Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
File:                     fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft (raw, json)
Hash identifier:          srxRqBc8UCLGhoTuaKYh2gN0BSYn3iuKGUJz8t8fTvU=
Subject key identifier:   38:BF:E3:3C:3F:80:4A:80:84:D3:F9:B0:5A:D4:1F:F8:B3:10:C4:C0
Authority key identifier: 7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6
Certificate issuer:       /CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
Certificate serial:       019D2C9871F4B8F5DBF8216AB9D5298CE796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
Manifest number:          189B
Signing time:             Fri 27 Mar 2026 00:01:21 +0000
Manifest this update:     Fri 27 Mar 2026 00:01:21 +0000
Manifest next update:     Sat 28 Mar 2026 00:01:21 +0000
Files and hashes:         1: G0kBNcjhGFcxChx46aWWaNpRXhY.roa (hash: VJoqFME0N6dK/qBA61hfvkkTq2MVQMZWW93hxUvsK8Q=)
                          2: IhUUSRuZPQ93qmBEuCsX-VJJ8_Y.roa (hash: wQMNMlSi7ML40phwxmQnjfrhkgmt/fkZEJZEruvJetM=)
                          3: J7oFZC1CJk2GtQuj_-ICPxLHOsQ.roa (hash: oGKjzDdrrCM7vTukMw0Fba8efuuuaYKCVfCXlBR+Jpc=)
                          4: O_CD_5ALmuh68TK-xyESGxnHW24.roa (hash: A4M+FCTh23fTzIJAI9lDd9sc/Yc7QQultOVy81PYaSo=)
                          5: Y05YWTld1eID__luRs7pp8ewZwY.roa (hash: 02lMUa1OHr9cMSAHSJuLTXNV5rSyX1jxkq8ORZ0rugw=)
                          6: fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl (hash: 8ZMtbeHcx3anQgx2BsN86q+m+ASSgHrdFk4BkZvv6mA=)
                          7: oFmVPpAqArTolT86zoYzDNps-ck.roa (hash: vxR9GCqj5WIpQWRTxrTVSqLQRxXTFqzFObqIUCYCQMY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:98:71:f4:b8:f5:db:f8:21:6a:b9:d5:29:8c:e7:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3b8877e1a130fe50386c610d6ead5641b97ba6
        Validity
            Not Before: Mar 27 00:01:21 2026 GMT
            Not After : Mar 28 00:01:21 2026 GMT
        Subject: CN=38bfe33c3f804a8084d3f9b05ad41ff8b310c4c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:33:92:ed:68:d6:ae:fd:be:a1:68:6c:4d:
                    36:6a:58:58:57:17:f8:7d:15:c8:2d:3c:88:b5:a9:
                    33:10:33:74:ea:d0:06:9b:f2:1d:98:cd:c2:5c:55:
                    d9:07:36:7c:eb:e6:d5:26:1e:f4:5e:8a:4a:88:ab:
                    6c:51:09:68:be:bf:68:14:9e:ee:e4:a7:24:0a:b9:
                    c0:ec:ae:e6:4e:bc:7c:3d:41:8f:8f:6c:c4:72:53:
                    25:af:df:24:bd:8d:06:f4:2e:be:33:30:d9:6b:8d:
                    60:90:b4:39:7a:3c:a5:56:4f:19:b6:04:72:45:c9:
                    74:32:cd:c5:90:e6:22:e9:c5:41:71:26:02:f8:ee:
                    29:58:ad:07:51:bd:af:40:82:8e:84:ee:1b:96:62:
                    62:e4:01:be:48:d6:9e:87:c8:a3:96:fa:b3:11:bb:
                    64:bf:22:0d:e3:06:dd:64:3c:27:dd:ef:fa:5d:b1:
                    08:e8:ff:d2:cf:ce:41:fc:89:2c:1e:fc:71:6b:a8:
                    92:e1:1f:f9:03:ca:0c:aa:f7:9a:f9:bf:d0:65:fc:
                    28:f0:c4:ce:2a:a6:8c:a7:5e:1a:10:27:7b:07:69:
                    d4:86:12:42:ce:26:78:41:15:a3:c3:f3:8b:e1:e5:
                    7e:b4:0e:7b:99:9e:2f:65:27:2c:0c:a6:69:f4:ac:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:E3:3C:3F:80:4A:80:84:D3:F9:B0:5A:D4:1F:F8:B3:10:C4:C0
            X509v3 Authority Key Identifier:
                keyid:7C:3B:88:77:E1:A1:30:FE:50:38:6C:61:0D:6E:AD:56:41:B9:7B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDuId-GhMP5QOGxhDW6tVkG5e6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/17a712-4e5a-40c5-a3a2-12025c54f484/1/fDuId-GhMP5QOGxhDW6tVkG5e6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:e8:bc:a9:ca:7b:5e:98:22:51:b4:36:3e:13:4e:9c:6e:d9:
         a7:13:e8:b3:7d:72:12:6f:08:9d:bf:92:46:bf:8c:e7:ac:d0:
         86:2c:07:56:88:1a:6c:2b:a1:d3:26:5b:6d:09:57:ec:5a:73:
         04:2e:07:e0:15:fe:3c:18:a7:45:f0:3e:36:5f:86:a9:8d:77:
         41:91:33:4d:a0:99:d7:07:5f:9d:4e:83:1e:1f:1d:95:3a:d8:
         48:17:b1:bf:bf:7b:4a:5b:bb:92:b3:86:81:63:3d:6a:f3:83:
         3a:2e:25:cc:c8:cb:66:9b:78:0b:61:ee:ca:08:1c:80:3d:73:
         46:ca:d6:98:50:9e:5e:f4:70:4f:42:f1:13:3d:b8:ed:ea:13:
         30:07:ba:f1:21:45:92:a4:ba:4e:a8:d5:67:cf:8f:46:4f:d9:
         b7:f5:de:55:43:3d:ef:5a:47:17:ff:4a:48:40:c8:eb:29:ca:
         80:e1:b1:c3:e4:53:d1:55:1a:e0:1b:ec:37:60:c6:2d:ca:e4:
         8c:1f:e2:20:32:07:d9:7b:30:aa:c0:c0:b7:ec:d4:36:0b:14:
         ba:4a:95:ed:a3:ea:22:47:55:69:b4:da:c7:24:89:45:e7:0d:
         2a:10:b4:fb:9a:5a:58:bd:a2:e8:a5:d3:81:e7:5c:b6:8a:4a:
         5f:2b:3e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:45:50 2026 by rpki-client