Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          /NdDm+DnfcieNNc5XNGA3XDVBw1537UAoda0Ln5g33U=
Subject key identifier:   17:3F:B0:4E:E3:0C:7D:D2:34:20:26:47:85:00:E0:7F:C5:B0:A5:5C
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019D37F72E96B996CB0725D3D42AD8E77906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 05:00:39 +0000
Manifest this update:     Sun 29 Mar 2026 05:00:39 +0000
Manifest next update:     Mon 30 Mar 2026 05:00:39 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: BK4UzGHP3agYFwPt6subA0fdkZ8zWlcQGE/Dk6G+RrE=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 05:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:f7:2e:96:b9:96:cb:07:25:d3:d4:2a:d8:e7:79:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Mar 29 05:00:39 2026 GMT
            Not After : Mar 30 05:00:39 2026 GMT
        Subject: CN=173fb04ee30c7dd2342026478500e07fc5b0a55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:97:ea:f8:5c:e6:c3:9a:a2:6b:85:76:9f:
                    2e:d3:0a:4e:80:06:9d:f1:11:9c:27:2b:54:13:56:
                    35:ca:9e:10:ea:ba:8a:55:2e:68:dd:4d:3f:ce:2e:
                    b5:82:5f:b7:d8:26:b1:11:dd:09:2d:70:3c:4d:2e:
                    d1:c4:55:3a:93:c6:09:a2:10:d9:df:ca:f3:7b:6a:
                    42:f1:42:76:30:06:a0:1a:31:36:15:65:cc:2b:cb:
                    c2:f1:0c:73:90:39:fa:63:b2:d2:de:6d:05:14:51:
                    a2:27:a5:10:1c:a3:2a:f7:a6:27:47:e2:c7:44:8a:
                    fd:79:95:36:f4:be:5d:c5:6a:8c:c9:ef:95:7c:19:
                    bf:85:19:05:e2:3d:b9:ee:2f:a4:8e:d7:7a:ab:a6:
                    56:da:69:14:38:61:37:13:e3:a4:8c:f6:8d:8a:d4:
                    53:13:a5:a3:01:20:a5:f3:94:a2:86:be:78:3e:2a:
                    d2:a9:a2:47:68:01:60:51:e1:88:61:52:42:54:2e:
                    29:a4:0d:71:cd:d7:20:22:e4:e9:5a:4c:04:f6:19:
                    34:6f:82:0a:68:bb:e8:d2:3b:0a:20:0d:8c:a7:10:
                    ec:d6:1d:9f:12:5d:0b:0d:0f:74:51:ca:fc:f9:9b:
                    60:61:35:6b:df:17:88:bd:ae:eb:e9:3a:96:e5:55:
                    b3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3F:B0:4E:E3:0C:7D:D2:34:20:26:47:85:00:E0:7F:C5:B0:A5:5C
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:19:bd:bb:08:f6:d9:e4:e2:b2:10:43:e5:5c:8a:74:33:d9:
         68:3c:4f:8f:a7:4d:8f:c3:2c:a3:b7:6e:86:a0:af:44:da:50:
         f0:00:d8:6f:39:f7:cc:8b:80:01:8a:a8:0a:06:fb:dd:88:c9:
         69:33:57:75:5d:6f:b6:3f:45:23:8d:30:14:5d:fa:26:32:f3:
         c0:17:41:0f:6c:87:df:aa:8e:4f:8f:d1:cb:ed:3b:e7:57:fb:
         7d:ce:9e:2e:5a:72:d7:a3:aa:cd:b9:2b:36:e9:d2:b0:09:5e:
         5c:06:73:cb:15:37:69:02:d1:54:dc:bc:20:41:c4:c4:42:42:
         d2:33:75:cf:dd:b3:6d:99:b5:45:66:17:c5:3a:be:da:99:5c:
         ae:13:42:4d:b6:4c:fc:33:99:57:a5:06:7e:a8:96:10:c4:fa:
         aa:3a:2c:45:61:f2:61:23:7e:2c:9f:3b:f3:ac:77:4a:be:8a:
         45:da:81:0e:1f:f4:b3:13:e4:25:2d:92:ff:f0:bc:60:0c:0a:
         a6:0d:7a:94:a6:ae:98:61:ea:21:ec:a4:13:4f:18:4f:59:f7:
         b9:86:32:61:c9:aa:85:3e:27:21:8e:0d:b9:09:9c:05:2b:55:
         33:87:a8:40:c0:76:f8:63:f8:9a:46:c6:1d:b9:d8:8c:9c:e9:
         b9:6c:80:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client