Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          +96okCBo+gJ1Nf5GT/BYzybmrY5YZGLYEUYPOm9Y1ms=
Subject key identifier:   3C:2D:D6:73:BE:53:38:F2:F0:19:C0:88:34:8D:04:FD:D4:9F:F3:1D
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       019CE55AE8624CB353D73BC737315A3F3971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          0C86
Signing time:             Fri 13 Mar 2026 04:01:05 +0000
Manifest this update:     Fri 13 Mar 2026 04:01:05 +0000
Manifest next update:     Sat 14 Mar 2026 04:01:05 +0000
Files and hashes:         1: 9k0dsqb1d6KW0H9rWBxGERBZOic.roa (hash: FhB4cjzWorn9MftYwNSX8WEXFBMVO6EYBKbMGx2rmWM=)
                          2: MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa (hash: jmYre0cvNWduC7MGqKdKXsaIMO8Tset9JAHfEBid25c=)
                          3: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: rkEIqUnAG69RodU6xeu0LvBCtJMudYCMIn9zUzxBDXo=)
                          4: mlq23mwn4gLppdq_n5N8dl-i1JU.roa (hash: mWWAMciQpKRURn7RkDiPvmb9dly+JR/rksPzC6qiQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:e8:62:4c:b3:53:d7:3b:c7:37:31:5a:3f:39:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: Mar 13 04:01:05 2026 GMT
            Not After : Mar 14 04:01:05 2026 GMT
        Subject: CN=3c2dd673be5338f2f019c088348d04fdd49ff31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9f:1a:57:36:69:a2:48:43:21:8b:be:66:3c:
                    eb:62:08:32:f3:98:db:9d:e9:6f:63:6b:4f:50:81:
                    51:f2:53:d5:e3:8f:8c:a8:1b:0b:e3:d6:48:d5:ea:
                    30:14:33:bb:4a:a3:87:55:55:70:a9:df:07:64:7c:
                    35:54:fc:7a:b8:8a:d8:b0:d1:f9:c3:b1:b7:b6:23:
                    bc:55:63:43:a0:ba:34:e6:93:90:43:70:31:65:f5:
                    16:db:89:05:87:df:21:82:7f:a7:66:1f:02:8f:58:
                    69:6f:4d:1d:4a:fa:78:de:92:95:f3:53:b9:1e:d1:
                    fc:27:93:a4:fc:42:e8:5b:43:58:43:a4:6e:ac:29:
                    98:cb:3a:f5:76:f8:7e:b1:4a:6b:79:b2:d1:a7:f3:
                    f7:af:34:e4:02:d8:24:56:48:ad:ab:26:88:2c:fd:
                    d1:ea:d3:44:bc:2a:2e:41:cb:8b:89:68:9c:80:33:
                    cd:d6:71:ce:46:a7:38:79:80:16:e2:e4:08:da:ae:
                    d0:d8:dc:4f:8c:96:c5:b6:79:35:8b:b1:48:cc:33:
                    69:4c:b1:95:b2:12:7e:2a:e5:82:42:3f:61:fb:66:
                    db:ea:2c:b7:c7:aa:e5:38:39:ed:c0:8c:a3:0b:a3:
                    b3:18:2f:b6:bd:a7:4c:b2:1e:c0:8b:ee:b7:18:fd:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2D:D6:73:BE:53:38:F2:F0:19:C0:88:34:8D:04:FD:D4:9F:F3:1D
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c7:b4:0b:5f:82:9d:0b:d5:44:6d:71:2f:af:50:39:9c:28:
         f2:3f:f9:fc:05:0d:d0:0b:8a:e3:41:18:2e:a1:f1:0c:fc:f1:
         e8:e7:94:d1:4e:6b:f3:0a:6d:e2:1f:4e:29:25:87:f0:c5:a8:
         ee:7a:a3:17:30:69:28:4b:c1:13:f8:c1:2f:a9:8a:d6:c9:64:
         09:38:dc:da:aa:96:c9:ff:2e:c6:f3:a7:51:06:dc:a6:bb:e6:
         9b:74:04:9e:50:67:ef:ad:97:94:48:63:f6:ea:e1:dd:89:8e:
         3c:4a:81:64:5d:3a:bb:15:e9:74:b0:b3:bc:6e:c1:13:05:53:
         b3:b4:b6:94:55:9c:c5:af:4e:b8:91:e9:ed:b0:18:ca:15:ef:
         00:06:a9:f8:aa:27:e8:a3:ba:49:24:14:c4:68:db:61:38:21:
         fc:eb:25:05:1a:4c:98:70:66:15:26:f4:2e:6a:d5:b9:10:06:
         72:bb:ed:97:c5:d2:04:88:56:16:2c:cf:55:ad:2b:68:01:18:
         1a:17:fc:1d:b6:a1:c1:30:60:2d:64:ce:12:51:88:20:99:15:
         5c:e5:30:68:79:98:9e:6b:5c:83:86:08:41:f0:a0:92:3c:2d:
         d6:cb:ae:cc:cb:4b:e4:51:f4:53:f9:da:6d:1b:83:13:d0:7b:
         65:18:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 14:55:16 2026 by rpki-client