Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          kyVS7jYLleR6MpqYIV7QPMHfcmgIfQAMFSP6GX0vjMw=
Subject key identifier:   12:FB:1A:87:16:1E:E4:63:81:E9:07:34:F7:7F:9C:7D:71:0C:B6:36
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019D273AFF98524C6E7471D148C13C6A917A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          1819
Signing time:             Wed 25 Mar 2026 23:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 23:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 23:01:10 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: Gw4OlnS2Jb3/UfA5v7lmc/fHHUdIoenzrEM3hFKg7PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:3a:ff:98:52:4c:6e:74:71:d1:48:c1:3c:6a:91:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Mar 25 23:01:10 2026 GMT
            Not After : Mar 26 23:01:10 2026 GMT
        Subject: CN=12fb1a87161ee46381e90734f77f9c7d710cb636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:fd:67:68:1c:4e:f7:63:4b:f0:8f:dd:1c:
                    44:3b:d6:80:4b:7a:ef:8c:d3:02:36:17:41:d2:52:
                    14:c0:a1:41:46:2c:50:c6:9a:e3:2b:a0:44:e7:1f:
                    5a:23:aa:7a:56:1e:81:ea:93:d1:9c:17:2c:6c:ee:
                    a5:71:b4:fc:27:4e:70:d2:72:59:33:31:c6:d9:63:
                    cf:ca:b4:a5:5b:53:01:b4:db:5f:ac:84:a4:48:3f:
                    5a:28:2d:ce:f6:b3:94:7a:e2:86:70:8c:a6:d1:43:
                    03:e6:d9:e2:52:24:70:86:97:5d:4d:b3:ec:25:b8:
                    00:88:ea:db:7d:f3:c3:b8:f0:0f:7e:25:9b:25:c3:
                    3e:8e:52:dc:a5:46:96:6b:18:c0:1b:7d:f6:4f:85:
                    8d:f3:ff:f2:2f:13:b2:35:d8:c4:c4:c7:d4:56:49:
                    62:08:52:ca:8b:e9:31:77:86:d2:0e:5b:29:99:59:
                    6d:1f:34:d0:bf:80:50:d8:4b:1e:5f:61:f2:aa:26:
                    91:90:d0:83:79:3b:60:81:84:13:b2:0d:76:df:00:
                    a1:65:e1:9e:97:c6:c6:f2:c4:8a:6a:e8:7f:20:44:
                    d4:46:ba:0e:d1:6d:88:0b:9b:cc:35:9d:0d:ae:e0:
                    b9:59:67:39:97:0e:1c:47:ee:6a:d6:32:00:82:13:
                    af:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FB:1A:87:16:1E:E4:63:81:E9:07:34:F7:7F:9C:7D:71:0C:B6:36
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ce:d7:73:3b:e5:f8:80:81:16:7d:86:35:9a:c7:65:7f:bc:
         87:bb:3c:6a:9d:65:cc:1d:b7:97:2a:bf:2b:0c:f7:fb:ff:38:
         70:e7:7f:60:54:c4:8c:b0:b1:c6:0e:f2:66:da:77:99:10:e7:
         71:c6:b9:3f:0a:d9:9c:46:22:14:9d:4c:60:94:2b:dd:cd:a7:
         b3:f7:fa:45:04:19:cc:d1:50:5f:ec:bc:43:bf:e7:de:9c:3f:
         17:35:45:cf:de:b6:b6:6d:2b:2b:33:01:9d:89:74:63:f2:4f:
         32:50:99:0b:b7:78:1e:e0:7e:70:eb:61:30:28:1c:c4:1b:e9:
         2a:85:52:e9:c5:b8:fb:b8:30:ea:70:f8:39:34:b4:2d:4a:63:
         cb:a8:93:c9:56:b0:15:81:f8:b4:15:6a:de:fe:6f:45:82:dc:
         01:4a:32:d8:12:1f:07:0e:30:46:fc:1c:8a:c7:dc:4f:19:f7:
         af:4f:8d:12:1b:44:cf:13:28:01:61:71:05:04:d8:6a:f0:d7:
         5c:51:b9:7f:5f:a5:05:8e:2e:de:95:ee:ba:f0:fd:87:f1:c1:
         a2:81:d4:f7:0f:3f:3b:23:1d:3a:27:b7:f1:40:1e:82:e1:22:
         0c:ba:19:fb:98:02:dd:60:18:dc:25:36:1f:56:c9:a8:f6:90:
         bf:48:96:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:28:55 2026 by rpki-client