Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
File:                     F2MhQoAFWkfetVT-nLKNwMF5IwI.mft (raw, json)
Hash identifier:          A0uiz30aQ3SeNXbtIlfEcF5lAD3gVj/tGvCnoPb5lqs=
Subject key identifier:   AE:69:15:34:A9:D8:10:F7:00:F8:B4:CA:5A:6C:1D:00:C3:66:7B:2F
Authority key identifier: 17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02
Certificate issuer:       /CN=1763214280055a47deb554fe9cb28dc0c1792302
Certificate serial:       019D3909BB450131DF3C1523D496A7268788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
Manifest number:          0F23
Signing time:             Sun 29 Mar 2026 10:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:32 +0000
Files and hashes:         1: F2MhQoAFWkfetVT-nLKNwMF5IwI.crl (hash: 5rSCzk050LyHKOkEnK0u9YpwaRNWfskfoRFyZ9jQgNU=)
                          2: SR844C9CRl27s_FrBd7vLnyUdho.roa (hash: IBZrX7BjbJAmk2KBJkfUZSId5sdEA+S6S7NN5rGVAOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:bb:45:01:31:df:3c:15:23:d4:96:a7:26:87:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1763214280055a47deb554fe9cb28dc0c1792302
        Validity
            Not Before: Mar 29 10:00:32 2026 GMT
            Not After : Mar 30 10:00:32 2026 GMT
        Subject: CN=ae691534a9d810f700f8b4ca5a6c1d00c3667b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:44:f5:41:51:0b:bf:e0:be:f8:49:bf:0d:d4:
                    35:a0:3b:43:cd:a3:50:ef:47:30:01:04:ee:34:04:
                    c8:a0:99:5b:a1:32:59:9c:d0:6b:67:84:60:2e:73:
                    ce:5b:d2:ff:0f:cf:ac:90:e2:89:a2:c2:55:9c:bb:
                    26:96:78:e2:df:c9:78:2e:db:58:97:4c:16:e5:ed:
                    8b:96:15:f6:fd:ca:2b:2e:ab:73:20:a9:24:a8:17:
                    07:3c:13:63:fe:6f:9a:94:5c:11:f7:3c:e2:68:54:
                    c5:08:d2:68:c5:76:bd:8a:48:29:56:4c:fa:19:c8:
                    8e:ee:f7:f2:97:ef:23:76:23:11:5b:10:c1:f4:5d:
                    7f:08:94:dd:16:10:e3:82:b4:d5:00:58:e5:8d:26:
                    d8:8b:62:06:56:af:58:42:0b:0f:9e:62:5d:41:6c:
                    5a:9d:a8:6d:be:4e:c4:0b:e1:03:70:fb:c6:e1:ff:
                    8f:b2:0a:d6:99:e5:10:e2:25:e0:e8:64:03:89:19:
                    13:af:57:3b:2e:7e:03:17:ea:32:85:45:65:9b:b2:
                    48:71:7b:b7:80:fc:63:49:00:7d:b7:09:c0:6b:26:
                    31:36:13:1d:68:4d:0e:9c:f5:34:db:ab:ef:51:c6:
                    48:af:53:97:08:11:ee:9f:47:da:f8:4a:ac:20:83:
                    87:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:69:15:34:A9:D8:10:F7:00:F8:B4:CA:5A:6C:1D:00:C3:66:7B:2F
            X509v3 Authority Key Identifier:
                keyid:17:63:21:42:80:05:5A:47:DE:B5:54:FE:9C:B2:8D:C0:C1:79:23:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2MhQoAFWkfetVT-nLKNwMF5IwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/cfbcfa-88da-488e-ace1-7967962e7c75/1/F2MhQoAFWkfetVT-nLKNwMF5IwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:90:9c:c7:be:7f:5b:72:74:cf:d9:ed:0c:41:0b:f7:bd:98:
         60:9e:57:de:76:02:2a:38:4b:db:c5:5b:72:a5:73:8b:ab:a0:
         2c:cc:2e:39:69:66:5b:e7:fe:f8:e7:c2:10:86:28:66:76:8b:
         38:bb:1a:4f:66:5e:3b:9f:c7:1d:ef:7b:1c:b6:8b:df:42:22:
         1c:62:83:71:32:18:a1:1d:a1:13:5c:31:57:2b:28:68:0b:10:
         ad:ab:b0:5e:1d:fa:85:44:99:ab:02:f1:51:64:9e:22:6c:da:
         80:97:0b:54:06:e7:2b:53:87:f1:c3:94:26:71:21:2a:56:a7:
         57:ec:d4:99:bf:7b:2f:7c:09:41:e6:16:aa:ab:a2:4e:af:7b:
         57:dd:12:1b:4a:7c:f5:d3:b0:b9:71:38:3a:3e:07:55:41:87:
         81:3f:52:e5:08:68:f6:44:4b:f0:3b:10:cf:66:dc:b4:f0:f1:
         2b:e2:0a:02:b8:a9:4f:72:ff:c2:38:c1:b1:8c:4a:2a:8f:86:
         10:14:3b:cb:7f:d6:20:20:7c:b4:c0:5d:da:32:b0:04:6a:1d:
         13:ce:3b:ae:ea:98:46:d2:fb:8f:dc:9b:66:0e:6e:9d:c6:56:
         b9:5d:99:74:19:a6:91:4d:f1:f3:48:cd:25:19:05:ae:5d:06:
         0b:5c:ee:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:21 2026 by rpki-client