Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          QWrpUlZFiO3+dFw2EHGMYkLXUpDr8MG5V2UVmTpKjN0=
Subject key identifier:   F4:A3:E8:92:46:33:0D:6D:F1:9A:E5:8A:96:94:79:2F:57:6F:B8:9C
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       019D33AD11F32C00D123C0EAC8B662D064C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          1893
Signing time:             Sat 28 Mar 2026 09:01:13 +0000
Manifest this update:     Sat 28 Mar 2026 09:01:13 +0000
Manifest next update:     Sun 29 Mar 2026 09:01:13 +0000
Files and hashes:         1: 0e9iOLuY-VIVNiIfK5_3Cw3JxK0.roa (hash: eUFnT476Jfsu0/FY9gXV5DmKWzCX73qwAb1b7nuk3JU=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: leYwTzQSBIppbFVg+M8kBRSLpk7yqfShryu5pf+nUHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 09:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:33:ad:11:f3:2c:00:d1:23:c0:ea:c8:b6:62:d0:64:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Mar 28 09:01:13 2026 GMT
            Not After : Mar 29 09:01:13 2026 GMT
        Subject: CN=f4a3e89246330d6df19ae58a9694792f576fb89c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ca:ed:4a:13:63:c9:cf:23:42:5f:52:ee:f9:
                    4b:13:44:2b:ee:f4:27:25:b1:e9:5d:f7:54:d2:b7:
                    d0:d4:20:5a:01:e2:0b:a7:83:bc:70:6b:c4:da:04:
                    ae:39:a9:cb:49:03:55:1b:78:28:9a:c7:df:e8:cc:
                    98:6e:6c:9e:f8:0f:69:f0:73:2c:81:a9:77:06:59:
                    e7:35:46:87:22:1a:d0:9b:ff:d3:f6:57:ab:fe:77:
                    61:bf:6a:93:f5:01:6c:19:0a:d8:01:12:d7:de:8e:
                    d3:e0:89:f3:8a:45:02:78:e0:50:09:19:97:94:4d:
                    d6:0f:27:5c:f9:ae:35:1c:33:7d:43:48:4b:ce:f2:
                    08:00:45:37:54:4e:1a:28:f6:c1:7d:d8:52:01:a8:
                    cb:2c:ef:af:0d:10:ea:aa:7c:2e:f9:29:0b:7d:f9:
                    d0:23:f0:88:d3:00:f0:99:21:74:47:9f:12:23:99:
                    34:33:1b:17:7a:ef:05:d9:61:5d:1b:58:97:77:22:
                    2e:a9:27:32:fb:c1:df:1c:c1:55:d0:af:b7:6f:f7:
                    8b:99:df:cd:71:59:94:4c:a4:45:40:9d:72:c1:46:
                    92:f8:49:21:61:9a:e5:a8:6a:80:11:72:f9:0e:a9:
                    06:b3:8b:e6:2f:b5:84:b1:89:37:8a:e7:01:80:50:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:E8:92:46:33:0D:6D:F1:9A:E5:8A:96:94:79:2F:57:6F:B8:9C
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3d:2c:be:9f:40:03:8a:20:ec:39:c3:bb:00:d9:98:13:d9:
         64:c7:f9:60:7d:c3:b8:4b:7f:e2:68:60:5e:83:07:6e:4b:da:
         78:a4:96:a3:0c:47:2f:76:8d:72:4a:c9:46:ca:1b:c4:d5:de:
         c0:ef:83:45:02:ed:4a:83:25:ad:e7:fa:26:8c:26:e4:d0:0a:
         a0:f0:71:df:7a:ab:a2:cf:88:85:fc:bd:54:29:be:90:96:db:
         3d:2a:33:7c:c1:4d:e0:7c:28:01:02:77:98:f1:7e:b6:78:81:
         73:57:30:bd:05:a8:c5:64:9d:37:09:1a:9e:7b:0a:92:f3:90:
         05:df:26:31:63:51:3a:73:02:7a:a1:d2:0d:e1:df:cf:d3:10:
         61:61:5b:cc:1a:d9:bb:3a:d1:51:ba:a2:18:b4:01:9d:b1:d8:
         01:a0:8a:79:31:2e:23:b6:8f:07:4c:c6:08:29:df:4b:ef:30:
         d6:a7:44:34:57:7f:3b:6c:9d:4b:b2:e6:1d:74:bf:6b:13:4b:
         69:d3:4b:d8:67:90:ba:a6:f9:a1:60:89:f9:be:ac:1e:a4:5b:
         e4:7e:fb:02:e9:1f:f7:6a:13:a9:fb:d1:b0:04:16:ba:11:54:
         e0:83:e1:2e:f9:83:88:22:a2:62:4b:78:fc:71:bc:e6:29:ee:
         86:84:52:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 18:28:27 2026 by rpki-client