Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File:                     fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier:          cYmbXEME9uUR+l1fmRy6PXk1T3Y0YYptO2q79WhJO5w=
Subject key identifier:   B6:8D:F8:79:B5:26:E1:FF:2A:EF:1B:A8:7A:C8:E5:23:FA:9B:0F:B0
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       019D382EAA0202C93D91D825D0D6FABE4CCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number:          0196
Signing time:             Sun 29 Mar 2026 06:01:15 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:15 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:15 +0000
Files and hashes:         1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
                          2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
                          3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: rWwuuHTrYgB1tKmQoah0H25QwwHLbd0CDZR8+aMdy1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:aa:02:02:c9:3d:91:d8:25:d0:d6:fa:be:4c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: Mar 29 06:01:15 2026 GMT
            Not After : Mar 30 06:01:15 2026 GMT
        Subject: CN=b68df879b526e1ff2aef1ba87ac8e523fa9b0fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:47:3b:00:c5:ce:00:1a:69:9d:7e:0e:2a:6b:
                    f4:29:6f:d5:aa:04:c3:8e:0b:30:47:5a:5d:0d:95:
                    d1:c3:17:04:97:a6:26:84:a6:7a:1e:22:83:18:a8:
                    d1:b7:89:dd:e0:43:74:18:0c:0e:4f:af:4f:2d:52:
                    11:0e:ea:17:fb:f4:7c:79:5b:96:b5:83:44:08:33:
                    61:52:f6:82:f4:bb:62:24:9b:61:4e:29:f5:57:6d:
                    75:50:0f:48:a0:e4:5e:04:13:4f:c9:ea:0c:a5:81:
                    3b:d0:6c:67:38:c5:15:70:d0:59:2a:ff:08:a5:51:
                    9c:cd:5a:68:03:c1:34:9c:57:46:f5:9a:99:5e:25:
                    7f:f1:4f:33:41:c1:da:d3:66:c6:fd:7a:6b:68:98:
                    0d:db:96:e6:6d:2c:86:d2:84:f4:b0:b6:18:7d:15:
                    64:5d:9a:20:aa:bf:d9:fa:99:7f:c1:fc:e4:d5:12:
                    56:6f:14:7c:e1:af:2b:ef:93:d9:4b:a4:28:2b:2a:
                    ea:89:f0:55:d7:0a:31:c8:35:14:58:c7:6f:02:eb:
                    de:df:fa:df:0c:f4:9d:d0:5d:b5:8f:8e:f9:3d:5b:
                    aa:2f:fe:4f:a9:cb:18:65:aa:79:14:37:1a:d1:03:
                    f7:a5:7c:52:47:3f:b4:c5:d2:c8:eb:e8:10:24:0c:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8D:F8:79:B5:26:E1:FF:2A:EF:1B:A8:7A:C8:E5:23:FA:9B:0F:B0
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:86:91:2a:fc:24:ab:0b:ba:b5:cc:76:e3:b3:dc:61:1c:ed:
         18:e0:6f:f3:99:74:67:60:2e:f2:13:24:ce:72:ff:08:7f:1c:
         30:80:2b:c9:f9:93:b0:4c:88:ee:97:93:de:ab:b8:86:fe:37:
         d9:f0:85:48:e0:3c:46:9e:35:f6:3f:9e:93:6e:68:67:bc:9b:
         76:66:28:83:1d:96:26:cb:92:0a:b1:04:aa:7a:25:2f:b3:88:
         ec:0b:50:f9:5b:ae:ab:31:19:32:2a:07:80:9b:93:96:43:d9:
         96:22:f4:9a:a8:a2:93:02:51:5b:dd:bd:ac:a0:78:b4:ad:aa:
         ee:df:15:53:89:6e:c7:82:54:0f:df:b5:c2:00:2f:e5:e1:e6:
         27:71:75:c9:cd:7a:c7:ff:3b:20:22:e5:b4:14:ac:b0:c0:2a:
         3b:58:c6:03:ba:44:2b:1d:83:0a:af:a3:ff:29:fb:b6:ae:b9:
         a7:cb:3a:f3:cb:f5:2a:0c:03:85:32:42:0f:ea:c8:63:1f:08:
         75:e9:24:2e:ee:20:18:ef:ee:dc:ba:9a:0e:81:60:de:78:97:
         b0:f1:1a:9d:a5:d0:e8:2a:95:4c:05:71:3b:e4:01:e8:65:a9:
         a4:03:0f:35:b6:e1:4a:cf:af:f8:81:fa:c3:45:2a:3a:a6:cc:
         39:84:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:36 2026 by rpki-client