Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File:                     FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier:          kkutDyL6F42mGNbNDOAA/wNe+vzU85zeKsvXkI50Gwc=
Subject key identifier:   98:B0:5B:C2:23:58:FC:C4:E0:7A:58:37:39:4A:5F:7A:4B:F0:8C:E0
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer:       /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial:       019D265F97F35531AEEF75C8C55A9AF7162C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number:          1888
Signing time:             Wed 25 Mar 2026 19:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:32 +0000
Files and hashes:         1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: CjJfKyJpOcmRyufEr9QbDIKRzuJnZQi9Lfd2Cw6fWb0=)
                          2: _zfrfxE4KY3Sz2qKZ9YX8YUP3Gc.roa (hash: WlQR46TcsvE8o+HLG0ehANtk2L9KYlzfKkIP64trfQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:97:f3:55:31:ae:ef:75:c8:c5:5a:9a:f7:16:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
        Validity
            Not Before: Mar 25 19:01:32 2026 GMT
            Not After : Mar 26 19:01:32 2026 GMT
        Subject: CN=98b05bc22358fcc4e07a5837394a5f7a4bf08ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:3a:2b:80:b5:81:f9:f7:cb:a4:c2:bb:6e:
                    76:41:97:ce:8d:78:a6:e8:3e:f2:7b:3d:15:2e:3e:
                    82:12:b2:94:f7:2a:fc:15:30:95:b5:78:e9:b6:c4:
                    16:6d:61:76:a2:b8:e8:d5:9d:32:15:4e:ae:d5:7d:
                    91:38:6d:ba:6d:46:de:17:57:a4:9c:74:dd:8c:b8:
                    b0:56:b2:14:1d:19:ad:86:47:dd:da:a8:8c:65:6a:
                    04:c3:06:94:dd:e0:ff:0d:a3:fc:be:0b:e3:20:80:
                    13:4e:3e:af:8b:f0:35:8b:73:ea:6e:a6:b3:3f:aa:
                    1b:d1:c8:a3:64:46:4c:5e:07:42:65:2c:66:fb:22:
                    45:22:57:63:27:8a:bd:6d:64:f8:57:92:5d:ff:13:
                    d2:f8:18:e9:dd:31:c7:b3:00:3e:57:69:06:5a:22:
                    87:9a:90:26:e3:4f:d0:01:f1:9a:54:18:7a:1d:29:
                    61:df:cb:af:61:38:7c:73:80:ab:b2:42:49:a0:46:
                    f2:bb:3a:d0:4a:27:ad:a2:17:96:f5:fe:3b:6b:ae:
                    2f:50:2c:ad:86:cb:f6:61:c1:00:89:3b:30:40:df:
                    30:57:31:80:6f:93:40:89:02:3f:48:8d:0b:dc:79:
                    a6:53:4a:35:8f:d1:6b:1f:b3:b8:31:4d:09:89:0d:
                    1a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:5B:C2:23:58:FC:C4:E0:7A:58:37:39:4A:5F:7A:4B:F0:8C:E0
            X509v3 Authority Key Identifier:
                keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:bc:de:7c:ad:d6:d8:d0:8f:dc:b6:5b:e2:db:34:de:4f:c9:
         e1:ae:81:c1:7f:8e:45:00:5f:dc:e2:0f:a0:17:9e:5c:ab:0e:
         d2:2e:3a:73:cb:24:db:05:6d:98:bf:4f:94:1f:a3:60:3d:ad:
         0a:0f:b7:29:3a:32:f2:5d:02:ff:c9:b9:f3:9d:9b:5f:35:32:
         b3:35:d9:48:c9:3b:4f:3c:6b:d8:de:63:3f:8f:fe:aa:11:fb:
         96:73:b7:a0:38:af:01:7e:44:86:07:6f:1f:87:fc:ac:2b:88:
         51:b8:ee:c3:27:a7:ea:e9:c7:dc:06:df:6d:c5:98:dc:1c:f6:
         32:e7:06:2a:a3:3b:d1:90:5e:40:3a:df:9c:42:c6:69:86:1d:
         75:4e:8f:5e:f3:67:9f:8c:77:a0:8a:fa:1f:eb:e8:36:fa:e2:
         81:88:aa:39:be:8f:94:4e:86:03:b9:fb:3d:ed:2e:e2:9c:e8:
         4f:a6:f1:57:56:22:44:c8:ee:ed:6e:81:1b:e2:c0:d3:7f:21:
         8e:cf:c1:9e:1e:fa:88:32:05:59:5d:7c:dc:95:24:31:5c:b0:
         68:68:2c:7e:28:13:8c:5f:a5:71:5d:1d:72:84:24:ed:4c:80:
         4f:7e:4f:2c:69:e3:cb:76:ba:21:eb:55:a7:8f:9c:5e:da:f5:
         67:52:ca:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:18 2026 by rpki-client