Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File:                     dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier:          gZYzizhpsL6G6fRU2emc6LMc0Ce5d6bjHh+ZVJpWdf8=
Subject key identifier:   B8:47:6F:1C:5B:AF:A6:E5:F9:EB:77:29:13:0B:83:77:55:B5:B5:2E
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer:       /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial:       019D265FD64A3FA07AA36DA499877A5F8A22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number:          1885
Signing time:             Wed 25 Mar 2026 19:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:47 +0000
Files and hashes:         1: LCf-Tegx0fZiipUoAGLWioHn_mQ.roa (hash: gYRcDzeAFInSekOjnAJBC9uOYALnCXCAmTDWjzmnLrQ=)
                          2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: IYyaZmREXceNYShKREeJnNpNea9UBEDASCcnUtlQsYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:d6:4a:3f:a0:7a:a3:6d:a4:99:87:7a:5f:8a:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
        Validity
            Not Before: Mar 25 19:01:47 2026 GMT
            Not After : Mar 26 19:01:47 2026 GMT
        Subject: CN=b8476f1c5bafa6e5f9eb7729130b837755b5b52e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:de:ab:90:a0:07:8a:ce:51:4a:dd:8c:ea:89:
                    20:47:04:0d:e5:2e:33:91:8e:ed:a4:71:91:ba:df:
                    03:05:79:58:dd:4a:cf:60:8c:24:70:51:3b:55:00:
                    92:d3:58:ee:2f:fb:80:fa:94:fb:a3:e8:28:e7:19:
                    47:b2:c6:91:aa:30:de:5a:de:b5:98:4e:f8:3b:c4:
                    3a:64:b3:4a:d3:d9:4a:8a:08:a9:31:63:ff:c4:3b:
                    ca:43:52:83:84:34:e7:cd:43:7b:cd:7b:ff:ab:97:
                    a5:69:8e:85:a7:3a:54:65:e4:fd:31:09:40:68:7f:
                    7b:c9:89:8c:7e:51:78:b9:c5:72:d9:71:f7:65:e8:
                    04:ed:05:bd:d7:bb:36:34:8f:dd:04:4f:89:84:7e:
                    79:65:79:5f:19:db:50:90:3d:a0:b8:88:a0:6e:3a:
                    fd:8c:86:22:3a:05:03:18:8d:63:92:a5:56:33:a3:
                    4d:d5:b1:f2:5e:f0:27:88:eb:8f:49:c7:ce:be:12:
                    46:fa:85:c7:9f:0d:af:fa:45:68:18:8b:05:2b:80:
                    ad:7a:72:a4:3d:87:1f:05:d9:df:3b:fa:50:1e:81:
                    4f:26:76:91:44:36:68:05:42:33:47:8e:79:c2:b3:
                    fa:3a:56:fc:d4:c6:19:c1:31:61:34:8f:df:65:ae:
                    29:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:47:6F:1C:5B:AF:A6:E5:F9:EB:77:29:13:0B:83:77:55:B5:B5:2E
            X509v3 Authority Key Identifier:
                keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:d8:45:1d:06:a7:49:90:43:50:49:17:85:1c:7b:0e:ab:0a:
         21:93:3d:57:94:71:f5:b2:8a:bb:6d:c3:a7:89:8f:5a:ae:b5:
         19:f9:23:84:b7:0e:08:38:8f:b4:02:67:f1:84:d9:0d:e7:f7:
         33:e7:20:e6:8c:90:56:31:10:75:37:b2:01:e0:7a:5d:3b:8f:
         0e:dc:4a:d3:a4:a8:1f:f5:34:c9:d1:c3:d4:38:90:54:a5:bb:
         64:3b:37:88:19:42:f9:80:1c:d2:6f:9d:e6:bc:9e:c2:59:5e:
         59:07:75:0a:fc:97:60:9b:7b:3e:16:10:fd:58:d4:07:98:8b:
         59:ca:e6:21:e1:36:31:73:a3:c1:00:a8:a4:7b:e6:fb:c4:04:
         6b:25:6f:39:bc:a0:a4:f4:00:89:82:c4:ef:db:d5:55:7f:be:
         ea:5d:c1:51:4d:6f:46:55:a1:43:13:6c:3e:29:47:46:99:89:
         4b:96:a5:82:70:04:24:1c:8d:77:22:a2:eb:93:91:0b:3f:02:
         a8:d5:3c:af:cc:61:99:de:af:41:59:13:ba:7f:91:07:5c:24:
         a0:5c:0f:b3:8e:6a:53:8d:d0:a4:dd:2a:c1:70:a6:bc:4b:b6:
         5c:be:2d:c2:65:b6:6f:44:c1:5e:d2:30:b5:0e:12:cd:64:0e:
         57:d6:f0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:02:48 2026 by rpki-client