Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          A66/Cy0VOq7xjOAyJG5eLCJS+tua3bAYyjtdrtpqjyc=
Subject key identifier:   9D:82:92:78:97:55:A3:66:AA:51:2E:62:D4:B7:01:7F:37:12:63:C6
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019CE9DCABE289AFEAFC37492EFAAFBC9756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          17FC
Signing time:             Sat 14 Mar 2026 01:01:18 +0000
Manifest this update:     Sat 14 Mar 2026 01:01:18 +0000
Manifest next update:     Sun 15 Mar 2026 01:01:18 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: c6UYb5eDUGvOkUUuatQmUz0MVDml0xJkou6yHHg9mWg=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          5: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          6: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          7: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 01:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e9:dc:ab:e2:89:af:ea:fc:37:49:2e:fa:af:bc:97:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Mar 14 01:01:18 2026 GMT
            Not After : Mar 15 01:01:18 2026 GMT
        Subject: CN=9d8292789755a366aa512e62d4b7017f371263c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:41:47:54:46:31:76:18:bd:54:22:1e:de:1b:
                    cc:f6:d4:7f:01:fc:75:9c:d9:37:97:b2:83:74:36:
                    ec:96:15:3c:ba:49:11:65:4a:39:73:fe:67:94:bd:
                    6f:84:20:e0:be:51:25:42:35:4c:16:75:80:f4:77:
                    8c:20:13:67:ac:09:4d:ce:d5:d5:af:8f:6f:7a:90:
                    59:a6:48:c4:6a:8b:5d:7e:85:4b:2a:14:6a:3a:e4:
                    82:ca:ae:c1:86:c7:c3:d3:57:ac:a1:72:9a:f2:0e:
                    42:bb:2a:87:60:0a:49:c8:80:16:55:76:b3:03:d2:
                    bf:0f:db:2b:fd:48:b5:f0:d4:60:e6:71:d6:e8:79:
                    48:0f:99:43:67:e6:4d:e0:02:73:2b:dc:98:31:93:
                    3d:c4:7d:e9:36:7f:21:ae:37:8f:24:e3:81:19:ce:
                    26:91:96:9e:55:63:43:63:4f:96:92:34:e5:9c:eb:
                    38:2a:1c:b1:5d:ca:8f:d2:da:2b:c1:73:28:aa:69:
                    ca:ec:33:69:e3:9a:16:d3:63:dd:c6:d3:79:1e:b6:
                    b0:b9:ab:e8:0c:34:7b:74:ed:16:a5:35:4a:e8:dd:
                    48:6d:f5:fb:a5:23:7c:96:37:3e:ae:e8:b3:0c:be:
                    dc:0a:8d:25:f8:61:cb:d3:d6:22:e6:c0:d7:95:4c:
                    e3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:82:92:78:97:55:A3:66:AA:51:2E:62:D4:B7:01:7F:37:12:63:C6
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:91:68:31:4d:22:64:3f:ec:99:9f:87:0e:1c:f5:4e:c1:49:
         91:af:9f:a6:63:88:c5:19:13:2b:f0:8d:72:c8:65:6c:fe:99:
         a2:10:15:be:f9:2c:18:0a:a1:17:a4:06:32:0c:be:c1:8c:d1:
         f9:18:ad:e2:2b:5d:d9:c1:30:ca:2e:c1:5f:ed:9b:76:94:5f:
         15:f6:00:2b:98:e5:a7:80:e9:c4:cc:11:c1:ee:ef:00:5c:46:
         07:c0:69:86:d5:38:88:2d:2a:eb:6f:09:cd:0c:59:d8:3a:4a:
         fb:39:35:b2:f9:44:95:86:f5:79:d5:9c:b3:c1:66:e9:0d:9d:
         2d:d2:c8:98:25:f5:80:6b:71:b0:21:4e:8f:7c:d3:ff:de:06:
         cf:be:a1:af:bc:e1:3d:53:c7:51:4b:c4:b2:a7:6f:78:a1:23:
         ff:f2:99:37:bd:7c:63:47:81:dd:54:df:94:07:50:05:f0:92:
         37:64:b2:81:c0:14:a9:e9:ad:95:c3:60:62:2b:ae:8f:76:cf:
         3e:80:a6:a2:37:7c:f8:00:7d:98:8a:9f:24:48:f9:2e:88:df:
         68:f3:f0:d7:4b:ce:71:f2:e7:74:11:c9:23:79:5d:67:ae:59:
         50:a7:fd:7b:e7:86:ba:70:de:a6:03:2a:9b:37:96:36:36:71:
         65:28:4e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:11 2026 by rpki-client