Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
File:                     F7i-tVXa-oLD1qozaQmuWt41qD0.mft (raw, json)
Hash identifier:          xsGR13hhiGnznNP/n4e33K3nm2mOnN3ZGvUokdtHKXU=
Subject key identifier:   4D:06:FA:2B:F7:4F:31:77:C5:F1:C0:01:20:6F:11:2F:FB:AF:C7:AC
Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D
Certificate issuer:       /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
Certificate serial:       019D38D2B1BA6E878C0012FAF4044E4B576C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
Manifest number:          1893
Signing time:             Sun 29 Mar 2026 09:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:25 +0000
Files and hashes:         1: F7i-tVXa-oLD1qozaQmuWt41qD0.crl (hash: Ulh4ROyVNxEULZc8u4KfFnevh2jwm/CoyHkWME/pBZ0=)
                          2: SPz2rFTEb-eYf1B5B0X4hMlLB6c.roa (hash: TFR/CByQTCa7JUwD+ZC4TVDsRbIrDuQPNxLGIxqBjU4=)
                          3: UfSYcax7hrnZsapdP8nX8CdA6ac.roa (hash: HfQ6PLxHcu26WVTPLuKbtbJcFW7jFqcjCu8B7qggBio=)
                          4: kNHeejH9UWVsvWWApLpc25wsTxE.roa (hash: fxr+p6jIf+XT5GupHuF/9yqj6BcoS+KmnsW6mYE/AOY=)
                          5: kRf-p4qBBa9Rvu5gFKi-QWl32VU.roa (hash: fVpCGOPHxxPr7Wk2f1pVCS7IR1cjhvdExLaBFxIvrYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d2:b1:ba:6e:87:8c:00:12:fa:f4:04:4e:4b:57:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d
        Validity
            Not Before: Mar 29 09:00:25 2026 GMT
            Not After : Mar 30 09:00:25 2026 GMT
        Subject: CN=4d06fa2bf74f3177c5f1c001206f112ffbafc7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:05:fb:60:19:26:c7:fa:cd:91:18:c0:2c:
                    bf:0b:ba:dd:1b:c9:45:82:aa:34:b5:28:3a:3c:22:
                    45:28:14:10:8b:8f:49:06:8a:2d:9f:50:46:61:1f:
                    4c:9c:f9:8f:4e:41:25:31:e8:43:88:3c:be:d9:e4:
                    7c:f1:b0:24:42:2b:7d:44:f0:78:82:0c:57:e5:a3:
                    b2:0e:f1:39:5b:8c:3d:7a:15:d1:23:22:97:f6:e9:
                    78:8c:c7:36:1b:5f:7d:fb:5c:15:e6:de:9c:b3:1d:
                    33:34:79:10:a7:33:62:24:59:d0:68:f4:71:a1:f0:
                    b8:a2:71:7c:29:71:97:6e:3a:1f:69:5f:83:9f:eb:
                    8c:eb:41:1d:3f:52:34:4b:94:e6:fe:2e:a9:a1:3c:
                    fa:aa:2d:1a:fb:08:6c:c7:4e:4d:5e:2b:ed:3c:89:
                    63:54:3b:75:59:ec:63:5f:1f:87:40:9c:a5:26:c4:
                    fc:86:b4:64:e0:86:0e:72:f2:71:7c:e6:31:c4:5d:
                    04:4d:4e:b4:35:5c:2e:3f:bd:d0:08:34:fb:e7:d9:
                    37:74:36:da:f9:c0:57:27:82:ac:49:28:0f:e6:fb:
                    41:15:ff:ca:84:29:4c:3d:ec:0f:9a:ff:8a:63:06:
                    14:06:47:99:21:ee:47:f8:ab:3f:fa:5b:c4:ed:13:
                    a4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:06:FA:2B:F7:4F:31:77:C5:F1:C0:01:20:6F:11:2F:FB:AF:C7:AC
            X509v3 Authority Key Identifier:
                keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:2e:e0:d0:51:f9:67:d1:03:9e:a7:f8:3e:7f:5d:a5:8b:
         8c:59:84:32:62:79:65:c2:ca:4c:47:18:8a:47:f8:86:85:30:
         9a:d6:53:76:ba:96:76:3a:20:d9:46:2b:cb:33:fc:71:a0:62:
         c2:c7:6b:b4:ac:95:34:d7:60:0a:e4:fb:46:2c:a8:41:9f:de:
         d8:0e:b1:09:de:85:37:30:41:a4:32:bb:76:e1:09:94:6e:ab:
         3d:88:a1:d5:8b:db:2b:6b:97:d0:02:fe:c6:ab:c7:95:b0:4b:
         78:d7:f9:98:f3:c8:57:bd:5c:99:62:f7:42:c2:ad:a4:d8:55:
         0f:ed:02:20:73:ca:c7:31:28:35:fc:bd:a6:05:e8:74:04:7c:
         86:c3:66:cd:e1:0e:0b:0d:23:2c:d1:a0:5b:7b:d2:4f:c3:bf:
         6f:ac:60:1b:81:72:71:71:3b:fb:d9:bd:ca:ab:60:7f:ee:4e:
         2f:fb:00:1d:1c:0a:67:d8:2c:c6:83:3e:20:6e:8c:cb:b7:25:
         52:35:27:23:d1:cc:a4:93:18:bf:e0:90:cb:d4:e8:2d:7c:42:
         cf:fd:44:46:76:a2:a7:0d:1f:82:89:54:db:dc:0b:4b:46:90:
         1a:04:61:86:08:11:d5:7d:57:91:e9:e6:33:78:d1:f3:f5:c9:
         a5:32:c4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:02 2026 by rpki-client