Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
File:                     F1ogYIrOEedRHIZpVgY2cwqeKr8.mft (raw, json)
Hash identifier:          GBovifeLTvBGAQZ/fso1pm/kkB5F1r/eCJY+7tk5y/U=
Subject key identifier:   AC:5D:26:12:7B:45:5D:15:84:7C:C7:48:C1:80:CA:9F:D8:CC:D2:32
Authority key identifier: 17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF
Certificate issuer:       /CN=175a20608ace11e7511c8669560636730a9e2abf
Certificate serial:       019D2B4EF08C599670952C1123E6B1828BF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
Manifest number:          0744
Signing time:             Thu 26 Mar 2026 18:01:26 +0000
Manifest this update:     Thu 26 Mar 2026 18:01:26 +0000
Manifest next update:     Fri 27 Mar 2026 18:01:26 +0000
Files and hashes:         1: F1ogYIrOEedRHIZpVgY2cwqeKr8.crl (hash: OYMiryoq2dt+BP56vi+lKecMyRFPq0Z+S3Z1DL6lrZw=)
                          2: Q7opPXEWfOIWXtGcMaVf2gDlyIw.roa (hash: CTgenKosJdcAbaZ5ZvRKAeILm3aXtuh6bQlnuyIpyNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:f0:8c:59:96:70:95:2c:11:23:e6:b1:82:8b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a20608ace11e7511c8669560636730a9e2abf
        Validity
            Not Before: Mar 26 18:01:26 2026 GMT
            Not After : Mar 27 18:01:26 2026 GMT
        Subject: CN=ac5d26127b455d15847cc748c180ca9fd8ccd232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:68:93:65:ac:63:64:f3:ca:35:aa:b4:11:0b:
                    a1:00:f0:f5:da:58:ee:1f:48:d0:b2:e7:01:23:a4:
                    c3:8e:0d:02:bf:9b:a9:98:36:6f:c7:16:a4:04:68:
                    d3:0e:63:8e:38:ce:af:e2:3c:7a:9f:41:b5:68:70:
                    0c:d0:fd:0f:65:7f:52:54:ee:28:ec:ab:fa:3f:14:
                    bb:93:b6:2e:e5:7e:10:7a:85:68:37:56:e5:35:a2:
                    cb:25:8d:6d:3f:e2:07:ea:0b:9b:88:49:fb:ec:9c:
                    ee:46:89:69:5e:ff:14:dd:55:75:08:a0:29:6e:8c:
                    3d:56:89:26:42:64:59:b8:43:8d:4e:bc:a7:e1:dd:
                    b0:e3:10:fb:04:04:44:71:f1:10:2f:ee:67:82:dc:
                    3c:18:e2:e1:be:e7:69:e7:05:36:19:6b:0a:ab:a4:
                    5e:a1:e0:f9:be:bd:50:be:b8:a1:2f:e4:13:4e:9d:
                    37:fd:e7:bc:1f:4f:7f:ed:22:d4:ae:1a:6c:99:bc:
                    69:bb:b6:70:a0:ab:09:51:11:56:37:14:af:0a:29:
                    29:5d:89:24:1a:7e:23:35:8b:6e:36:36:69:e5:3f:
                    ea:45:72:29:3a:33:80:1a:cd:1a:6c:78:8c:2e:66:
                    70:56:bf:07:07:8c:9d:0b:db:15:92:7c:f9:f5:22:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5D:26:12:7B:45:5D:15:84:7C:C7:48:C1:80:CA:9F:D8:CC:D2:32
            X509v3 Authority Key Identifier:
                keyid:17:5A:20:60:8A:CE:11:E7:51:1C:86:69:56:06:36:73:0A:9E:2A:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1ogYIrOEedRHIZpVgY2cwqeKr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/7e9a18-0629-41eb-a681-a605cad55086/1/F1ogYIrOEedRHIZpVgY2cwqeKr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d1:56:d3:36:c4:60:72:bb:8b:45:52:1a:0e:99:79:92:90:
         92:7f:72:c6:da:52:71:5e:e9:6b:2d:6e:f5:7c:97:58:63:06:
         5b:57:2e:13:9d:99:75:53:82:9d:f5:c3:5c:cb:80:a9:04:8e:
         53:15:b2:e1:4c:05:f1:00:8f:bf:c2:0c:a8:24:54:43:b0:c6:
         b7:47:f2:f8:1d:4d:aa:5d:a9:ea:0a:70:c3:a2:59:2e:08:6b:
         04:c7:76:36:bb:57:b8:32:2d:a4:93:8a:1f:99:27:fb:c4:79:
         50:6b:00:8e:c5:30:58:d3:18:1a:fe:62:31:b4:74:5d:42:8b:
         57:d8:77:cb:e8:64:ae:7c:5c:a0:30:68:3f:33:ce:27:2a:cd:
         88:3d:2d:c7:07:78:15:ad:be:7c:8f:7a:c9:2c:da:4c:ab:44:
         ee:0e:d3:20:e5:1f:c2:ea:8a:8d:b3:43:da:69:f1:72:ca:a7:
         e0:14:cd:03:a3:4c:e5:9a:e7:f8:bd:51:6f:ec:9b:4c:80:0c:
         44:5e:d6:ae:1d:4d:95:ed:92:4c:9b:af:2c:31:8d:bf:12:5a:
         63:9b:d9:b3:bd:c8:0c:da:0f:15:cd:26:0a:1e:be:2e:d2:7d:
         db:74:45:e5:b0:8e:0e:c1:d6:56:79:b3:ff:07:bc:a4:69:c7:
         c5:0e:14:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:09:16 2026 by rpki-client