70:34:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:16 2026 by rpki-client