Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
File:                     F2wVCakW_qd6H9QIipnQ5iLWTD8.mft (raw, json)
Hash identifier:          pGltqEqDpdweZik7sFab8PmFaC2AEa/tGQDix6HWNUU=
Subject key identifier:   69:FE:26:48:89:B0:C3:63:CF:CB:12:0E:0E:A9:8C:F3:1C:0B:4E:42
Authority key identifier: 17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F
Certificate issuer:       /CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
Certificate serial:       019D39AF8C9969ADD4640CE5331CEBC12A94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
Manifest number:          02A8
Signing time:             Sun 29 Mar 2026 13:01:39 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:39 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:39 +0000
Files and hashes:         1: F2wVCakW_qd6H9QIipnQ5iLWTD8.crl (hash: VRHDCKk3znemIOPTfUwGYHsgT+RVnwZ1uUggPkk1kdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:8c:99:69:ad:d4:64:0c:e5:33:1c:eb:c1:2a:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=176c1509a916fea77a1fd4088a99d0e622d64c3f
        Validity
            Not Before: Mar 29 13:01:39 2026 GMT
            Not After : Mar 30 13:01:39 2026 GMT
        Subject: CN=69fe264889b0c363cfcb120e0ea98cf31c0b4e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:f3:93:c1:f5:a9:f2:f4:13:7e:f7:2d:13:
                    03:4a:25:da:5b:04:c8:ef:49:83:5c:6a:45:b4:07:
                    38:ad:60:7f:a6:c1:bc:de:fa:4b:55:5e:21:4b:e2:
                    d9:6f:1e:e5:27:48:8b:2d:ff:4f:9c:d9:47:ad:cf:
                    20:02:b4:8c:02:28:7f:b3:3e:24:e9:a9:64:6c:7e:
                    15:6c:3d:96:1e:1b:b2:81:ce:dd:a6:4b:80:a0:ea:
                    f5:b8:ff:3e:53:6a:4f:a8:e7:f0:0d:6a:f4:8c:05:
                    b4:d9:b2:bc:b4:93:16:b9:79:c4:9e:9e:38:bb:41:
                    89:ac:cd:18:79:1b:16:4b:97:0a:3c:15:34:49:c1:
                    60:e6:b0:27:a6:2f:5f:5f:36:a0:3f:5f:1c:f8:d0:
                    b8:cf:79:fd:5b:b5:f9:8c:22:48:8a:bc:b6:cc:ed:
                    51:ec:64:79:92:b1:4b:79:38:68:f9:03:1a:49:2b:
                    69:c5:39:cd:09:76:90:7d:2b:f0:ba:51:55:a7:80:
                    45:3d:8c:9e:19:8a:6c:26:1e:7c:7d:57:bf:22:67:
                    d3:6e:f0:3e:0f:e4:65:ba:e6:b8:f0:b3:c8:54:05:
                    4b:96:b4:1c:54:f7:96:62:f0:22:92:dd:7f:3e:40:
                    d2:8e:46:0f:bd:12:d1:5e:a7:67:f8:93:48:95:f3:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:26:48:89:B0:C3:63:CF:CB:12:0E:0E:A9:8C:F3:1C:0B:4E:42
            X509v3 Authority Key Identifier:
                keyid:17:6C:15:09:A9:16:FE:A7:7A:1F:D4:08:8A:99:D0:E6:22:D6:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2wVCakW_qd6H9QIipnQ5iLWTD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ec3c86-75a6-47c3-9bdf-88ed183f9c03/1/F2wVCakW_qd6H9QIipnQ5iLWTD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4e:a7:fc:9d:4e:63:38:c8:b6:e9:ad:10:b4:42:72:e8:60:
         98:3b:38:d7:10:1a:3b:dd:07:bd:8a:b6:7f:10:aa:0b:b1:5a:
         3a:e7:3e:ec:77:e2:78:65:1a:02:1e:f8:85:3e:59:9f:ff:08:
         c0:f2:b6:4a:5b:b1:f9:f4:01:18:11:bd:a8:9c:08:ce:fd:b9:
         dd:00:b5:ec:2f:0d:28:70:61:ec:c9:eb:90:6e:b3:82:9a:8d:
         eb:ec:94:79:21:47:51:d5:5b:93:ae:f9:f0:15:bd:1f:e0:ef:
         80:b3:cb:9e:cc:5e:2e:c5:06:4b:56:af:e4:27:d4:d7:55:60:
         19:40:e7:8a:f2:18:8c:91:a6:66:e0:03:df:53:93:86:ca:e4:
         e9:9a:07:b0:ef:8b:98:5c:49:ef:1f:31:1d:77:3c:7f:6e:23:
         8e:28:7c:79:dd:68:f0:2b:63:b7:42:17:a1:4f:8f:a3:b3:5c:
         0e:b3:10:9c:9f:fb:3d:a7:25:34:f3:1f:d6:88:cf:0c:8a:e6:
         e6:1d:08:77:e2:a9:a1:fd:04:70:48:94:76:83:2e:d7:6b:55:
         07:0b:67:ba:7e:60:6a:63:d2:43:59:0b:1f:33:4a:7a:15:a6:
         d2:34:03:bc:c6:5f:82:8c:d3:d3:b7:ca:68:6d:26:54:19:b5:
         0b:ba:8f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:50 2026 by rpki-client