Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          +HDMnJjLFK1rkPN2/Rx9C7rqd0uXPWLS5uGcD24kxlE=
Subject key identifier:   7C:67:A6:49:2C:EB:0F:90:55:A9:41:58:C0:F8:13:B7:BC:81:34:D1
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019D382E363F812707CE942AB2CAE1546418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0604
Signing time:             Sun 29 Mar 2026 06:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:45 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: Kz5Ug2ankblot5M/bifkU6zUN3rE5To7qhCGFak/mHs=)
                          2: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (hash: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:36:3f:81:27:07:ce:94:2a:b2:ca:e1:54:64:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Mar 29 06:00:45 2026 GMT
            Not After : Mar 30 06:00:45 2026 GMT
        Subject: CN=7c67a6492ceb0f9055a94158c0f813b7bc8134d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:27:c9:30:59:25:07:17:30:42:b8:3a:8f:
                    2b:ac:27:20:35:8e:6b:84:58:c8:8d:e0:3e:86:e5:
                    62:d5:b5:d2:3a:47:c1:16:65:4a:5f:16:d5:c6:c9:
                    a3:f2:4a:dd:b6:60:8d:99:23:18:8e:2b:31:42:2d:
                    5b:b4:c8:45:9f:c2:39:59:1e:20:26:78:86:69:94:
                    6c:cc:e4:59:93:f6:10:13:9e:ae:a5:f4:52:ec:e4:
                    55:1a:62:39:5f:76:65:e5:90:d8:a6:10:d4:1f:62:
                    1b:27:27:4d:51:f7:cb:a6:37:5d:f2:d5:bb:a4:62:
                    4b:80:4c:da:fc:38:c7:71:4b:48:ef:6a:d4:8c:52:
                    44:76:82:a7:76:19:36:bb:df:2e:a9:89:93:24:6a:
                    8c:2d:2d:81:3f:22:48:0f:d1:c8:fd:f8:da:e1:52:
                    15:c4:04:01:6a:16:cc:22:79:96:cb:8f:5d:ed:30:
                    c5:f7:90:e1:00:37:d1:ac:dc:4a:af:98:ae:8b:e4:
                    d6:bd:52:71:4f:12:0c:a2:d0:4e:2b:43:d5:ae:98:
                    c2:d8:ff:90:cf:50:5f:af:6a:54:a0:fd:f3:00:12:
                    74:19:02:00:80:c8:48:74:2c:16:8b:80:f2:47:73:
                    c9:ec:44:ef:89:df:ee:c7:b8:2e:3f:40:27:a9:73:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:67:A6:49:2C:EB:0F:90:55:A9:41:58:C0:F8:13:B7:BC:81:34:D1
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9e:eb:13:81:87:e2:1e:4d:df:f5:2a:e6:3d:4c:74:06:6e:
         bb:5b:8b:76:cd:f8:51:1e:f3:d4:5d:92:ed:6f:51:da:a3:c1:
         68:cd:14:68:42:e4:a2:13:37:75:56:26:b5:0a:e6:5c:44:51:
         1b:3a:a9:09:89:3f:91:79:92:ba:e8:35:8d:97:7b:2c:cc:cb:
         0a:ad:11:ab:92:dd:33:7a:c7:49:9d:b3:80:01:8c:ff:26:83:
         f8:b7:8d:87:cb:7c:b7:35:53:82:92:08:44:00:f6:79:93:b1:
         ac:cf:af:56:5b:6d:c9:6d:3a:ab:c1:9a:60:77:17:22:49:3d:
         e2:9f:b8:54:d4:05:2e:d9:a8:d5:3c:41:7d:26:c7:7b:b6:cf:
         5c:62:ce:79:27:f4:c3:23:a4:ca:d3:aa:f3:5d:c1:60:2a:7e:
         1e:eb:67:fe:7c:b8:65:4d:80:3d:a1:f2:ef:e6:0d:5e:5b:f7:
         6e:6d:cb:a4:b8:6b:10:75:2c:8a:bf:e7:3b:43:7b:c2:af:57:
         eb:87:21:7a:38:4b:44:bd:48:54:f4:77:e7:52:62:91:95:ca:
         c5:7c:1c:37:cf:11:31:c8:09:27:03:67:ad:41:0c:bf:72:39:
         07:65:f0:c0:15:3d:98:13:3e:b6:2d:db:b7:4a:ac:9a:dc:a1:
         2f:52:9c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client