Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          JJvivdjT0cdTz+6m48BWMQ+LwMq6JVDQ1J4GQF0+xeo=
Subject key identifier:   91:3B:C6:7B:93:86:37:7B:3D:E8:B7:D6:A1:4B:DD:5A:92:86:CE:58
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       019CF9F48922C883416FEED5B1D3C4870978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          1870
Signing time:             Tue 17 Mar 2026 04:01:18 +0000
Manifest this update:     Tue 17 Mar 2026 04:01:18 +0000
Manifest next update:     Wed 18 Mar 2026 04:01:18 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: 0bhYQ/VokgOt5t74EnOP/eZHxcQT9o/dO65EIa2khcc=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Mar 2026 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:f9:f4:89:22:c8:83:41:6f:ee:d5:b1:d3:c4:87:09:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Mar 17 04:01:18 2026 GMT
            Not After : Mar 18 04:01:18 2026 GMT
        Subject: CN=913bc67b9386377b3de8b7d6a14bdd5a9286ce58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e5:db:0a:80:26:03:39:09:5a:34:0c:c0:87:
                    6d:88:39:9e:2c:d3:12:95:a2:86:3e:18:4d:eb:62:
                    a2:30:c5:41:d4:63:cb:94:14:93:59:1a:a8:a0:76:
                    37:1d:06:0d:6d:bd:21:42:1e:8d:e4:23:49:d9:00:
                    e9:fb:a8:7c:7a:d6:38:50:f9:cf:a4:a0:5e:80:bf:
                    d9:67:41:d1:b9:00:59:2b:de:fd:9b:19:2f:ae:e9:
                    04:59:0d:e1:42:c2:e5:d7:1e:a1:ed:ac:09:ff:9a:
                    0c:ce:94:bd:d9:20:5b:3f:44:10:a0:50:fd:67:7c:
                    6a:51:ea:e8:22:3d:cd:21:92:34:86:84:53:f1:ba:
                    78:69:c8:6a:d8:eb:64:a6:16:1c:cc:f5:f8:b7:a6:
                    85:ce:a9:a0:fe:8d:4b:68:cc:55:2f:1a:c2:e7:21:
                    09:ba:91:b9:fa:76:61:63:86:2f:27:9f:63:8a:70:
                    ef:79:90:f4:62:95:c4:3e:1e:f1:8b:c1:ba:3c:1f:
                    d0:fe:66:e8:d5:dc:da:fb:8d:14:fe:ff:b5:83:07:
                    90:48:78:7f:21:7b:12:47:a5:6a:da:b6:b7:b8:cb:
                    45:57:14:5b:a4:ca:bc:e8:fd:df:a6:4a:1b:ca:d8:
                    e9:f2:50:01:bb:98:cf:41:15:d9:16:b0:66:70:43:
                    01:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3B:C6:7B:93:86:37:7B:3D:E8:B7:D6:A1:4B:DD:5A:92:86:CE:58
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:13:2d:c6:62:74:77:92:3c:6b:96:69:26:a2:15:25:9c:12:
         c0:17:db:91:92:93:a8:04:e8:d0:0a:56:cb:9d:10:1e:d0:8b:
         56:a6:3e:35:ed:00:03:c7:38:b8:6b:0e:62:e1:4b:94:a7:eb:
         c8:1b:cd:1b:1a:2a:60:d3:4b:3e:e4:68:36:f2:11:97:40:1c:
         f1:c3:f6:bf:da:75:50:3f:aa:d9:4c:cd:a9:c5:ac:6d:e8:67:
         4d:75:2b:26:d4:95:ea:cf:43:eb:c1:6f:76:06:22:8a:c1:6a:
         65:da:0f:47:b5:a7:17:04:3d:c7:ea:74:c2:cc:21:58:e7:dc:
         32:47:81:dc:d0:8e:c2:d9:b3:07:b0:f2:95:98:44:24:9b:f0:
         2c:d6:cf:09:82:ac:99:a4:58:43:a8:91:59:c5:d8:c4:1b:d3:
         4e:bb:57:af:ac:33:cb:f3:df:77:83:31:c4:4b:36:c6:89:02:
         dd:2d:8e:ec:05:04:3e:4a:c6:f0:df:85:9d:b0:23:c7:c8:ad:
         53:30:b2:3a:88:2f:b4:ba:bf:d5:a6:b9:bc:00:6b:5d:e0:ff:
         63:5e:2b:e9:56:4a:89:69:f5:d2:b1:be:cb:05:9f:ca:8c:55:
         45:51:e7:d6:57:68:8a:04:bb:46:77:d4:fa:88:ab:b5:78:61:
         75:d6:01:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 08:59:03 2026 by rpki-client