Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File:                     FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier:          NM0s1Y0J279nbyx3VhUS2gTP3G/51DjNtlHGhMolecg=
Subject key identifier:   75:D2:AF:3C:11:5B:F9:20:41:A3:CF:57:31:B0:3E:AD:E7:56:37:5B
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer:       /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial:       019D26CCAD89945F548BA800013177E888F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number:          9E
Signing time:             Wed 25 Mar 2026 21:00:40 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:40 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:40 +0000
Files and hashes:         1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: uY/rDLOFctfDSQdw/Ja1ilRbkQksW6nh/VuO3OjTzdg=)
                          2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:ad:89:94:5f:54:8b:a8:00:01:31:77:e8:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145c4728382ec5354e106023df467a4113b49324
        Validity
            Not Before: Mar 25 21:00:40 2026 GMT
            Not After : Mar 26 21:00:40 2026 GMT
        Subject: CN=75d2af3c115bf92041a3cf5731b03eade756375b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e1:67:52:b5:67:29:77:4d:dc:bf:25:c4:05:
                    24:4c:1e:f8:2b:71:f7:6d:89:3d:b1:42:ba:23:8f:
                    87:59:66:ae:b2:80:28:0c:ed:2f:e9:75:e4:60:78:
                    27:55:6e:6b:42:03:37:74:d5:e5:69:72:3d:de:1a:
                    db:ee:55:cf:f1:f1:d6:a1:7c:4b:de:a3:dc:42:b6:
                    4b:f1:b5:70:63:a5:53:c0:d4:ce:0a:f6:96:16:84:
                    cb:94:91:e9:9d:bb:e8:88:bf:81:dc:32:1f:34:4a:
                    1b:74:ab:90:db:01:3f:59:c3:b6:cc:c4:f5:0a:cd:
                    23:d8:b7:99:52:c0:46:6c:c5:a3:16:83:2c:e8:0e:
                    db:bf:33:27:7f:5f:01:7a:e5:46:d9:42:e3:7f:a0:
                    0d:d5:ba:ca:c3:b3:a4:eb:2a:b5:d0:f2:65:ef:59:
                    9e:16:7d:8b:c0:41:44:67:d1:e9:98:6f:a6:d2:72:
                    91:9e:09:0f:09:ea:4b:b6:1c:0a:35:ef:3d:51:38:
                    e3:64:8b:17:51:45:c5:72:a6:b6:16:26:b8:d0:fa:
                    34:65:b5:f7:f9:97:74:27:6b:89:c2:54:16:07:e5:
                    d8:e4:8b:a2:43:24:45:7a:6c:ad:8b:51:ba:11:30:
                    e7:68:66:e2:38:b1:02:20:72:11:8d:20:f8:bb:b3:
                    e7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:AF:3C:11:5B:F9:20:41:A3:CF:57:31:B0:3E:AD:E7:56:37:5B
            X509v3 Authority Key Identifier:
                keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:db:c8:ff:c3:fa:7f:aa:25:4e:36:b6:56:f1:da:8f:d6:41:
         35:3d:cb:96:0d:7d:c1:29:08:42:ac:c5:1b:2e:69:5e:c3:56:
         13:96:f3:1f:81:26:aa:5a:cf:94:10:21:c7:0a:3a:93:60:8b:
         50:4a:30:96:8e:c1:a9:d4:5e:b3:d5:d5:85:84:ad:a3:d3:47:
         72:66:8a:20:29:26:00:3d:e4:4c:a8:cb:ec:4f:c8:b5:05:a4:
         a2:77:bb:6b:b2:a5:5b:33:81:5c:cd:d7:0b:2f:64:f6:a4:f5:
         19:0b:d9:2b:a9:ec:e3:59:75:a0:a5:fd:90:25:1e:2c:b1:44:
         76:77:2c:4c:83:9c:68:05:18:51:a8:6c:3c:88:3d:1a:cf:1c:
         df:ba:4c:5e:1e:16:36:f1:3b:02:da:ea:bb:02:0c:5b:68:0b:
         db:2c:63:b1:75:e1:a4:65:09:7d:6c:c0:c9:07:d9:43:76:74:
         2d:bc:91:6b:3f:d8:75:52:ba:6a:4e:ed:14:44:88:ea:66:a8:
         f6:e0:6b:6d:ca:a8:94:28:bf:29:42:14:9a:ab:ed:1b:17:45:
         f5:8a:e8:fd:3d:d9:c2:43:ab:8a:c4:2e:ce:7d:f3:ee:d2:48:
         52:2d:00:fb:e5:c7:62:02:5d:a3:2a:a7:0d:b4:b9:92:d9:a3:
         f2:36:69:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:55 2026 by rpki-client