Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
File:                     _LwbYj6YBVnjKlodtYD4pzRBdwU.mft (raw, json)
Hash identifier:          x57r3fEW1Fpp6oX69j4vrYqzFWOoMH65w0umxW9cYkw=
Subject key identifier:   78:81:93:B4:A5:C8:98:54:73:8D:C9:1A:66:44:64:52:8F:DB:F6:92
Authority key identifier: FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05
Certificate issuer:       /CN=fcbc1b623e980559e32a5a1db580f8a734417705
Certificate serial:       019D39E5507FC004B23D42E999F4A8AA3E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
Manifest number:          083B
Signing time:             Sun 29 Mar 2026 14:00:22 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:22 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:22 +0000
Files and hashes:         1: _LwbYj6YBVnjKlodtYD4pzRBdwU.crl (hash: lg9Y85X+Wjz8fZHyme4mFC7/XS/u2m9FebugMuFmfpQ=)
                          2: uetR0NYlftUI-N4cveVJay7Nfqs.roa (hash: oU+tDn/SW8IQrBkBO3IDY8rZ4byuiEOxIdJBkCXSH9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:50:7f:c0:04:b2:3d:42:e9:99:f4:a8:aa:3e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcbc1b623e980559e32a5a1db580f8a734417705
        Validity
            Not Before: Mar 29 14:00:22 2026 GMT
            Not After : Mar 30 14:00:22 2026 GMT
        Subject: CN=788193b4a5c89854738dc91a664464528fdbf692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:89:10:40:8d:4b:de:30:a0:32:7d:3c:b5:
                    55:6e:86:8a:37:e1:10:de:83:d2:04:47:d7:22:cd:
                    07:7b:18:22:af:c3:b4:6a:ab:c7:67:b7:40:a2:93:
                    e4:c6:53:f5:6b:9d:5c:0e:d2:ce:0c:c6:31:3c:b2:
                    20:4a:7f:83:3a:0a:b3:d1:cb:ca:52:88:b8:78:bc:
                    b5:78:28:1c:da:88:17:59:b9:b2:1d:4f:4f:9c:39:
                    0f:a1:ad:2d:06:12:93:9d:3b:14:77:cf:b7:71:21:
                    aa:9c:b7:a1:af:3e:76:b5:4e:4f:bd:ac:19:ac:d3:
                    2f:bd:b1:09:73:74:45:2f:85:0b:0a:94:5e:b4:fe:
                    2a:21:43:2d:73:4d:8f:07:30:0b:cc:55:69:69:28:
                    93:0b:05:bf:b4:ef:73:90:95:5e:4e:cf:4b:c6:27:
                    e1:2b:63:0e:26:b3:ab:b4:ec:1c:68:24:87:e5:e6:
                    a3:2a:34:79:2a:ee:69:a6:27:6e:f4:f3:9a:97:74:
                    ca:5c:8c:1a:74:be:ea:0d:da:01:89:49:be:55:ad:
                    19:4b:a1:2b:0b:63:99:17:83:70:f9:ba:45:6b:a2:
                    ac:8c:89:b5:98:5c:b8:33:9e:e7:55:e9:c2:1c:9d:
                    18:87:8d:de:9f:45:33:a3:13:b3:a7:bc:2c:65:ec:
                    6f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:81:93:B4:A5:C8:98:54:73:8D:C9:1A:66:44:64:52:8F:DB:F6:92
            X509v3 Authority Key Identifier:
                keyid:FC:BC:1B:62:3E:98:05:59:E3:2A:5A:1D:B5:80:F8:A7:34:41:77:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_LwbYj6YBVnjKlodtYD4pzRBdwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/032eab-c4c7-4b6d-9d6d-71a7542a6066/1/_LwbYj6YBVnjKlodtYD4pzRBdwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:d7:c5:4f:13:41:81:b0:5a:2e:97:0a:9f:03:48:e7:d8:64:
         b0:b4:65:7a:8c:1c:39:36:1a:08:13:3e:87:40:dd:0d:cc:e0:
         db:c0:6c:fe:c4:1d:57:3b:f6:3f:c7:69:c6:3d:ab:f4:55:60:
         62:ea:3c:60:39:a8:16:a0:66:6d:5c:68:98:b9:3b:ef:20:44:
         ce:57:9d:23:6c:a1:af:8d:b1:84:81:e6:c7:07:7c:cc:c1:c1:
         dd:f7:8d:7b:4e:1d:0f:33:11:0f:58:b2:9b:52:4e:80:72:53:
         54:09:c5:8d:c4:b0:f9:2d:ee:65:39:1f:46:86:ed:95:ab:f9:
         c0:23:6f:40:b8:02:38:7d:b9:44:15:b7:28:43:dd:26:da:97:
         7c:63:ed:d5:b1:63:a3:d9:18:43:e1:35:b6:53:44:32:78:c1:
         1e:3e:5f:63:d5:6b:ce:5e:21:81:ad:68:57:c0:e5:ec:cd:4d:
         d2:36:86:0a:d9:b9:eb:45:a2:79:9d:a3:be:21:1c:97:84:19:
         94:c9:74:1e:f6:c7:ad:f6:72:68:d2:df:33:85:29:6d:0e:7a:
         32:a8:2b:15:ac:e3:08:12:cd:ee:95:df:21:48:a4:05:43:62:
         07:bb:b1:40:5c:b8:f4:dc:7b:c4:c1:55:80:07:37:86:54:93:
         34:c3:64:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:05 2026 by rpki-client