Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          wORuLAIDXBrFuI1/z6oM+TzJ0MmeJQ3pFiM6grYb+aU=
Subject key identifier:   DA:4F:42:33:D2:4E:14:31:DB:DC:CF:E0:A4:6E:A0:B9:A3:89:8E:44
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       019D0E8DE2BCAA245487A07D5319CD71F18E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1898
Signing time:             Sat 21 Mar 2026 04:01:12 +0000
Manifest this update:     Sat 21 Mar 2026 04:01:12 +0000
Manifest next update:     Sun 22 Mar 2026 04:01:12 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: BEweZkYWIF0h+8db0N2oUKBvW2B0xaBYk4VOI7hTmFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 22 Mar 2026 02:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:0e:8d:e2:bc:aa:24:54:87:a0:7d:53:19:cd:71:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Mar 21 04:01:12 2026 GMT
            Not After : Mar 22 04:01:12 2026 GMT
        Subject: CN=da4f4233d24e1431dbdccfe0a46ea0b9a3898e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:83:4c:9a:08:19:fe:cb:04:f8:09:45:d2:54:
                    8e:8a:3f:30:9c:74:9c:57:31:c4:44:ba:d4:c8:fa:
                    b2:ed:92:e5:85:18:44:0e:42:d9:3d:33:8a:f8:ae:
                    c7:d1:c6:46:a0:09:1a:2c:d3:c5:81:3c:19:a3:65:
                    9e:1b:f7:c8:4f:0f:f9:f3:55:84:b0:06:7e:37:ff:
                    6b:6c:83:55:f7:c1:e4:e2:9f:4d:02:8d:a3:bf:fd:
                    09:36:2e:77:66:85:93:cd:1d:47:17:22:21:34:4d:
                    92:6f:ae:1f:bc:0c:e2:86:d8:0f:81:21:5e:b3:4d:
                    8d:26:cc:35:f9:03:fd:fe:b1:79:8a:20:d4:c6:6d:
                    31:b7:09:93:73:c1:b3:b6:42:e8:da:8b:69:6c:70:
                    9b:b9:62:20:04:56:8f:55:1b:18:3b:53:65:81:51:
                    b1:82:ad:67:5e:ec:4d:0b:33:3f:fe:1a:3e:e8:3d:
                    37:8a:e9:f7:26:09:ae:2b:37:e4:c7:18:5a:69:9f:
                    14:b9:82:7a:c9:97:e9:e1:1e:6c:3f:cc:1c:72:97:
                    a0:c1:ec:f0:8b:e7:82:ee:c2:41:72:18:bf:20:36:
                    d0:c8:e6:d9:bd:d4:07:35:b6:89:56:8e:b7:a8:f7:
                    a6:00:4c:3b:ec:65:7d:76:16:06:86:fa:69:67:ab:
                    81:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4F:42:33:D2:4E:14:31:DB:DC:CF:E0:A4:6E:A0:B9:A3:89:8E:44
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a4:8a:c5:6a:e0:67:17:24:ca:5b:7e:ed:4f:6b:01:d6:43:
         e8:ad:03:8f:2f:bf:d8:ab:f9:d5:f4:59:3a:85:da:f5:ad:4e:
         d1:07:b7:4f:f7:72:f8:7f:01:d2:a7:9c:78:5f:92:97:36:c5:
         65:87:3f:9c:ce:1a:4d:10:a0:07:08:49:dc:0d:c1:fd:d0:7b:
         44:2c:69:d2:90:02:48:5a:e4:d1:29:1d:ee:79:43:ff:d0:dd:
         9d:c3:1b:71:b0:95:9c:74:4d:f1:b2:7d:89:4a:64:af:88:68:
         42:46:8c:1a:3f:3a:11:c8:50:c9:12:ea:e4:b2:f4:4c:ee:84:
         a2:df:bd:e5:b9:e7:7d:bf:04:95:06:78:4d:25:5e:a0:da:a8:
         ac:e9:91:84:88:ca:d8:6c:6e:27:2f:3d:b2:5d:f8:57:04:2d:
         70:eb:4f:65:d7:6d:7c:01:57:65:e2:4d:43:bb:c1:d5:48:bf:
         da:11:73:74:cf:be:67:7d:0a:0c:0e:b9:26:d9:5a:06:bd:f8:
         d7:7f:53:59:b7:2a:1d:af:0d:55:38:9c:a6:5a:41:11:4e:ee:
         86:f8:82:35:04:d9:1f:a8:21:42:17:13:a7:6d:65:c0:60:dc:
         5b:a3:63:2b:32:d5:ed:20:4c:c5:fc:32:f5:f2:1c:53:d5:8b:
         ef:32:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:12:02 2026 by rpki-client