Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File:                     xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier:          /ftsYwOLpPpUqQdZusVZeh56TCfFgZpBcT0qgAS0py4=
Subject key identifier:   FC:E6:60:6C:F2:56:14:24:66:B3:26:D6:97:41:7A:A2:D7:B6:DB:1B
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer:       /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial:       019CE59190C03F12B4646C93F9EB48BF2D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number:          1868
Signing time:             Fri 13 Mar 2026 05:00:48 +0000
Manifest this update:     Fri 13 Mar 2026 05:00:48 +0000
Manifest next update:     Sat 14 Mar 2026 05:00:48 +0000
Files and hashes:         1: meduvkE4g-7_NYzpwBUpuDy0fCw.roa (hash: Ch8KIvSk+wsICXuHTJIlbbBxjJkAmiuMMWx8HiiHkT4=)
                          2: vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa (hash: VPn4BdBIJroCps/v1nH2+yo8aRlxWPoX7wGg/avedFw=)
                          3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: hR2g6593sCBb4rB/bVMnFGyb1VFiiSVSM+KKOvo0csU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:91:90:c0:3f:12:b4:64:6c:93:f9:eb:48:bf:2d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
        Validity
            Not Before: Mar 13 05:00:48 2026 GMT
            Not After : Mar 14 05:00:48 2026 GMT
        Subject: CN=fce6606cf256142466b326d697417aa2d7b6db1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f3:e3:ec:6d:d2:e8:89:19:a7:24:e3:10:f3:
                    11:43:62:07:84:7b:2c:b3:2d:8b:f3:a2:f8:61:0d:
                    e2:38:58:9b:c8:fc:e7:66:1a:5d:66:c6:5b:00:c4:
                    ce:5f:55:4b:04:74:04:b2:8f:c1:7d:52:a8:c2:70:
                    65:76:c0:c7:6c:14:a0:9b:a4:47:04:10:79:47:f5:
                    e0:da:db:13:60:ff:42:9c:0e:be:6d:6c:74:77:84:
                    1c:35:12:41:89:1b:c5:7f:20:60:50:ec:93:03:49:
                    00:bf:7a:01:ca:f0:11:d6:ee:47:ca:d9:21:7a:d4:
                    b6:a9:01:4f:bc:ae:36:db:5b:31:71:2a:a6:42:15:
                    e0:ba:2b:b3:75:79:18:83:49:a9:eb:97:2a:d5:c4:
                    3c:ba:b6:f9:7d:46:7d:ea:f4:28:ff:f3:13:00:ab:
                    be:58:bf:44:96:5f:ed:bc:de:17:bb:6a:42:79:4c:
                    41:5e:8f:4e:81:70:a4:5d:34:4f:6a:c7:a5:8a:b5:
                    56:ba:8d:c4:65:1a:b0:31:1c:97:f3:26:9a:33:79:
                    90:af:85:ee:55:4f:fd:bf:5d:94:4d:a4:6b:15:c6:
                    11:6f:df:8f:da:2f:3f:c9:bc:bc:bb:65:ba:9f:c8:
                    f3:51:1e:0a:b3:e2:db:3d:a0:0d:23:3a:58:ea:39:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E6:60:6C:F2:56:14:24:66:B3:26:D6:97:41:7A:A2:D7:B6:DB:1B
            X509v3 Authority Key Identifier:
                keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:38:d3:fd:d4:04:ac:06:5c:a9:aa:4f:4c:8e:4e:48:10:0d:
         8b:5d:09:6e:e7:7b:b5:65:a8:02:12:60:f6:52:21:57:90:38:
         13:3c:78:7b:f3:78:73:c6:4e:8a:99:d1:48:9b:41:9a:c7:1b:
         6f:0f:de:da:89:57:9c:96:d6:21:12:b5:a6:bd:01:bf:3b:bf:
         4b:88:43:00:8b:c6:5d:3a:00:be:82:64:97:65:cd:f2:96:34:
         8f:12:8b:97:0f:37:5b:4a:a2:c6:1e:2b:95:26:6a:1b:3d:8c:
         5b:bb:26:a2:0d:c1:96:cc:db:76:25:9b:ec:a7:02:ef:16:e8:
         45:15:6f:66:b8:02:17:26:7f:18:b9:e6:1d:91:6a:2b:7f:3d:
         25:c0:38:b0:7a:2d:25:fb:ff:ba:ac:fc:69:49:e6:e9:f4:f2:
         42:2b:2a:03:42:ec:4f:2e:3a:2e:07:73:9f:08:32:3c:04:d0:
         28:85:f2:f9:eb:cf:2c:6f:cc:9d:fe:d4:eb:44:a3:66:5d:e2:
         fb:87:75:e7:58:9a:39:c0:6b:01:1d:d9:ae:72:84:71:73:fd:
         c2:48:cd:ae:40:5e:ad:a0:47:09:e4:5b:6e:ee:41:b5:b1:59:
         84:fd:6c:88:d4:77:8a:0d:92:45:ad:ce:87:a8:20:c8:cf:b2:
         eb:ec:b4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:38 2026 by rpki-client