Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
File:                     F__uJQUsCqv2yzcePy4Hb0T8HDw.mft (raw, json)
Hash identifier:          OfFuWD9Rovod2gPIt9xplGCavI4BDazLHwJzDvNzt6I=
Subject key identifier:   AE:F5:0B:03:CC:CE:D5:78:86:23:45:75:4D:A1:6C:A2:50:15:39:B5
Authority key identifier: 17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C
Certificate issuer:       /CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
Certificate serial:       019D27E00CC96B7E368954D44820962C72DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
Manifest number:          1818
Signing time:             Thu 26 Mar 2026 02:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:27 +0000
Files and hashes:         1: F__uJQUsCqv2yzcePy4Hb0T8HDw.crl (hash: /m5/pt6fACdBx17Z8CVEbmTddlu9NEWL6AXj3uhgkqU=)
                          2: PnmMPjc4F5uoJXYfqJ1sZSQuC6I.roa (hash: /5mkx4+jtWUqD/pZZ8CzGZwV8K0K77VUycNPiYZySbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:0c:c9:6b:7e:36:89:54:d4:48:20:96:2c:72:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ffee25052c0aabf6cb371e3f2e076f44fc1c3c
        Validity
            Not Before: Mar 26 02:01:27 2026 GMT
            Not After : Mar 27 02:01:27 2026 GMT
        Subject: CN=aef50b03ccced578862345754da16ca2501539b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:8e:49:1b:ac:cb:cc:2d:07:72:f6:78:b2:
                    4a:4c:0c:d3:21:96:88:55:e8:f3:69:86:f9:f4:c0:
                    3c:f8:18:38:7f:ea:9d:c3:5e:81:8a:09:35:e2:1b:
                    99:49:a4:d8:fb:33:cd:7b:5a:b5:26:9e:94:ab:de:
                    e0:60:a7:bb:b0:ad:e9:35:e5:69:dc:cc:32:71:fd:
                    f5:7b:4c:3a:0e:16:a2:e3:a5:56:ef:1b:ca:c2:87:
                    c4:e1:ec:1a:38:0f:9a:f5:95:cd:50:bb:d9:fd:58:
                    40:4b:a0:e2:5a:b9:1b:9f:7a:0c:05:da:6f:fb:83:
                    ce:34:9e:29:a5:ff:39:91:4e:ad:2c:a6:65:99:d4:
                    be:9a:5e:f6:4a:53:35:5b:8d:27:d5:4c:8f:9b:6d:
                    39:42:f5:da:34:c8:19:fd:2a:94:9d:78:dc:0c:90:
                    89:83:67:d4:a2:a0:8b:9a:c7:3e:94:3c:dd:29:10:
                    5b:f5:2e:ee:92:d8:b5:d9:08:06:48:40:4b:b2:0e:
                    e2:69:a8:f7:b1:20:de:7b:a3:ba:2f:b7:bd:00:4e:
                    4a:2d:b9:84:7d:82:f3:ad:a5:d1:1d:de:76:2d:50:
                    b3:a3:9e:cd:7f:25:fc:9b:dc:36:60:80:06:79:56:
                    7b:8c:62:48:73:d2:03:26:7a:7d:92:0f:63:9d:11:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F5:0B:03:CC:CE:D5:78:86:23:45:75:4D:A1:6C:A2:50:15:39:B5
            X509v3 Authority Key Identifier:
                keyid:17:FF:EE:25:05:2C:0A:AB:F6:CB:37:1E:3F:2E:07:6F:44:FC:1C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__uJQUsCqv2yzcePy4Hb0T8HDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/045222-5ace-4e7e-95b2-a2e880fd5850/1/F__uJQUsCqv2yzcePy4Hb0T8HDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:83:9e:f4:12:07:27:fc:77:4d:98:c6:47:d8:b9:02:33:1d:
         09:f9:4f:1c:46:1e:56:1a:18:3c:29:28:3c:4e:a7:21:77:55:
         7a:d9:93:9e:3c:d7:da:b5:65:b8:0a:94:8f:29:23:1c:f3:92:
         7a:55:62:64:ec:52:0d:23:05:ad:b9:fe:2b:51:01:10:c4:ee:
         2f:75:a2:da:af:e4:0f:ab:18:b5:bc:85:c5:f4:56:59:af:0b:
         ee:4b:9f:e0:dd:78:5f:b1:a2:02:08:09:6b:66:4c:4a:09:ac:
         75:ef:42:65:7f:9c:0d:ae:c8:2d:70:6b:2c:06:d4:fa:df:94:
         58:96:7c:4a:57:47:ad:52:23:03:b4:37:61:0f:67:51:b1:8b:
         ce:95:7e:b2:bc:cd:46:9b:e8:72:8e:5a:f0:46:41:cd:3c:ec:
         ad:37:21:bb:e1:90:ac:3c:a7:b8:83:70:21:7d:03:29:69:d8:
         c4:a8:72:65:18:00:9d:b9:b8:36:be:2b:b8:2c:e3:93:9b:da:
         27:b3:cb:1f:ba:72:21:47:c3:38:91:a8:3e:81:bb:d0:15:61:
         ea:49:a4:70:c3:97:72:ec:69:56:b7:85:43:e0:af:fa:ff:f2:
         71:10:97:ca:c5:17:bb:02:29:ce:6f:37:fa:e7:1a:2d:79:04:
         08:36:79:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:46 2026 by rpki-client