Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File:                     fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier:          8LWoSTiNFUVZi9qFvcRaP0BD/a3kO6XlT4Xf6gcKqn4=
Subject key identifier:   E6:C2:3F:C5:53:8A:2F:A7:63:FA:DF:54:AC:CA:C2:31:17:DC:9E:02
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer:       /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial:       019D265F2AEB7C1939DCB797D02EFE4021A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number:          0319
Signing time:             Wed 25 Mar 2026 19:01:04 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:04 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:04 +0000
Files and hashes:         1: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (hash: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY=)
                          2: FEiTqIT1cqpRLflYOI_79JGhaks.roa (hash: ifbVEX7UepiZjjPVlo2crki0TP+d7TO8G3eiigYipls=)
                          3: bmPTnK5_lSzi5g2t8KWQSdmusiw.roa (hash: c+FOKLLhi0euPzTQWelJXOJ3OAMbQ5k1sWXqQVEcYEM=)
                          4: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: vjDQq8oPXxrXFS1tMCpf7ywARdNO9HD9gS6y9w32Wjo=)
                          5: gi9g0aSf2SvzFyn6pfpT6e0_Qac.roa (hash: bbsVeB+tsruoiPL39i3dFZ2CIkCF+DrD7yxa7d4IlMo=)
                          6: sSVvxcSYRTp0FGIeli2mtsdVTX0.roa (hash: rlUYz6t+YHt8+3g0Ynm420BLuLNg1028VCSBJ1t+Ro4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:2a:eb:7c:19:39:dc:b7:97:d0:2e:fe:40:21:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
        Validity
            Not Before: Mar 25 19:01:04 2026 GMT
            Not After : Mar 26 19:01:04 2026 GMT
        Subject: CN=e6c23fc5538a2fa763fadf54accac23117dc9e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:f5:bc:f2:90:7b:64:d9:fc:4f:93:0b:2b:
                    0c:a7:ab:eb:d2:9f:06:cb:54:08:2d:b0:f8:d5:fd:
                    10:9f:1e:51:7f:67:b1:61:7a:17:97:49:cf:12:32:
                    0e:0a:38:8c:a5:e2:be:0e:e1:0b:73:9f:0c:c6:ae:
                    02:5d:47:76:1a:29:10:48:3f:d1:c2:9b:ad:f9:42:
                    b9:f0:cf:cf:90:a1:ca:0d:a9:dd:8d:38:26:e7:b5:
                    b2:b9:b5:71:0a:c3:33:12:f8:9a:b9:57:70:43:31:
                    71:6d:70:7d:48:0c:e7:62:e1:6d:05:53:9f:fc:2f:
                    11:da:ee:da:ea:c2:78:2a:25:ca:34:75:2b:31:eb:
                    0f:b7:e7:15:2d:a8:24:ce:f4:c3:47:04:1a:2b:c6:
                    24:c6:eb:29:ee:29:c6:28:91:58:12:1e:7d:86:7b:
                    ba:dd:41:4a:f7:42:f0:37:5f:e9:bd:62:59:fd:b5:
                    16:a7:aa:10:ec:a5:fd:6d:6f:9b:c3:b6:4b:5d:44:
                    21:ff:27:d5:8e:c2:b3:89:03:93:ea:52:89:c8:21:
                    bb:7b:15:c7:a7:08:e7:d5:84:fb:ce:a6:ff:85:b5:
                    0a:eb:9e:d6:1f:5c:85:e1:3f:f4:c0:4b:28:1c:55:
                    eb:d1:aa:71:33:3f:5d:de:fc:52:82:1b:96:06:f3:
                    6f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C2:3F:C5:53:8A:2F:A7:63:FA:DF:54:AC:CA:C2:31:17:DC:9E:02
            X509v3 Authority Key Identifier:
                keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ca:4d:c7:64:e0:87:19:8f:f4:8c:53:65:3a:48:49:c2:c7:
         da:74:46:0e:4b:eb:54:a0:3e:27:42:fb:e1:4f:51:75:32:82:
         1a:a2:94:db:ae:6e:26:a1:d3:8e:e9:37:6e:7b:19:8b:16:2a:
         b0:52:51:82:1f:7c:36:ef:71:6f:67:37:fd:d9:34:b5:6a:de:
         ae:ea:ff:55:e1:d4:6e:36:e0:6b:2d:fb:29:65:47:74:d3:b8:
         4a:08:3a:e9:12:a5:65:61:bf:e3:71:a4:5c:ee:9d:28:58:aa:
         78:4a:33:05:7e:d2:b2:f1:24:46:b4:6f:f5:e3:22:50:f7:d2:
         d8:f2:ed:6f:15:81:3b:fd:7f:3a:15:8c:c5:c0:82:49:ed:80:
         e7:64:dc:e7:f8:ec:0c:ef:d6:1b:1e:70:bf:96:ad:cf:b6:06:
         07:5b:24:4d:c6:ae:f0:03:3c:b1:16:ca:f0:89:f1:88:fd:77:
         92:22:d2:84:bd:c5:c7:bc:20:2a:f2:d0:93:c7:39:7c:58:3b:
         67:99:5b:ab:74:1d:9d:00:a3:ca:13:c3:10:f1:7f:8a:31:3a:
         73:55:1a:8e:eb:b1:8b:d6:ea:a2:78:c8:82:4b:f8:38:7f:7a:
         34:b5:60:6b:cd:24:80:9a:e4:5b:cc:7a:a8:90:88:2e:23:84:
         1c:59:61:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:21 2026 by rpki-client