Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          i1J2v1MTd9X0A2HHz8xYs2s5lMoVZWTOG5pek7Wpb7k=
Subject key identifier:   6C:70:02:6A:22:2E:C6:73:16:4C:8E:86:50:05:EC:66:77:69:66:ED
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       019D265F9305567E7613762D63E2D0BCF6BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          1887
Signing time:             Wed 25 Mar 2026 19:01:30 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:30 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:30 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: zhLOMSyT3AULieTxf516NiZ6RtQFwZsa/XYY+Yw329E=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:93:05:56:7e:76:13:76:2d:63:e2:d0:bc:f6:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Mar 25 19:01:30 2026 GMT
            Not After : Mar 26 19:01:30 2026 GMT
        Subject: CN=6c70026a222ec673164c8e865005ec66776966ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0b:a3:6a:53:37:a9:a6:25:77:6b:84:83:51:
                    c9:e6:35:2e:a0:da:d7:67:e9:43:b2:08:66:1f:33:
                    83:e7:9b:78:b0:ae:78:e9:55:77:f0:9e:23:64:cd:
                    c1:b3:32:c8:6e:ca:11:9c:02:8f:a0:6e:db:ab:03:
                    87:19:8b:ad:ed:13:eb:83:1e:1c:d2:ad:f8:13:10:
                    c4:71:f9:6c:48:94:2a:22:d7:bb:97:56:a2:85:f2:
                    6e:78:6b:d8:27:0e:cb:99:b0:c2:aa:44:98:ef:7f:
                    43:16:ba:17:dc:04:8c:86:67:ed:af:b1:c0:68:35:
                    43:ba:b5:09:ea:99:24:8a:fc:6d:91:62:d4:53:57:
                    2b:12:75:c4:b3:ec:3c:83:64:b7:b8:b8:d7:04:1f:
                    5d:98:21:de:04:e3:44:7e:cf:63:1f:8d:0a:37:fa:
                    48:81:17:04:30:43:14:c7:09:d4:36:ed:96:ce:6a:
                    ed:a3:5a:14:17:69:8a:78:9b:44:1f:97:89:eb:e0:
                    dc:45:4b:7a:af:c3:7f:06:ca:54:59:ea:b3:0c:02:
                    98:63:74:77:85:30:3c:37:87:d8:74:bb:88:d8:cf:
                    5b:90:ea:3e:25:90:a9:f1:73:c0:2d:be:49:32:2a:
                    a7:72:39:e7:aa:05:1c:b2:61:36:9a:63:a7:02:d7:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:70:02:6A:22:2E:C6:73:16:4C:8E:86:50:05:EC:66:77:69:66:ED
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b2:81:4a:5c:2e:1d:1f:07:31:53:78:a5:d0:ac:69:b3:c3:
         a2:34:a1:6f:db:2d:bd:73:0b:9a:a0:1c:1e:be:24:6e:e0:95:
         31:76:47:2e:b7:ba:06:56:b9:e6:07:53:17:8d:f1:79:ff:16:
         ff:10:2a:32:f3:b5:75:bd:31:c2:cb:d3:64:14:ca:d8:1d:54:
         de:c4:8c:1b:e5:6b:cd:63:62:2a:9c:de:48:3a:c6:e0:6f:8e:
         a3:fe:d2:91:f3:bb:3a:e5:9a:e3:95:af:07:74:d6:d7:6c:1f:
         4f:d4:3a:c7:1f:40:75:34:6e:e5:30:64:3b:4c:2b:9e:7a:9a:
         3d:4a:5e:e5:72:1a:e8:65:d7:98:a9:c2:b2:5c:38:61:2f:2f:
         52:49:56:46:be:6b:87:bf:64:83:ac:07:2b:be:23:9f:26:bb:
         10:b5:23:73:d4:25:af:11:73:5f:df:09:1b:16:34:f4:cd:48:
         d1:35:c2:da:19:bc:1a:68:0f:07:95:fa:3f:86:da:1e:81:17:
         21:bb:a5:04:66:ac:39:6a:39:14:f8:9a:0e:72:5d:88:cd:60:
         c4:65:43:8b:e8:22:3f:93:42:f0:e5:f2:dc:3a:15:30:cf:bc:
         eb:cd:b3:1a:76:9b:71:c1:2a:b0:ff:f9:51:d4:2b:44:1a:72:
         10:c7:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:32 2026 by rpki-client