Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          Iu2cRVsJrZYfTsU+7eG3X79b2f1h5vFp9QHA+AOX1aY=
Subject key identifier:   1E:BD:20:36:92:7D:2C:27:1E:4B:D6:C3:61:63:9A:B2:A8:12:20:7E
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       019D39AF5510F4CC43FB3947F126157F37DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 13:01:25 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:25 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:25 +0000
Files and hashes:         1: LWui8AzaPFASP_4ivNyGkEz1ysQ.roa (hash: lMC5CJ6/t2xSIhms0GWqMAwmNRtMrmrsLXuQBgs3rpY=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: WzfY1nqkEEnEfIU3NgwrCqcmVACLclt5rd2namyxTCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:55:10:f4:cc:43:fb:39:47:f1:26:15:7f:37:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Mar 29 13:01:25 2026 GMT
            Not After : Mar 30 13:01:25 2026 GMT
        Subject: CN=1ebd2036927d2c271e4bd6c361639ab2a812207e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:77:5c:27:72:e9:cf:8e:6b:d9:2a:5a:97:
                    6c:29:4b:18:fe:57:0f:31:63:d3:05:d3:d0:dd:75:
                    62:43:a0:8a:62:23:02:28:e0:a0:79:04:26:8a:e2:
                    fb:42:0a:bd:fe:d3:97:12:b7:b5:8e:ad:31:eb:f0:
                    17:7d:02:db:24:25:4b:67:d1:3a:0f:11:7f:c6:a1:
                    40:36:a1:0b:b2:dc:86:99:f4:25:88:80:e8:87:72:
                    8c:fd:fc:ab:b0:d5:a8:ca:b3:c2:42:01:8c:30:07:
                    55:3a:7f:93:11:e2:f6:42:39:61:6a:1c:56:4e:d9:
                    51:d0:b3:98:13:76:02:b3:c6:3a:aa:5b:cb:d8:ed:
                    b1:17:c8:82:85:ad:93:19:6f:d3:a9:7b:75:10:31:
                    fa:57:e1:2d:64:73:3e:ed:c7:00:24:1b:a6:01:ee:
                    4c:b8:ee:7f:e7:ea:45:2f:f1:df:dc:62:11:57:48:
                    35:10:0a:5c:9c:29:8b:24:1b:25:ae:08:cf:07:f4:
                    f1:43:f7:c0:ad:a2:a7:dd:dc:10:f5:62:c6:6e:8b:
                    f4:31:5b:9b:fa:c6:24:c3:a8:4b:08:60:34:6a:81:
                    b0:84:aa:70:2f:f3:ac:b2:10:05:ff:66:bd:29:96:
                    9b:87:a7:5c:1e:22:a9:cb:7c:78:71:3d:a8:eb:ca:
                    f5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BD:20:36:92:7D:2C:27:1E:4B:D6:C3:61:63:9A:B2:A8:12:20:7E
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:cb:2e:2c:90:3f:bd:02:6f:6b:3f:c2:74:29:05:85:ed:
         f1:32:7f:ff:da:13:92:b0:31:6a:8a:44:e0:0e:40:4f:10:58:
         53:7c:f9:86:9a:63:a4:7e:09:90:2c:2f:5e:b2:a3:f6:95:69:
         bd:13:1e:68:0d:07:d6:6c:97:a3:16:08:91:36:60:a2:9a:cf:
         9e:54:d0:cd:33:ee:50:71:d3:83:94:21:c6:2d:26:64:86:9e:
         78:32:8b:3d:64:c2:25:bb:31:5b:00:70:a8:0b:50:6c:a4:4b:
         96:00:db:ce:61:10:94:43:b4:fb:a1:27:fe:d0:e5:3f:d3:d7:
         97:3c:e4:42:27:27:45:8e:05:6f:70:8e:5a:ae:f4:fd:d2:ce:
         b5:69:81:2d:ef:d9:78:20:98:3e:06:50:94:f5:c2:13:2a:7d:
         7a:c2:9f:3d:48:a9:4b:e4:8a:12:0e:fc:1a:1c:ab:48:9b:80:
         39:28:47:24:45:cb:ea:7a:b5:43:97:fb:1a:bf:d8:69:92:04:
         72:53:7d:f1:05:3d:ff:29:d6:d4:30:68:17:8f:a9:62:13:83:
         de:53:c5:21:fc:6b:e6:55:cb:f2:3e:95:eb:62:45:39:de:2a:
         5d:0d:c8:4b:dc:bb:10:26:9d:0e:39:1b:e3:54:f6:24:d2:6e:
         a1:a2:d8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:34 2026 by rpki-client