Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
File:                     kTxeovTqvz88Qt88Mx6cuhDJOgk.mft (raw, json)
Hash identifier:          LIp8J+SEv+vHbFg80voV+M2kq1xuyq4kx7pPsIXQ8ps=
Subject key identifier:   FC:0F:5D:50:2D:B6:CE:B8:F6:02:96:AB:EB:7C:D6:4F:98:A0:4D:79
Authority key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Certificate issuer:       /CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Certificate serial:       019D26284DD5AF3C5185D3DFA9E01AEF2E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 18:01:08 +0000
Manifest this update:     Wed 25 Mar 2026 18:01:08 +0000
Manifest next update:     Thu 26 Mar 2026 18:01:08 +0000
Files and hashes:         1: kTxeovTqvz88Qt88Mx6cuhDJOgk.crl (hash: 1tmBZ1oGUIwirPb4SDeVoNLRx/bikl0zLdBS6cabTDw=)
                          2: xpFzvNysauejwNurSrVoomGPi2g.roa (hash: ZWen67CGabL9A0ahpVR1yOAZANbCjCBbSuhLawAwcs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:28:4d:d5:af:3c:51:85:d3:df:a9:e0:1a:ef:2e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
        Validity
            Not Before: Mar 25 18:01:08 2026 GMT
            Not After : Mar 26 18:01:08 2026 GMT
        Subject: CN=fc0f5d502db6ceb8f60296abeb7cd64f98a04d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fd:4e:8b:e5:0b:b5:7d:73:88:b9:e1:bb:bc:
                    c0:dd:bd:ed:9f:5a:81:82:95:36:92:65:1d:e9:fb:
                    0e:16:5a:c1:0a:de:c0:7e:f4:db:fa:ba:c3:df:71:
                    c9:bc:a0:79:ab:57:fa:5d:7a:3f:3d:e2:b4:a7:0b:
                    22:33:65:13:16:64:fc:c9:c9:61:39:18:81:dc:f9:
                    ac:fa:b4:ac:e3:48:0e:01:14:84:56:c2:55:7f:f1:
                    d7:4c:83:5d:08:84:c1:4c:8e:bc:de:ff:e1:78:98:
                    49:e0:d1:8c:dc:8d:17:c0:64:bf:26:e9:4c:71:1e:
                    ba:0b:c8:d0:cb:98:53:be:3c:cd:94:80:66:19:3e:
                    05:98:50:00:88:1d:17:7c:37:04:36:3a:73:bf:7c:
                    2e:82:f3:24:88:3d:b7:4c:14:df:52:85:a5:9f:44:
                    33:76:71:84:08:38:2d:95:6b:f4:d8:ec:f5:d8:9c:
                    ab:c8:2b:ac:5d:bb:52:03:31:b8:99:3f:b5:1b:c9:
                    aa:1e:ec:9d:19:d1:2c:7c:2f:a2:bd:09:de:e4:5e:
                    08:17:19:a4:c3:ad:3a:1c:ea:5f:a8:a9:dd:27:6c:
                    77:b5:18:d4:1a:88:d4:0a:6a:37:45:d1:76:0c:31:
                    7c:6a:0b:1b:ee:32:8e:90:2c:ab:35:2c:41:63:df:
                    bd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0F:5D:50:2D:B6:CE:B8:F6:02:96:AB:EB:7C:D6:4F:98:A0:4D:79
            X509v3 Authority Key Identifier:
                keyid:91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:ec:a2:f4:db:d4:1a:09:c7:34:39:47:fc:cf:4f:ca:3f:
         db:f7:86:68:47:77:8e:aa:a3:f7:bc:2a:f8:1a:db:9a:c4:0a:
         a8:00:32:a4:81:7e:bc:7d:48:6c:e8:87:94:43:00:75:f7:3b:
         b6:48:33:a3:f0:72:01:3b:27:ba:9f:c6:98:6a:b1:1a:d1:11:
         89:8c:f1:86:35:29:43:56:bb:4f:bb:06:d9:cf:b9:a1:7a:ad:
         b6:66:02:20:cf:41:4e:8b:98:59:fc:a1:68:5d:b3:4a:94:26:
         3c:d5:c4:38:7c:79:cc:5d:f6:0c:48:fd:8b:87:45:bf:99:a3:
         49:bb:42:4e:f8:9d:4f:10:6e:d3:2c:5d:cc:79:ab:e6:73:d4:
         a2:a9:f1:ba:76:5a:ef:b4:d0:23:ea:b9:b3:d6:f9:f9:ce:aa:
         06:aa:c7:dc:11:18:74:c1:eb:84:09:78:7d:73:1a:4b:f0:c4:
         bf:fd:5a:eb:6b:f0:79:69:dc:0d:9d:52:38:24:74:b8:bd:f7:
         60:da:c4:5c:96:90:ce:21:80:88:f3:e2:85:69:c4:77:20:ac:
         9c:19:53:dc:ce:9f:72:de:1d:28:d3:87:db:19:bf:72:96:49:
         13:11:c1:f4:d1:b1:57:53:b7:69:92:2a:ca:f5:0b:1f:77:7a:
         01:aa:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:57:50 2026 by rpki-client