Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File:                     FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier:          RY48O+mbzrU4sZFvnTdOt/7p5yuWjyfvlzoLCRrRx68=
Subject key identifier:   0B:4F:20:53:25:AE:F4:12:0C:EC:8B:05:F2:51:8F:F0:89:C5:A2:DA
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer:       /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial:       019CE47F4A75424D160FF17BB66F0B43B01C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number:          06
Signing time:             Fri 13 Mar 2026 00:01:13 +0000
Manifest this update:     Fri 13 Mar 2026 00:01:13 +0000
Manifest next update:     Sat 14 Mar 2026 00:01:13 +0000
Files and hashes:         1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: 1tkQIjFm939efsKbTw0gt3Nv7kjJKB5KTwxONQpVw7o=)
                          2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:7f:4a:75:42:4d:16:0f:f1:7b:b6:6f:0b:43:b0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
        Validity
            Not Before: Mar 13 00:01:13 2026 GMT
            Not After : Mar 14 00:01:13 2026 GMT
        Subject: CN=0b4f205325aef4120cec8b05f2518ff089c5a2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b4:77:8f:61:88:fb:bf:6f:40:88:d7:ee:d8:
                    86:a9:0f:ab:42:75:d1:70:ab:da:27:de:c7:cd:5e:
                    44:ea:80:bf:03:9c:75:2a:96:bf:6b:70:d7:28:f2:
                    a4:63:5d:28:7a:aa:23:05:68:a2:3d:dc:b6:c1:36:
                    3e:32:d0:f8:b8:49:74:b0:3e:33:a1:c8:d6:77:ee:
                    1a:58:98:1e:23:6c:35:67:96:5b:d9:6e:4b:4c:86:
                    62:c2:96:c1:8e:4f:ab:09:f3:58:98:4a:0b:df:c1:
                    38:54:7c:91:9f:77:f1:ab:d8:c8:46:8d:9c:3a:b9:
                    e0:73:21:92:8c:f4:be:19:c4:84:10:47:b5:da:c1:
                    4f:ce:9d:fd:ed:8d:b2:09:93:1c:f3:a7:dd:72:21:
                    4b:10:63:b3:08:8f:8b:ad:f2:cd:51:6f:4c:79:59:
                    8f:7e:5a:7e:72:5a:43:1a:3e:c5:09:18:73:9e:ea:
                    58:a1:af:c8:85:0a:fe:06:39:e0:90:f7:9e:be:af:
                    84:2f:6b:2a:16:d5:10:f0:ec:a1:5d:57:3a:35:af:
                    73:00:05:e3:23:5b:b2:f7:11:e1:cf:8e:44:6e:bb:
                    d7:36:1e:84:5a:e7:92:27:6f:38:88:98:08:84:52:
                    72:87:bb:9b:74:e8:c6:9b:f8:77:31:9a:86:b3:a0:
                    36:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:20:53:25:AE:F4:12:0C:EC:8B:05:F2:51:8F:F0:89:C5:A2:DA
            X509v3 Authority Key Identifier:
                keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:28:2d:80:6d:e3:d7:3d:80:1c:ae:22:da:a6:b1:61:cb:a8:
         6d:51:5e:69:25:4e:5d:16:61:4f:b0:3b:77:8c:37:de:3a:70:
         55:b8:dc:01:c3:97:9d:71:83:26:1d:82:16:e0:ce:0c:51:22:
         db:2a:8f:75:70:90:9c:3f:6e:5a:d5:18:43:1f:2e:cb:84:98:
         60:b4:be:4a:47:93:56:c0:ff:ec:c5:26:35:d5:81:32:22:f3:
         c9:d4:5f:84:98:e2:c7:22:66:c2:60:6e:6b:52:20:f9:c7:67:
         62:69:58:22:8c:76:03:c7:79:4a:db:f7:b9:b8:5d:cc:c4:e9:
         8e:6f:e5:04:05:19:2c:8d:f9:ec:99:64:5a:97:ed:09:93:c7:
         f4:1f:62:69:25:a0:b4:28:18:0a:5e:a5:c5:85:2a:6d:13:98:
         65:f0:9e:f3:9f:51:cf:37:5d:aa:cf:8c:7b:68:a6:0e:c1:e2:
         1a:ab:6e:a5:a6:41:45:a0:aa:aa:b0:fe:8a:f4:8e:e5:69:6c:
         3e:7c:45:ce:b9:df:9b:63:65:b2:67:da:ba:13:17:55:21:07:
         78:7c:90:60:ac:ab:2d:0a:e9:ed:9c:03:06:80:c1:77:31:d4:
         86:5f:77:10:db:e4:1a:af:b7:4a:1a:7d:4a:80:09:79:ea:38:
         c0:6b:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:44:51 2026 by rpki-client