Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File:                     FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier:          JzlWqEsz6cgocn5sa19XO1nLGsZcDY7E0XG8b3uS19Y=
Subject key identifier:   68:78:89:D7:C0:3C:CB:FB:11:25:3D:64:4E:47:66:70:12:80:02:E1
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer:       /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial:       019D378961B03FC5655B02549B080E24935C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number:          1786
Signing time:             Sun 29 Mar 2026 03:00:43 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:43 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:43 +0000
Files and hashes:         1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: jSbJdNIxnaM/j3OX9HzDNS3Ggw8cWprnnmhTBRF+FMo=)
                          2: nn-g8Y9kxqQKUzRTa6imN-OeA08.roa (hash: jwuMNXmrVdDCW+s03h/KvzRrrZv0xRVmb6hoLkPXRKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:61:b0:3f:c5:65:5b:02:54:9b:08:0e:24:93:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
        Validity
            Not Before: Mar 29 03:00:43 2026 GMT
            Not After : Mar 30 03:00:43 2026 GMT
        Subject: CN=687889d7c03ccbfb11253d644e476670128002e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:d3:42:cd:4c:e3:8c:55:75:ae:6d:d7:9e:
                    55:c5:c8:03:1c:ef:8c:6e:6f:a4:96:35:1d:c7:2d:
                    f9:46:51:05:57:f2:b6:5b:24:e2:8a:9f:2f:8d:1c:
                    35:9c:c0:68:44:e3:bf:14:32:79:26:25:df:d1:ea:
                    d4:1a:d8:ed:86:b8:d3:4c:79:3b:9d:fb:07:4a:b1:
                    d3:2d:f9:0d:89:74:35:6c:0b:7f:3f:fb:7a:61:d8:
                    a8:b0:86:ca:a0:3c:57:b5:ae:9b:b0:09:72:4e:6a:
                    13:85:cc:ee:2f:22:15:52:a1:17:80:1b:77:3d:70:
                    96:b7:93:ef:a7:78:61:32:1a:13:12:b3:32:7e:ae:
                    14:b6:e0:6f:6f:f1:c8:31:d6:f2:5a:b0:74:c2:17:
                    39:79:d6:e5:13:25:0d:93:85:c0:f4:6f:18:15:e8:
                    5d:c2:fc:49:00:e4:3f:87:a2:9a:de:e3:b8:da:54:
                    4a:c4:bd:7d:93:f8:de:b8:45:df:33:d5:56:82:0d:
                    60:5f:ba:78:44:07:f4:5f:11:5e:ac:fe:ef:04:f4:
                    48:1e:b6:53:a5:dc:5a:24:a2:97:35:d2:82:ba:bf:
                    37:4d:3c:8a:1c:33:18:ef:84:e5:63:d7:fc:e7:50:
                    04:bb:6a:8f:9d:11:7b:a0:2f:f1:a2:89:54:a0:85:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:78:89:D7:C0:3C:CB:FB:11:25:3D:64:4E:47:66:70:12:80:02:E1
            X509v3 Authority Key Identifier:
                keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:38:b6:6c:72:6a:59:f9:73:46:42:44:ae:6a:9a:16:b1:ce:
         f4:ae:bc:c2:7a:ef:ad:5b:1d:04:04:6f:54:b3:3a:be:5b:94:
         84:1e:aa:d4:59:c9:d9:a0:87:69:93:ac:48:f5:90:1f:7a:cd:
         84:54:e6:59:e7:81:7c:9f:d0:52:a0:5a:b7:c1:a8:ac:a4:87:
         44:cc:cc:f8:c9:c2:8f:c8:17:28:d0:4a:59:45:b2:8d:b7:63:
         03:d8:21:79:d1:3d:87:10:35:91:5a:f1:0d:91:49:3f:39:33:
         95:25:d3:f8:5f:7f:4f:f9:2e:b3:ad:30:88:de:d5:c7:a3:ce:
         25:d8:16:ee:32:28:2a:7f:dd:4e:16:52:5a:7b:7d:82:09:8f:
         9a:d4:44:d9:52:34:96:a8:65:d9:d5:25:3c:4a:d9:5a:a6:30:
         16:29:9c:e0:e0:9f:10:c6:32:b1:6a:6c:cd:13:ff:01:a0:31:
         08:93:25:cd:b6:45:f4:96:b9:d0:02:2a:ea:8c:5b:86:18:c7:
         b0:55:30:3a:24:00:6e:8e:d5:30:cf:73:82:9d:d4:67:a1:d0:
         a4:e2:c5:8c:66:5f:e5:6d:25:5c:4f:13:dc:f7:ce:53:ff:ed:
         d3:06:4a:17:1c:07:20:65:fb:2f:b3:b6:64:94:cb:f1:92:c9:
         a6:40:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:42 2026 by rpki-client