Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
File:                     fi7aaVKwPoukWZe-YV16vuF4T4M.mft (raw, json)
Hash identifier:          f8pvBhk5uiF/zGdO82cCQc9PRxq3qR80aUU//13sQpA=
Subject key identifier:   76:64:A1:F2:58:D3:DC:35:CB:8D:F8:3B:EF:9F:1D:0C:7B:28:4C:DC
Authority key identifier: 7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83
Certificate issuer:       /CN=7e2eda6952b03e8ba45997be615d7abee1784f83
Certificate serial:       019CE55A712AD3B750B08A2EF001F9084E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
Manifest number:          0C8B
Signing time:             Fri 13 Mar 2026 04:00:35 +0000
Manifest this update:     Fri 13 Mar 2026 04:00:35 +0000
Manifest next update:     Sat 14 Mar 2026 04:00:35 +0000
Files and hashes:         1: 08gQk2AeldcK_y6tYivNi31VDhw.roa (hash: iDSr2+dL188PsGjLi4V4pKrhdyzfHy95/dG6MIkWF8U=)
                          2: fi7aaVKwPoukWZe-YV16vuF4T4M.crl (hash: C2VtzQ4rpM99uEz90K3tgMcBc/qMyou1xztMxoVmUHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:5a:71:2a:d3:b7:50:b0:8a:2e:f0:01:f9:08:4e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2eda6952b03e8ba45997be615d7abee1784f83
        Validity
            Not Before: Mar 13 04:00:35 2026 GMT
            Not After : Mar 14 04:00:35 2026 GMT
        Subject: CN=7664a1f258d3dc35cb8df83bef9f1d0c7b284cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:2f:be:23:88:46:00:9b:b0:25:14:02:93:
                    bc:76:fa:86:8e:b8:44:c8:e0:5f:57:de:4f:35:5a:
                    19:08:b0:f9:61:d3:d1:69:de:5a:b7:15:f0:4f:d7:
                    64:a0:61:bb:89:e0:40:d1:55:84:73:8b:5f:95:d0:
                    5f:7b:aa:2e:31:6d:24:99:5e:5d:45:24:76:6b:60:
                    c1:dc:66:8a:d5:c9:51:30:a4:ee:c1:80:98:e3:84:
                    7d:bf:ce:05:5c:5a:35:77:2d:b6:98:53:1b:00:46:
                    b6:80:b4:92:e5:34:bd:de:4e:bc:1e:4a:8a:df:4e:
                    8e:57:7a:2d:1e:6f:52:ec:3e:f3:73:5d:b2:51:9a:
                    e7:be:c8:6f:43:b9:bf:67:c2:a5:de:8b:f0:48:a0:
                    f8:f7:1a:c6:1d:96:2a:f0:da:5c:3d:d3:30:68:18:
                    81:9e:dc:4c:e6:48:74:f5:68:60:a4:c7:26:25:4d:
                    fc:14:16:18:4e:7c:96:2e:6e:22:47:cc:d3:2e:d2:
                    45:10:08:36:c8:b3:80:f9:57:1c:28:2e:d2:4b:18:
                    01:86:f2:76:02:b8:73:18:48:76:4d:1e:84:ac:7a:
                    a8:f7:43:02:8c:cf:81:c1:e4:0f:f4:2c:2a:9c:80:
                    a1:f2:c8:27:38:0c:2c:d3:69:6a:ed:22:aa:e8:fb:
                    dd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:64:A1:F2:58:D3:DC:35:CB:8D:F8:3B:EF:9F:1D:0C:7B:28:4C:DC
            X509v3 Authority Key Identifier:
                keyid:7E:2E:DA:69:52:B0:3E:8B:A4:59:97:BE:61:5D:7A:BE:E1:78:4F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fi7aaVKwPoukWZe-YV16vuF4T4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/380400-dc2e-494a-891a-2f2300b6e3d9/1/fi7aaVKwPoukWZe-YV16vuF4T4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d4:aa:a2:d2:59:a9:d0:08:e7:38:90:8d:83:04:8e:b4:26:
         fe:79:f0:14:e0:ba:13:2f:41:d8:cf:28:55:b6:5c:ca:77:3e:
         4d:1f:88:e4:6c:9e:7b:33:6b:1a:e1:b8:f4:dc:80:66:e7:85:
         99:55:bb:04:a5:b6:53:1f:49:ad:64:f8:74:56:80:fb:f2:be:
         f4:45:7e:68:7e:51:3c:d1:9c:da:94:e1:74:0a:c0:62:74:33:
         8b:00:5a:06:6d:07:01:e6:eb:80:c2:ff:f4:67:2e:13:e6:98:
         bd:6d:f6:e0:67:1c:b8:79:86:13:1a:a8:62:65:bd:b8:11:d3:
         32:69:25:67:52:af:a1:00:c7:b0:a2:ee:aa:40:32:a9:44:28:
         4a:5c:f7:78:61:ef:b1:ab:aa:a7:75:64:72:5f:f5:de:86:5d:
         e4:5d:98:8d:cd:a1:39:01:38:fc:db:5b:ca:38:b6:02:2e:45:
         e6:cd:b1:d1:d6:fe:b0:4a:03:a8:f7:7f:11:11:fa:0b:9c:76:
         8e:a7:2d:8c:a5:6f:7a:c1:26:f6:b7:da:78:d7:3a:6a:30:a8:
         17:ba:21:5e:bf:50:93:f5:50:60:fa:13:48:56:33:79:98:8a:
         a5:f2:7c:a1:80:13:79:0f:48:9b:65:13:0b:49:28:45:84:50:
         f1:33:d6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:23:39 2026 by rpki-client