Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
File:                     FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft (raw, json)
Hash identifier:          DQrcmSD5f7qUdfDrHD/Mr74EASiEv7a5pSLs8M+rqTU=
Subject key identifier:   41:C3:AE:F0:89:90:9E:63:D4:40:1F:DB:EB:37:48:14:94:D1:E6:0D
Authority key identifier: 14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC
Certificate issuer:       /CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
Certificate serial:       019D3865624CF7E46C8ABE4F3703A7DBDEC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
Manifest number:          0F13
Signing time:             Sun 29 Mar 2026 07:01:01 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:01 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:01 +0000
Files and hashes:         1: FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl (hash: lRhzD6KLg/Y3rpGr+XTGNiGXORa7NR5oiX5r5aCMWGU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:62:4c:f7:e4:6c:8a:be:4f:37:03:a7:db:de:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d0843b245fc2735cf247504c4f1bd855ffcefc
        Validity
            Not Before: Mar 29 07:01:01 2026 GMT
            Not After : Mar 30 07:01:01 2026 GMT
        Subject: CN=41c3aef089909e63d4401fdbeb37481494d1e60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:28:ac:0e:57:c8:76:32:25:8b:fd:1b:0c:
                    39:54:c7:d4:42:02:18:7a:57:2a:3e:51:d2:fd:7f:
                    48:84:a9:4d:fd:3e:0e:7a:4a:d0:9b:74:7e:3a:0f:
                    36:61:8b:dd:34:71:6d:37:3f:85:db:22:43:dd:2f:
                    11:b7:ca:c2:d2:11:4a:3e:32:cf:96:23:30:2b:c3:
                    cf:38:2d:ef:9a:0c:ff:77:ce:99:2c:f4:0f:a4:fb:
                    d1:e4:43:72:f7:a5:82:b1:35:20:3c:32:a8:bf:56:
                    60:fd:73:03:da:10:eb:43:74:b1:cd:49:0a:5d:fb:
                    71:ad:b2:9a:45:1d:6b:d9:96:4f:5e:ef:cf:d8:d4:
                    fd:6d:bf:26:7c:06:f8:ba:55:19:9a:9c:fc:2e:ea:
                    59:15:c5:3c:5c:7a:ef:57:5e:8c:b0:6a:76:8b:85:
                    96:30:82:b7:a0:24:da:91:52:0f:b9:46:b1:16:ac:
                    4c:40:33:56:50:cf:6f:56:ad:4a:e7:f7:5b:f0:5e:
                    8d:90:1d:e8:0a:8c:87:57:d1:9b:83:14:9a:01:dd:
                    e2:e6:10:aa:38:87:9b:ac:90:a9:11:42:cb:b8:b3:
                    5e:b9:5c:99:65:33:94:70:d8:04:0c:fe:14:0e:e4:
                    93:9a:0a:57:1d:43:f0:2c:ad:a0:9a:23:f8:91:9e:
                    77:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:AE:F0:89:90:9E:63:D4:40:1F:DB:EB:37:48:14:94:D1:E6:0D
            X509v3 Authority Key Identifier:
                keyid:14:D0:84:3B:24:5F:C2:73:5C:F2:47:50:4C:4F:1B:D8:55:FF:CE:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNCEOyRfwnNc8kdQTE8b2FX_zvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0c9b35-3952-4e2f-b4ce-721bebd8a1d5/1/FNCEOyRfwnNc8kdQTE8b2FX_zvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8c:72:c7:15:a9:f4:71:30:c2:18:61:76:ce:b6:ac:a5:20:
         a9:f3:96:c9:13:66:21:0b:6b:15:66:8d:14:f8:a1:10:26:80:
         41:33:f1:9b:fe:58:a1:7a:95:9d:83:70:49:6d:40:09:28:ef:
         08:b7:6a:b9:f4:0d:b8:9c:f6:be:88:12:32:40:f5:55:04:7a:
         f4:c7:f5:09:a0:6d:1d:82:6d:31:c2:f8:6c:04:d7:96:90:4b:
         ea:61:1d:4d:ac:b8:2d:78:36:45:c6:ba:08:3e:37:b4:5c:be:
         0e:24:cc:e3:b2:db:11:87:a6:b1:5e:d0:c9:b3:6d:64:b9:15:
         20:5f:ed:d2:a0:39:91:81:73:2b:2a:dd:aa:10:78:bc:45:21:
         64:58:d8:74:55:00:ab:48:90:97:f9:e0:86:d6:c7:85:db:b3:
         3c:73:80:fc:df:bd:43:54:93:40:0d:51:54:70:f0:3c:f1:e0:
         8b:fb:c3:16:7e:3a:40:6e:45:36:77:93:b8:de:14:4a:fe:fb:
         f4:39:12:a6:21:51:2b:83:15:00:f9:77:b8:a3:9b:43:46:82:
         a7:cd:f8:7d:8f:27:cd:b1:45:a0:bf:b3:13:69:f4:d9:8c:a2:
         e8:a3:31:b4:d3:35:71:65:f8:ac:86:aa:0e:f0:d7:91:c6:54:
         79:f1:b2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:22 2026 by rpki-client