Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          BEgjhNXdOE2aS2I3vfMKlkiXKuHAmPIcBoRjpa2oGZg=
Subject key identifier:   CA:98:7A:4B:F4:D0:3E:E3:1B:97:7D:F5:DB:67:82:A3:D5:85:47:C9
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       019D382E62677002447EB4501181796CE468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          1898
Signing time:             Sun 29 Mar 2026 06:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:57 +0000
Files and hashes:         1: QHMJ6q0wq4_fZJJIZvFP81FKk48.roa (hash: f3trAL2IqUAU12dUD7R9RG4xG2VfoibnYgOAP7y/SEI=)
                          2: XAJ4y4vCfoUX6YkHgNFSElorTlI.roa (hash: umjfBMJi5nL3QbJXt5uwfy+GZK3OPSRY00tGrVG+j6o=)
                          3: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: eNvOiw2H2NQOvlJNapKik6BU9Tgo86HlUafl/INwwsU=)
                          4: v06BU2iHIu9uorNsisLEBjplmZA.roa (hash: MXRyS0OQvbC4wtl745NoArc8F6bSSkBVii6fN2pQffw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:62:67:70:02:44:7e:b4:50:11:81:79:6c:e4:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Mar 29 06:00:57 2026 GMT
            Not After : Mar 30 06:00:57 2026 GMT
        Subject: CN=ca987a4bf4d03ee31b977df5db6782a3d58547c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:20:a7:9f:b1:f5:7c:93:07:0a:bc:76:ea:bf:
                    4b:9b:49:13:ff:e7:0a:5c:5d:39:9a:9b:41:88:66:
                    01:3b:d7:5a:6a:f1:dc:0f:a3:c2:86:7c:63:a4:49:
                    7b:c2:4d:26:8f:45:20:05:49:56:94:16:6d:e0:a6:
                    c7:d5:b5:da:89:b9:17:6a:0d:92:4d:3d:98:ed:a8:
                    0e:21:be:8a:e8:e8:f6:6c:42:ee:33:22:47:7a:bd:
                    a3:de:b8:0c:7c:79:fe:54:e4:8c:69:d3:6a:62:c4:
                    11:e8:04:24:7d:f1:e6:e3:40:25:3a:f3:20:d4:3e:
                    3a:d5:fa:46:35:9a:18:34:e3:33:d9:5b:d5:a9:d1:
                    0b:8d:34:13:a0:a6:ae:b2:55:16:30:ae:70:3d:8e:
                    ed:28:3a:6e:81:1d:c0:e5:bd:df:c2:4c:51:9f:15:
                    a7:45:64:dd:e4:ec:1f:5b:23:37:66:5c:35:9c:82:
                    89:69:70:a0:a9:ae:96:72:27:92:2f:58:63:d4:fa:
                    3c:06:0c:da:56:94:10:ed:d8:5b:a5:7b:a6:fc:f7:
                    72:a6:d7:6c:96:72:d9:79:b3:93:17:03:49:ae:4a:
                    81:f5:c2:72:76:37:63:e6:c7:d9:b2:c0:f7:3e:37:
                    87:d7:52:c7:85:ac:dd:6b:23:32:ee:7f:74:d8:67:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:98:7A:4B:F4:D0:3E:E3:1B:97:7D:F5:DB:67:82:A3:D5:85:47:C9
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:23:d1:08:80:7c:ec:19:66:e7:01:09:95:9e:15:4b:ec:e8:
         e5:1d:7f:01:fc:3d:f2:17:11:e9:cf:f6:0f:eb:3b:71:03:22:
         ac:c4:ea:2c:ea:a1:3e:5e:26:95:12:e4:d7:5a:21:49:27:17:
         74:f5:7e:62:72:8f:5a:35:37:78:7e:f1:6b:52:9a:5f:fb:f9:
         6a:55:dd:80:57:31:23:aa:57:ba:a7:37:8d:30:41:9f:4f:59:
         59:b1:61:5f:8e:46:e4:4f:a5:0c:a3:94:03:66:30:b9:fe:bf:
         d1:53:79:51:fe:ec:bd:4a:c8:40:e8:1d:e2:e0:80:7d:ea:f1:
         bf:d9:27:4f:bd:eb:24:1a:91:b7:1f:3b:4e:b8:ff:3b:35:e5:
         4f:15:36:66:e7:43:33:f3:9c:92:98:b1:12:1d:0e:06:14:9c:
         ef:4e:3b:b3:e6:0a:1b:47:c6:ab:41:f7:b5:ad:ce:5b:7e:94:
         6c:bb:80:df:20:e4:2d:e0:1d:72:c8:3d:b0:d0:a6:79:86:ff:
         aa:84:5c:e4:79:bf:17:78:50:fa:bf:4b:d0:1d:ea:f8:a4:55:
         91:a5:3c:da:53:e8:6f:d8:ae:6c:0e:9d:70:c5:55:29:42:f5:
         f2:96:0f:c8:99:bc:b4:43:c1:26:15:62:01:7a:06:0f:0d:af:
         87:15:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:52 2026 by rpki-client