Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File:                     FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier:          YStyLcWPO0ae/fBugWCZNGZMqMyHTMDVTuRlUs2ObUU=
Subject key identifier:   3E:88:79:95:87:E4:F1:56:DC:62:CF:A7:14:1E:E5:05:3D:6A:ED:9F
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer:       /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial:       019D2A7259BF7EA9CA619B2E7E690288CD6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 14:00:30 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:30 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:30 +0000
Files and hashes:         1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
                          2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: IgKpNPKR/63nlFmYZlksTpksqQLBlXF+qu+gGvRRQOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:59:bf:7e:a9:ca:61:9b:2e:7e:69:02:88:cd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
        Validity
            Not Before: Mar 26 14:00:30 2026 GMT
            Not After : Mar 27 14:00:30 2026 GMT
        Subject: CN=3e88799587e4f156dc62cfa7141ee5053d6aed9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:fb:a1:22:f3:42:d2:d8:8d:9d:09:4e:b3:5f:
                    50:97:a7:7b:96:79:0e:65:fa:83:45:7e:a5:30:0f:
                    63:0f:0f:be:52:a5:71:56:54:eb:92:82:fb:2a:d4:
                    e6:27:18:3c:f7:5d:3f:89:c7:a1:2d:8f:5a:24:f0:
                    7a:f0:28:78:2a:c6:08:54:c3:dc:63:b8:d5:bc:ee:
                    45:f9:58:81:57:95:d8:06:04:99:c1:02:e3:98:25:
                    f7:f0:78:04:18:aa:46:5f:be:61:40:fc:08:1e:ca:
                    6e:57:2c:c7:18:65:e0:11:e6:0b:6b:34:03:d8:e0:
                    9b:71:cd:22:1e:71:3a:86:4c:75:3c:8e:ff:73:34:
                    dd:39:80:01:bc:c1:b3:cd:bc:26:1c:3c:be:72:98:
                    29:c7:29:2b:c7:12:e1:e7:bd:05:d7:fa:aa:56:41:
                    e6:16:3e:7f:87:ee:9e:0b:e8:01:ca:c5:4e:d2:98:
                    0e:5b:63:45:a2:c7:5d:56:e2:cf:ba:b8:7a:4c:90:
                    52:a0:14:da:ac:d1:6b:af:01:e3:79:41:b6:d3:18:
                    c5:bd:87:00:b2:60:30:29:d8:ec:61:2c:87:89:18:
                    c4:23:cc:be:33:1f:6e:b5:21:85:2d:c7:c2:1f:bb:
                    15:eb:7f:fc:92:12:b1:66:ea:c8:05:ad:fb:af:7a:
                    c9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:88:79:95:87:E4:F1:56:DC:62:CF:A7:14:1E:E5:05:3D:6A:ED:9F
            X509v3 Authority Key Identifier:
                keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:09:10:91:48:bd:bb:f5:41:bf:67:ba:55:53:d8:4b:8b:b8:
         ba:8b:74:de:84:ce:ee:a9:65:05:19:4c:6c:c1:a1:35:23:dd:
         5c:32:21:71:3f:24:e1:53:76:6f:52:d3:7f:6d:0b:9b:e9:10:
         8b:9d:77:24:93:aa:94:84:c6:62:37:2a:60:6a:0d:af:17:e6:
         65:d0:7e:4a:76:b3:bd:1f:02:dd:34:8d:53:c1:58:e6:bd:6b:
         f8:32:30:0d:26:94:f0:d3:c7:80:e6:17:76:1b:7c:cf:74:f7:
         99:40:b6:fb:25:a7:05:d8:23:c7:ba:68:e2:9f:9d:8a:c7:66:
         ee:e4:db:44:49:b1:e4:83:96:e3:43:0d:b7:75:52:80:bb:f5:
         06:93:15:6a:56:e9:1a:c6:13:d9:d4:d8:f1:74:db:d6:3b:fb:
         c2:d1:80:cb:88:20:6d:63:eb:99:48:49:bc:c6:68:34:c4:28:
         7a:ed:52:b5:f8:b3:0a:45:ba:4f:a6:34:75:3e:1d:24:98:e0:
         01:d4:8a:9e:2e:4c:4f:33:04:34:88:0b:58:01:93:86:3f:de:
         ea:c7:a4:b4:cd:e7:29:4a:0d:f8:41:6b:fe:b1:c2:c0:4a:d1:
         6f:ee:c2:43:7c:d8:ab:95:02:0d:3a:34:f5:cf:b9:75:58:53:
         83:3b:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:45:36 2026 by rpki-client