Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File:                     FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier:          kJrN78UnLSxtAwW5UdawfIJZebWpWG6c9RvkVlZEQOU=
Subject key identifier:   44:06:01:BE:7B:A5:27:64:A2:FE:4B:21:F4:4F:0F:86:76:90:02:B2
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer:       /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial:       019D390A549FFCE6C10BB48C525F6755DA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number:          186A
Signing time:             Sun 29 Mar 2026 10:01:11 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:11 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:11 +0000
Files and hashes:         1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: 8t/kPQpQ1H5jk62u4PHHNMO9Odi4sM8OsqznqcHrvso=)
                          2: gAwSKHbFYp1R0rXy4HL7BwP5ZEk.roa (hash: MyfIsufvzyrn5zaFEUf1MX96j9I2a+9VKXg9iJpm1hM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 10:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:54:9f:fc:e6:c1:0b:b4:8c:52:5f:67:55:da:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
        Validity
            Not Before: Mar 29 10:01:11 2026 GMT
            Not After : Mar 30 10:01:11 2026 GMT
        Subject: CN=440601be7ba52764a2fe4b21f44f0f86769002b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e1:86:fd:d3:2a:69:78:f2:4d:04:d6:49:17:
                    58:a7:f2:a2:1a:ab:fe:5c:e8:6b:98:39:b0:b2:66:
                    15:1d:02:56:d7:29:b6:e2:2b:cf:2b:29:3d:0a:04:
                    9d:94:fc:76:6b:cb:d9:72:12:c3:9c:a1:a2:4f:a1:
                    e9:49:43:c2:b6:53:83:a1:1f:e0:99:f5:88:32:6b:
                    04:94:39:81:7c:da:31:cc:2f:f1:1c:cd:ef:c2:bb:
                    0e:57:35:59:45:aa:a9:49:0a:5d:93:a9:ab:1b:aa:
                    c9:21:a5:00:8a:7b:a9:08:79:bc:4d:5e:c8:24:d0:
                    69:03:42:35:b6:88:a9:b2:73:9b:c5:2a:03:23:c3:
                    5c:f4:35:2b:8a:7d:c9:1e:a6:56:f8:dc:0b:39:fa:
                    c5:96:f8:c5:4b:b4:da:2a:fc:55:b8:85:07:34:96:
                    77:70:3f:a0:9a:9b:54:63:e4:7d:ae:2e:81:6e:c7:
                    4f:6d:44:68:90:6d:b0:c2:00:03:70:fe:f4:48:95:
                    9a:c2:9d:f7:bc:a9:99:4c:13:6e:1a:ed:f1:88:2e:
                    7a:5f:64:1f:2b:dc:9f:26:ee:b2:dc:53:40:8a:d7:
                    89:94:f3:8c:f4:21:26:de:6c:9f:2a:41:3d:28:17:
                    99:04:90:af:a3:12:c2:d8:34:03:d4:ee:d4:5d:a2:
                    5e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:01:BE:7B:A5:27:64:A2:FE:4B:21:F4:4F:0F:86:76:90:02:B2
            X509v3 Authority Key Identifier:
                keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bf:f3:4c:65:16:26:3b:98:1a:c7:d4:12:ca:2f:cf:f7:08:
         c4:ba:35:42:ed:8c:c1:19:6d:23:d4:e0:31:31:cd:ba:d9:08:
         3d:ad:79:04:49:d7:ab:c3:71:ee:99:8f:9b:69:bd:05:25:05:
         70:b6:17:81:2c:a9:d9:47:f2:98:ba:ef:62:4e:24:ed:40:46:
         eb:52:fa:de:46:75:df:09:dc:1c:2b:69:10:0c:84:c7:f7:73:
         c2:84:80:8b:0a:24:4d:68:6b:71:e8:0d:15:80:a9:62:a4:b0:
         3b:fb:fb:ab:c1:6f:a8:4d:fc:38:58:88:76:52:05:fa:79:6a:
         9c:d1:10:67:fd:1d:d5:17:34:4e:64:96:45:43:f7:97:f7:a3:
         0e:43:12:ff:e2:18:62:d9:a2:d8:c4:c0:02:29:f7:ad:8b:77:
         de:dd:6e:2e:bb:0e:82:9c:63:12:cb:3b:1e:a0:3e:b5:8b:d7:
         86:31:16:a7:a9:58:28:50:15:bd:11:36:e7:b7:36:00:fd:be:
         30:98:b1:f2:8a:9e:56:76:01:72:a6:89:a7:46:d8:16:83:20:
         43:9c:7a:57:15:5b:f9:cc:e2:56:75:84:31:04:c3:b0:3d:dc:
         6d:a4:3b:69:8a:01:40:d0:2d:18:12:38:24:7d:f5:41:3d:56:
         20:e9:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:24 2026 by rpki-client