Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          L4mZoFJ8gFDYSd5Hymg5hhtiRa2wt8/uFNKfIIL0YR8=
Subject key identifier:   3E:24:36:D5:B9:2F:76:3A:BC:73:EA:AA:FC:D6:57:75:B7:2E:0B:CE
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       019CE591AEAB5228E1E46B41D015AE88186E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          0585
Signing time:             Fri 13 Mar 2026 05:00:55 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:55 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:55 +0000
Files and hashes:         1: 2AoCTJhqU5v6MlrbH3hvQy0Uf7Y.roa (hash: G3dIE6sYWPhy161h7oAdaMA3nB4HfJRUXVulVZyCG4Y=)
                          2: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: 2uj47NdPPIlayFPI2z3faeCQ+rmnfjwqbaXnZm9RNis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:ae:ab:52:28:e1:e4:6b:41:d0:15:ae:88:18:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Mar 13 05:00:55 2026 GMT
            Not After : Mar 14 05:00:55 2026 GMT
        Subject: CN=3e2436d5b92f763abc73eaaafcd65775b72e0bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:4c:31:7b:2b:a6:9e:4d:68:9d:f2:f1:84:
                    58:91:76:2b:87:86:4c:9b:8c:2c:4a:ec:bd:d8:5a:
                    cb:d5:36:c5:0f:81:57:ff:a1:73:82:53:e9:03:83:
                    22:53:30:82:3a:a6:97:99:bc:c7:dc:d2:5f:01:7c:
                    33:4b:ca:f0:1d:7c:13:d3:5d:b4:d9:8c:55:77:db:
                    8f:ac:49:36:65:6d:9f:de:c7:84:5b:9d:2a:c7:a4:
                    09:d8:6b:7d:85:2c:da:67:98:69:09:b9:d7:66:cd:
                    89:3c:21:ec:f9:68:56:7b:7b:c7:c5:dc:1c:b3:a3:
                    3f:c0:fe:89:dc:52:04:e8:1a:86:53:3e:10:56:12:
                    fb:e4:69:76:a1:2d:5c:9a:5c:84:83:d3:24:fa:43:
                    05:10:88:0a:2d:f2:6d:e7:82:6e:f3:68:dc:2d:14:
                    a9:68:ca:8b:86:47:82:f3:5b:25:6d:74:0a:f1:d1:
                    9e:75:27:eb:db:dc:e8:cd:2c:21:db:df:22:51:4f:
                    e0:a4:95:24:b9:4d:16:c9:b1:fb:d5:95:60:a0:3e:
                    40:72:15:21:a7:37:b8:89:64:b2:b7:6a:09:dd:51:
                    6c:fc:05:87:82:64:b3:8a:b9:c6:1d:10:ec:b2:9b:
                    12:a9:b8:2d:e7:5e:8c:00:40:a5:4c:e6:56:60:55:
                    da:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:36:D5:B9:2F:76:3A:BC:73:EA:AA:FC:D6:57:75:B7:2E:0B:CE
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:ff:1b:7d:9a:0f:b0:d6:29:4c:de:b5:a1:97:55:12:b1:
         7c:bf:b1:8e:15:ac:86:e7:8a:86:8c:3a:e2:f4:4a:a3:8f:45:
         76:0e:ff:f6:e4:50:72:08:7d:8d:94:15:52:4a:0b:14:4a:03:
         59:97:17:f3:5b:b5:80:83:9e:c8:e9:ec:7c:2d:cf:55:f5:c0:
         df:04:21:d0:ba:ff:10:89:d1:26:e4:c6:d7:a6:08:84:a2:ad:
         5d:d1:ec:07:17:10:66:04:15:19:a1:5e:c7:91:c3:4d:23:7d:
         bd:df:70:5c:5e:4a:09:ce:53:b2:3c:b7:77:4e:ae:16:05:db:
         ef:17:7d:1d:07:84:df:16:ea:7c:18:81:7c:73:8e:9d:c4:11:
         c6:7d:d5:3c:06:72:7d:5b:81:6c:5a:75:d4:cd:66:cb:f8:4f:
         8e:02:40:47:31:c7:81:7e:07:e1:69:d7:20:62:87:28:6d:85:
         22:9e:90:a5:cc:60:e6:95:75:5e:c2:7a:8d:2d:e8:84:1d:7b:
         6d:97:58:f5:8d:b1:0c:ac:18:28:2f:4b:04:d0:14:31:94:10:
         86:0e:6a:87:6a:d7:bd:a4:09:12:77:f4:fa:49:2b:61:7c:5e:
         c1:26:89:78:06:11:44:a2:dc:ad:7d:76:53:16:e7:28:0e:3b:
         f3:d2:d4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:21 2026 by rpki-client