Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File:                     fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier:          H5z7BHIVKhtuqRzLjZy/yTupZmxx6aP0DPw4q3FZJDA=
Subject key identifier:   0C:92:D6:EA:62:F6:D4:7A:50:4B:04:E7:59:20:B6:BB:AA:F2:66:1D
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer:       /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial:       019D378944249BABF8EEBEFFAB2007188DFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number:          1302
Signing time:             Sun 29 Mar 2026 03:00:35 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:35 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:35 +0000
Files and hashes:         1: M-YtErUxsBexOppW_oy6TWvdZT0.roa (hash: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y=)
                          2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: AL62Xx6V5B0BnFR9rxDJrly/6DDpy3P3zKP8r+hDuZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:44:24:9b:ab:f8:ee:be:ff:ab:20:07:18:8d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
        Validity
            Not Before: Mar 29 03:00:35 2026 GMT
            Not After : Mar 30 03:00:35 2026 GMT
        Subject: CN=0c92d6ea62f6d47a504b04e75920b6bbaaf2661d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:81:f2:f2:71:e1:af:53:35:1d:ee:07:e8:2d:
                    93:8c:7d:30:51:3d:b8:99:1c:89:ad:6a:98:90:4c:
                    e5:d9:1f:03:ea:12:e5:0b:d2:c4:71:22:44:e9:d0:
                    fc:26:b4:0e:7a:83:b1:60:2c:12:38:c9:cd:f1:a8:
                    2a:dd:66:81:44:ce:a9:55:04:4d:94:e0:07:30:34:
                    40:13:d0:4c:92:38:b7:d6:56:dc:b0:f6:be:0d:6d:
                    1f:9f:a2:af:dd:76:48:22:ba:19:b4:92:ae:70:1b:
                    3c:f7:43:07:df:ef:0d:f4:8e:09:5d:0c:7a:b4:d7:
                    28:69:2d:47:bd:a8:50:4d:16:d6:51:0b:15:f2:b5:
                    ee:8e:88:75:aa:6a:e9:38:2b:f8:bb:75:99:d9:47:
                    3c:0e:38:d8:7b:56:43:c9:eb:99:66:c3:95:20:8c:
                    d9:91:53:2a:42:8e:e3:c9:31:35:65:02:e1:4d:5b:
                    86:a4:69:d6:ab:0a:d5:b5:51:2c:e8:f0:55:85:ba:
                    a6:2f:8b:5f:60:08:11:28:3e:48:61:72:f7:d9:0f:
                    92:f6:68:e8:81:68:46:2d:ce:42:a6:8c:58:e9:dd:
                    00:37:8e:ef:cf:c0:4c:05:6b:52:2c:50:15:72:6b:
                    dd:fd:f0:64:27:6d:c3:48:85:c7:2f:17:f0:28:2a:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:92:D6:EA:62:F6:D4:7A:50:4B:04:E7:59:20:B6:BB:AA:F2:66:1D
            X509v3 Authority Key Identifier:
                keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:54:4c:d4:08:2a:39:89:38:c3:a2:39:87:27:1e:9b:e1:
         8b:e4:c3:9b:15:0a:07:af:2f:12:27:67:30:8f:10:33:9a:0e:
         93:c9:bf:3d:60:8e:89:01:fc:69:d1:d0:f4:22:1f:71:5a:4c:
         45:2a:13:03:67:57:34:12:85:b0:43:16:d5:ff:ab:30:55:58:
         a0:ed:f6:c4:8b:be:d6:1a:20:56:b5:55:7c:d6:85:83:4e:62:
         15:41:88:8f:f3:7b:a1:d2:42:22:e2:61:e1:e4:d2:6f:66:32:
         6f:2e:54:9a:57:d7:ac:09:d8:1e:c3:66:5c:6e:55:f0:f6:17:
         48:21:ce:68:9d:e4:b5:36:a5:37:10:e2:d7:79:cb:64:ce:b1:
         15:08:53:c1:22:2e:0c:12:c0:95:16:e8:d7:3d:f6:f0:e1:92:
         26:dc:0d:d7:5f:48:77:f0:66:3b:45:fd:e1:03:54:cd:92:40:
         7a:0b:12:b2:d5:03:25:68:90:38:c0:a7:57:dd:4b:75:ac:96:
         80:51:ff:a6:23:b6:7d:44:96:0d:14:cc:69:db:e7:99:fb:a3:
         58:c1:15:61:c8:25:f8:e9:b3:2a:3c:7a:0f:39:51:ad:93:2e:
         ac:ec:81:9f:b0:49:c3:62:1b:b6:81:cb:e2:0e:b6:bd:30:63:
         27:8a:da:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:58 2026 by rpki-client