Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
File:                     F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft (raw, json)
Hash identifier:          dGLCnL7Mvcq2jmv3sbaqPkz7l9QWPQN/qWWZgyVDen4=
Subject key identifier:   7B:81:DF:ED:48:8B:7F:CB:B3:9F:D6:45:69:A3:DA:C2:25:23:45:31
Authority key identifier: 17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F
Certificate issuer:       /CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
Certificate serial:       019D37C10D33779001B5D165E8469238C9B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
Manifest number:          1761
Signing time:             Sun 29 Mar 2026 04:01:31 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:31 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:31 +0000
Files and hashes:         1: F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl (hash: /ub76euaVpOpwA+X8206ScfDsTXef8wSR+gxQfNkJk8=)
                          2: T8x0xAy4_PhKVTNAIYlfZtMXvu0.roa (hash: s67CBRuK7ZUjTCXXYr43zzJxgIRbOGZjxmpnRxJkzf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c1:0d:33:77:90:01:b5:d1:65:e8:46:92:38:c9:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ebc86d853f7e3a920153f1fb0b19f7b0e41a7f
        Validity
            Not Before: Mar 29 04:01:31 2026 GMT
            Not After : Mar 30 04:01:31 2026 GMT
        Subject: CN=7b81dfed488b7fcbb39fd64569a3dac225234531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:2d:11:19:e7:2b:71:ec:bb:54:7b:1d:63:
                    ff:38:e5:24:44:d4:1e:d5:ac:fa:9d:86:e9:f8:a2:
                    54:a4:c9:3e:6a:4b:f7:08:7d:14:5e:5e:54:0d:79:
                    88:cd:80:03:0c:4d:2f:ab:11:e8:9c:bb:91:b9:62:
                    30:b8:fd:7c:ab:86:bf:df:d8:19:2b:f6:2c:2d:e6:
                    de:06:fd:f1:75:7a:51:8d:a7:6b:59:36:54:a3:0b:
                    65:69:c5:41:06:76:35:64:a1:89:a4:2e:6f:d4:8f:
                    02:04:c4:c0:dd:a9:e0:b3:a3:ea:ab:59:da:6a:3f:
                    ae:23:fa:dc:68:25:82:f2:5e:68:c6:b4:4e:b0:2e:
                    05:8a:85:fa:77:df:a3:6a:91:f8:6b:8d:06:ff:68:
                    7d:5e:52:ca:80:4c:28:28:a8:60:b7:ae:23:26:83:
                    7c:70:cf:79:70:12:94:47:c2:29:a9:23:cd:f9:09:
                    0e:e4:f7:21:f2:d0:0d:04:bc:ec:e4:e3:e7:09:1b:
                    87:04:79:51:c9:55:c0:c8:1e:10:d5:2c:b8:8b:82:
                    d1:ed:ec:2f:72:06:ed:88:70:71:35:1a:39:a8:85:
                    45:91:11:47:4e:a0:f6:dd:62:05:96:6e:9d:47:99:
                    f4:6d:04:21:1a:9a:71:5d:93:87:eb:e9:81:cc:69:
                    e6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:DF:ED:48:8B:7F:CB:B3:9F:D6:45:69:A3:DA:C2:25:23:45:31
            X509v3 Authority Key Identifier:
                keyid:17:EB:C8:6D:85:3F:7E:3A:92:01:53:F1:FB:0B:19:F7:B0:E4:1A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-vIbYU_fjqSAVPx-wsZ97DkGn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/eee8b5-b451-41d7-ad12-f75618be62d7/1/F-vIbYU_fjqSAVPx-wsZ97DkGn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6c:f5:24:48:c2:e4:cb:cc:f0:dd:90:e0:c4:5a:5f:2b:32:
         06:01:48:bb:9e:c9:3d:10:24:af:aa:37:54:ad:cf:e9:8e:71:
         bc:fe:78:b3:93:4d:6e:4c:2e:a9:25:22:df:4a:e6:2f:de:a4:
         cc:47:f7:7a:e4:99:71:54:52:e2:30:a7:a2:ac:53:20:4b:99:
         9a:57:08:96:00:a1:e6:df:ed:51:c2:98:d5:6a:a9:d6:be:c9:
         4e:2a:90:f3:d8:64:a4:01:f1:4a:7a:b2:ab:3f:0a:2a:26:a4:
         47:04:63:7d:40:ee:7f:20:d2:ef:3c:93:a7:d5:8e:cc:e2:df:
         95:d6:7a:46:ac:7f:3b:3a:5e:e0:54:69:ea:d6:65:ae:3a:7c:
         fd:66:44:5b:64:d8:4f:38:9f:c7:1c:cf:28:b6:e6:c4:ae:ab:
         ea:6c:c2:f9:5a:59:0e:18:8c:f0:7f:5a:23:5b:30:eb:50:dc:
         27:46:c6:32:8a:5d:3e:3b:60:b5:2c:c7:5a:fd:fb:95:83:a6:
         e4:c4:67:f5:6a:70:aa:0c:11:69:c3:2e:5e:3b:d2:4c:c4:15:
         b1:b6:34:22:a2:05:eb:eb:62:13:e5:32:97:1b:64:02:64:37:
         16:55:b9:0b:b6:ba:ac:1e:17:8e:6d:4a:23:42:99:7e:9d:2a:
         d4:8d:f0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:20 2026 by rpki-client