Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
File:                     fyuobfeHiI9vhZKoBqb_6jBGwHo.mft (raw, json)
Hash identifier:          8y5dc0oo/V0Lr/j6MBgwCmDoDhJxvdNbRYGBc8pXlww=
Subject key identifier:   A2:08:29:22:3A:29:93:52:28:DA:F1:94:D5:58:31:F0:F8:BB:F6:EF
Authority key identifier: 7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A
Certificate issuer:       /CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
Certificate serial:       019CE3A2D7B07AE9F5A60121E6D2129F85D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
Manifest number:          1867
Signing time:             Thu 12 Mar 2026 20:00:25 +0000
Manifest this update:     Thu 12 Mar 2026 20:00:25 +0000
Manifest next update:     Fri 13 Mar 2026 20:00:25 +0000
Files and hashes:         1: ZwXZKRjaeOt73sRGfTI2I9RNT-w.roa (hash: 99LJa3HYx7jBCU5Ps3r+L9o48Mik2A5/XYAIXWsudwo=)
                          2: cClF794zhGezbNPSpS9Q1ShELbU.roa (hash: TA/inuG/btfdMZTi31N4JpWteaLOdOsqLcIt+o8rViw=)
                          3: fyuobfeHiI9vhZKoBqb_6jBGwHo.crl (hash: IYbFnTg67c3DJHOAcW/wG2rFbcdrY+hqx7gwzoF/C3w=)
                          4: i_u3W_snjAXj4Rj5FQrPE0tb4dU.roa (hash: 4agZvjNM2sUnZO/aBppZrrarV2vOgQ0nszmv6UvgTVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:a2:d7:b0:7a:e9:f5:a6:01:21:e6:d2:12:9f:85:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2ba86df787888f6f8592a806a6ffea3046c07a
        Validity
            Not Before: Mar 12 20:00:25 2026 GMT
            Not After : Mar 13 20:00:25 2026 GMT
        Subject: CN=a20829223a29935228daf194d55831f0f8bbf6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:eb:a6:39:74:59:57:6b:43:07:45:22:68:
                    44:bc:06:d4:2a:71:6b:f0:bf:4d:0d:41:7c:33:08:
                    e6:03:c7:de:59:1f:4a:72:ef:2b:23:c4:6b:ad:41:
                    b4:fe:13:80:d1:8d:64:0c:55:bc:af:2b:84:50:86:
                    90:91:59:e0:5f:37:89:fe:68:f9:d4:b8:9d:55:29:
                    8b:d8:8a:f8:e3:3f:f3:7b:10:e8:3a:e9:50:89:ce:
                    c8:5b:3e:40:d0:b2:c6:52:5e:56:7f:49:c8:f6:59:
                    ab:27:8b:0f:cf:b3:1c:cf:bb:1b:13:dd:af:9f:d4:
                    15:17:00:2c:15:99:99:3d:96:bc:6f:60:30:98:4f:
                    40:98:ad:4d:28:96:b1:39:7f:4d:55:0c:0a:42:3b:
                    25:c6:3a:da:d4:38:d9:6a:b7:9f:3e:ce:5a:9f:4e:
                    c7:e5:f8:90:4f:1b:37:07:60:da:c0:a2:88:36:7f:
                    5c:72:4d:55:a9:c8:6b:0f:7f:46:66:4c:67:96:12:
                    60:ee:90:88:4a:d0:40:ba:19:ad:73:25:e6:77:01:
                    ee:f7:d8:4c:03:46:28:ff:ad:58:2e:35:c3:47:0e:
                    d7:1c:2b:06:80:51:e5:e3:9e:ec:a5:54:87:7c:9a:
                    bf:ac:0a:cf:f5:89:8a:7f:e9:27:fe:92:2d:c5:fd:
                    e0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:08:29:22:3A:29:93:52:28:DA:F1:94:D5:58:31:F0:F8:BB:F6:EF
            X509v3 Authority Key Identifier:
                keyid:7F:2B:A8:6D:F7:87:88:8F:6F:85:92:A8:06:A6:FF:EA:30:46:C0:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyuobfeHiI9vhZKoBqb_6jBGwHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/5e6786-6377-4224-ba06-dc4769eff1f5/1/fyuobfeHiI9vhZKoBqb_6jBGwHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:92:d1:8d:80:6a:ac:e2:da:dd:69:32:d5:aa:41:b6:10:82:
         f9:72:a1:12:35:52:fc:a7:3c:41:42:33:9f:0d:33:66:a3:a5:
         7f:51:13:6b:23:23:e1:7c:8e:6a:0a:ad:84:0b:7c:4b:cb:c5:
         56:38:f4:98:83:b0:80:2c:84:2c:51:04:31:22:c5:9f:4d:7d:
         08:28:eb:3d:20:12:7a:59:df:e4:2c:a9:6e:23:0b:c2:aa:9f:
         7f:35:9d:86:f7:af:ba:56:d6:a2:8a:60:12:68:7c:58:0e:2c:
         f3:87:c3:13:06:9e:9e:8f:6a:31:a5:59:6b:99:13:04:18:83:
         c9:f2:e9:54:de:8f:8b:53:a7:03:e4:b9:94:e8:df:e3:a8:c3:
         64:d1:c7:9e:b3:88:d0:0c:c7:13:54:66:3c:ad:f5:2b:35:51:
         bb:16:d0:30:4f:d4:26:14:9b:ec:16:72:3b:93:ed:b3:70:d3:
         b8:5c:d3:3c:37:7b:8b:50:eb:3b:f1:9c:a7:8b:a2:9a:06:81:
         e4:a8:b5:f5:7e:a5:11:68:55:d9:c5:59:81:d8:bd:ea:9b:b8:
         30:5f:5c:39:22:c1:03:5a:65:82:e2:7e:99:9e:5c:14:bb:b5:
         43:63:41:11:70:4e:6f:53:e2:dc:9a:9d:ef:61:80:f5:73:1f:
         a9:d7:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:34 2026 by rpki-client