Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          5mNIGfLXjetbD/vozCTkHAjGhGmY8WGud42sMZoQb5I=
Subject key identifier:   B7:68:AE:AA:E1:32:DE:55:78:FE:B5:0A:70:58:41:2A:AF:50:90:65
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       019D38662A097F70B9C26E79522812D14D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          0672
Signing time:             Sun 29 Mar 2026 07:01:52 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:52 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:52 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: C5wogYywjPXO1CK+rOzW7o68l0V4eSdWYITZdRCycdQ=)
                          2: uLaeGKv0bs_oO1vI3aT6N_vyvt8.roa (hash: WgJz3pk2ezCDKffdanrCW5yiZF/5p4B0bPNVwrYCrNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:2a:09:7f:70:b9:c2:6e:79:52:28:12:d1:4d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: Mar 29 07:01:52 2026 GMT
            Not After : Mar 30 07:01:52 2026 GMT
        Subject: CN=b768aeaae132de5578feb50a7058412aaf509065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:94:e2:77:e0:f6:60:21:66:bf:a1:65:85:e7:
                    c6:fb:b0:f1:8c:2e:4a:85:2c:7d:3b:52:ce:2c:64:
                    1d:00:69:b3:7c:ea:6f:2d:8c:b0:54:4b:4b:a7:f0:
                    25:77:6f:36:cd:50:1b:bc:50:fd:56:96:8f:8a:ae:
                    45:cf:6b:54:4f:99:4c:0f:cf:0d:b6:08:64:1a:ce:
                    c1:2a:e7:5e:8a:9a:8b:01:a3:3c:bf:ee:ad:d0:c4:
                    a8:1b:88:8f:1e:37:eb:88:a2:43:d3:b8:ed:18:1e:
                    bf:c1:c4:d5:b7:59:ce:5a:2b:57:a7:1e:38:30:77:
                    4b:94:fe:96:1e:70:8e:ea:34:e1:90:a7:ff:b9:84:
                    80:58:bb:c1:ad:b7:fd:90:13:45:cb:7b:fd:96:5d:
                    6e:19:eb:70:2b:2a:cf:b5:5c:43:b9:fc:e1:04:d6:
                    c1:d6:6e:d9:d3:61:0e:bf:12:7e:a4:5b:d8:3d:8e:
                    b0:a7:6e:87:23:b9:02:29:d5:24:00:7b:79:8c:6c:
                    f5:cd:21:2f:e7:3f:23:d6:c5:a8:c6:7d:ff:3d:5f:
                    dc:38:be:4c:2a:ac:f7:20:93:ae:e8:52:37:b7:b8:
                    84:47:49:ec:68:d0:a2:b5:1d:a7:51:7b:7e:74:08:
                    f6:a4:08:02:8a:7c:9f:f8:96:d0:4c:fa:4f:30:18:
                    97:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:AE:AA:E1:32:DE:55:78:FE:B5:0A:70:58:41:2A:AF:50:90:65
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:1e:87:55:d7:f0:0c:6b:48:17:24:bc:95:4a:f4:00:4b:ff:
         ca:1e:74:11:3d:c7:02:fd:4a:b2:16:62:0d:90:f8:cb:b0:a0:
         fd:e5:a9:59:f6:38:f9:43:7b:4c:4b:38:2e:db:eb:0a:0f:59:
         c8:90:1b:0c:95:4b:56:31:60:e9:3b:95:41:66:8f:07:22:5c:
         f5:58:04:1b:eb:19:35:e6:4c:f0:49:4a:55:b9:78:a1:61:1e:
         af:a5:da:cb:1f:ed:ce:6b:df:1f:12:a5:7a:c4:80:35:36:11:
         06:ad:c6:bd:e3:6d:b4:4a:51:36:19:50:06:94:dd:26:11:e3:
         9d:76:0c:89:4c:77:cd:8e:e0:01:4b:12:8b:7f:50:db:c8:75:
         de:5a:69:d1:9e:5c:7f:1d:4c:3f:e7:be:3e:b1:94:9d:b7:cb:
         f0:85:28:a9:e0:73:db:f6:34:9f:a1:9f:40:d5:1e:e7:24:cf:
         73:23:3b:e9:d3:27:a6:aa:d6:34:ff:3e:e1:2f:ab:47:f6:01:
         14:e3:b7:6d:7f:cd:05:ed:c7:be:a0:83:4a:52:53:f8:80:9c:
         ff:d5:74:f9:ae:8d:47:cc:9e:2b:b3:70:1d:67:a8:0c:bb:f9:
         b2:49:d6:4f:31:6d:da:d6:8a:9e:a0:eb:57:e5:8a:a6:67:00:
         f7:08:d0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:12 2026 by rpki-client