Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File:                     _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier:          PC/1lf3aDmDTSR7U4s4e66tDQdyHN6X017p9eW2t1yk=
Subject key identifier:   2B:DC:5C:AB:F8:C4:BE:A8:93:1A:BB:C9:4C:86:69:9B:73:68:20:7B
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer:       /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial:       019D28847B47D9DB4C3B5F7246886AE21BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number:          0832
Signing time:             Thu 26 Mar 2026 05:01:04 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:04 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:04 +0000
Files and hashes:         1: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: vH0zhwcZztr3wpLYK9AW89K/5XRt/zBZojn48Ay5knQ=)
                          2: uetR0NYlftUI-N4cveVJay7Nfqs.roa (hash: oU+tDn/SW8IQrBkBO3IDY8rZ4byuiEOxIdJBkCXSH9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:7b:47:d9:db:4c:3b:5f:72:46:88:6a:e2:1b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
        Validity
            Not Before: Mar 26 05:01:04 2026 GMT
            Not After : Mar 27 05:01:04 2026 GMT
        Subject: CN=2bdc5cabf8c4bea8931abbc94c86699b7368207b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:d7:a2:f9:5c:bf:3f:23:9c:51:ec:f1:13:
                    34:28:e9:4c:1c:53:e7:3f:08:48:37:b5:7f:0f:83:
                    bd:b2:24:11:e0:c2:1a:31:9a:ec:cc:aa:17:f8:f6:
                    81:40:8a:a8:b1:a3:31:39:d4:81:af:bd:c7:21:da:
                    73:5f:c8:00:e8:12:85:0d:e2:b9:ee:b9:cf:1a:54:
                    d2:d7:c8:ca:72:34:a3:48:5d:1a:b1:de:fe:87:b9:
                    cb:b6:b9:1d:1a:86:70:b8:b6:60:eb:e0:f3:1b:fd:
                    18:10:44:09:d7:11:c7:e1:0b:ce:e2:f9:6b:f4:b0:
                    e5:f2:a3:fd:2f:a3:c6:9a:51:17:2f:d3:64:a5:c7:
                    4e:bf:29:d5:53:5a:08:12:bb:8f:fa:ee:f3:5e:6f:
                    5a:06:04:4a:87:06:7c:81:d7:e7:fd:a3:dd:d6:05:
                    76:e6:cd:6d:20:7e:67:cd:30:d6:99:2d:44:a9:61:
                    21:a5:2e:3f:fe:07:7c:87:e0:d4:72:f4:7a:b8:bc:
                    46:70:a2:95:c7:2e:7b:e6:bb:a0:e1:e4:c5:26:7d:
                    5a:ec:4f:70:99:fa:4b:dc:66:db:de:ca:a0:f4:75:
                    78:8b:82:9a:0d:08:31:ec:54:3d:90:49:56:43:0b:
                    95:f0:07:45:0f:c1:ea:bd:9e:f7:0c:8a:f7:96:84:
                    ed:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DC:5C:AB:F8:C4:BE:A8:93:1A:BB:C9:4C:86:69:9B:73:68:20:7B
            X509v3 Authority Key Identifier:
                keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:99:e6:6a:77:5d:27:ac:6a:25:5a:12:b3:fd:64:90:25:e0:
         1b:02:43:bb:46:e6:11:ad:ef:1f:f7:97:04:f1:57:3e:07:69:
         22:f9:3f:b8:48:18:8f:4f:18:67:fb:15:15:56:88:f8:4d:5a:
         f0:3b:a1:55:8e:41:2d:7d:53:fa:1e:8e:b8:11:64:d3:07:09:
         c2:65:8c:6a:c8:7e:96:a8:dc:4f:8e:5a:ed:87:86:98:af:97:
         34:36:54:ed:2e:0d:cf:f1:d0:84:0f:ac:a1:ad:29:5d:90:c7:
         af:10:93:82:e0:ce:65:d1:6a:30:1d:55:a4:de:10:dc:be:66:
         89:23:97:6b:ee:55:e6:b8:75:e8:77:cf:76:a9:c6:96:42:ec:
         c3:75:6e:d2:6f:36:51:39:36:cd:96:1b:93:23:a7:d9:e0:83:
         84:c6:70:65:12:4c:a9:9b:75:5e:28:f7:da:4e:4e:b6:72:b3:
         26:1c:91:ab:75:b5:e7:14:4a:79:e5:31:62:6a:a7:3f:eb:ea:
         d5:dc:68:42:5f:9d:8e:b0:dd:3d:1a:6e:4c:23:d6:06:ed:2a:
         f6:18:d7:7a:61:60:48:32:cd:93:b8:be:f5:8d:80:7e:ba:33:
         10:78:1a:84:61:45:8c:90:c6:5e:ea:b7:eb:f7:1a:47:50:14:
         95:7c:3a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:37 2026 by rpki-client