Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
File:                     ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft (raw, json)
Hash identifier:          h0C8oJieu0jNe9cHB1nex9oiw7KxMm18cvbIaYRM3Q4=
Subject key identifier:   E9:2E:5B:20:47:0E:81:90:DC:DE:86:D9:0E:07:FF:45:2D:EE:67:56
Authority key identifier: 7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C
Certificate issuer:       /CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
Certificate serial:       019D375271D454C985C8A65B6371B84F7353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 02:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 02:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 02:00:43 +0000
Files and hashes:         1: LgLDmVKh0xf2ZimNBxMIVyJjGj8.roa (hash: nyHkLsfhGAO1IMHGjtbS9IePSmtztG5W8H1g0UXxIt0=)
                          2: ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl (hash: +Z0zftTKaexxp7Tix7T1QyhVCd2cn0a3lJ+a12yKmb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:52:71:d4:54:c9:85:c8:a6:5b:63:71:b8:4f:73:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed24c5d344fb92bcf4cf6e1e569f51ae41aa87c
        Validity
            Not Before: Mar 29 02:00:43 2026 GMT
            Not After : Mar 30 02:00:43 2026 GMT
        Subject: CN=e92e5b20470e8190dcde86d90e07ff452dee6756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:3e:f2:01:2a:23:39:72:e3:8b:b5:df:66:
                    2b:32:13:aa:d0:f1:ef:a9:0c:b7:4d:1c:f5:df:6a:
                    f4:05:da:c8:a3:b4:c7:3a:bd:18:9b:0b:01:f6:d6:
                    53:36:f2:7d:7c:7a:64:98:b0:9b:e4:62:29:e2:a5:
                    5d:c5:5a:ad:68:ce:d9:9e:d5:64:d2:43:69:55:08:
                    93:12:4f:71:6c:61:55:61:fb:9d:37:94:4f:db:d1:
                    98:25:30:bc:2b:27:68:5e:07:07:9e:fe:2f:ec:65:
                    33:a6:f0:d6:d7:4a:f6:f6:24:f6:30:e4:63:ff:92:
                    99:bf:ad:ec:19:e7:f5:03:5f:2c:75:23:88:4e:83:
                    cc:7e:12:b0:42:7f:be:71:db:cc:c1:cb:e3:42:74:
                    06:a8:b7:15:8a:14:8a:9d:0a:23:4e:db:a0:6f:d7:
                    45:0f:7f:65:5d:ea:a9:72:d2:96:e9:99:f0:2d:b8:
                    e4:9e:9e:8d:8d:ea:a5:f7:4b:51:49:c2:26:59:f8:
                    fa:87:cf:da:92:58:57:45:2a:dd:a5:c8:fc:ca:a1:
                    a1:01:01:05:ba:30:4e:86:ed:5b:eb:58:d2:f2:b3:
                    21:41:ac:87:55:4e:fa:5d:40:29:8f:6a:25:14:64:
                    5b:f4:21:34:b5:ad:5d:4c:19:29:06:3d:a7:0f:85:
                    da:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2E:5B:20:47:0E:81:90:DC:DE:86:D9:0E:07:FF:45:2D:EE:67:56
            X509v3 Authority Key Identifier:
                keyid:7E:D2:4C:5D:34:4F:B9:2B:CF:4C:F6:E1:E5:69:F5:1A:E4:1A:A8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/c8ae79-6d7b-4776-80b7-420492cd1afd/1/ftJMXTRPuSvPTPbh5Wn1GuQaqHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b8:7e:2b:46:07:9f:b8:9a:64:00:f6:5a:65:9e:41:1d:f2:
         03:36:98:10:de:32:33:98:75:98:f0:4d:ba:39:3f:bf:b8:3f:
         0d:76:19:66:90:72:fb:24:10:31:17:9b:60:a9:c1:bc:98:76:
         e5:95:b0:57:3a:4f:cd:59:18:fa:13:51:9d:d7:d1:d5:61:ac:
         ee:84:bf:e0:66:6d:c6:56:32:7d:3e:ce:58:f5:1c:0f:0e:92:
         4f:ee:f4:c4:7e:ff:ad:e3:c2:40:fd:38:e1:20:5a:5d:ce:5c:
         f1:e9:c4:26:a3:1e:eb:bc:7c:57:1d:10:ce:32:e9:44:64:5a:
         5a:ac:80:52:cd:70:85:a7:36:21:69:7e:08:40:37:5f:0a:17:
         95:30:b5:10:06:77:5a:c7:27:f9:cc:f0:6a:f6:58:ae:d4:83:
         83:ea:9c:87:b7:91:e9:f1:1f:5a:29:65:3c:30:68:9b:43:f1:
         c2:e7:f9:19:7e:00:df:87:d2:d3:4f:51:31:11:6e:b3:7a:d4:
         b1:86:cf:b7:0f:39:9c:97:17:3f:74:1b:83:a3:0c:54:b7:6f:
         b9:dc:e3:28:74:97:6f:bc:4d:88:c6:a3:87:fb:9d:f0:8d:46:
         a7:7b:47:ea:33:82:c3:00:b4:d0:93:d6:c1:22:3e:e5:7d:30:
         9d:f5:2c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:34 2026 by rpki-client