Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          nW0uxQO+FcmV961upNulPKQje9cQZ6t95yKMeGTboIA=
Subject key identifier:   00:D3:FE:EB:6B:E6:91:F5:E2:CD:3D:70:52:52:CF:05:9C:C3:2C:47
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019CC719349930B54ED10BA8D06292B22F57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1854
Signing time:             Sat 07 Mar 2026 07:00:43 +0000
Manifest this update:     Sat 07 Mar 2026 07:00:43 +0000
Manifest next update:     Sun 08 Mar 2026 07:00:43 +0000
Files and hashes:         1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: fRABWQrAWJi2uAVeN6T7jJAxASHzark7XWAqa2RfjgU=)
                          3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c7:19:34:99:30:b5:4e:d1:0b:a8:d0:62:92:b2:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Mar  7 07:00:43 2026 GMT
            Not After : Mar  8 07:00:43 2026 GMT
        Subject: CN=00d3feeb6be691f5e2cd3d705252cf059cc32c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:1b:31:8c:67:84:da:5e:84:34:d3:b4:7e:
                    5e:6c:f0:0f:98:38:85:95:6b:5a:cd:63:a4:f4:c2:
                    05:17:37:a3:ad:f0:61:44:a7:bf:86:ae:19:23:5b:
                    53:d1:be:4c:ca:b7:f3:a5:e5:e8:80:dc:da:ff:f7:
                    f1:22:76:06:3c:6d:6a:69:15:a2:82:0d:f2:80:e7:
                    26:05:3c:56:19:14:cb:5b:bc:42:9c:bb:35:f7:e9:
                    74:6a:4e:d3:a3:b1:e1:2c:a3:e2:92:d5:f2:6f:c2:
                    14:c7:26:0e:69:fa:f3:68:20:0b:32:19:89:ff:f1:
                    26:dd:e8:35:8f:14:7d:eb:9f:54:96:be:e3:af:55:
                    31:e9:f2:07:d9:22:d2:8e:c0:fa:e7:03:17:26:a7:
                    bc:a9:1c:78:0a:04:09:cf:c9:f5:7a:52:97:56:74:
                    2b:d6:6a:83:31:12:6a:b2:86:d2:09:58:e0:b1:7c:
                    a9:54:cb:a3:22:a3:d4:a7:c0:35:65:8a:5c:69:d5:
                    5b:a2:64:f9:a3:78:bf:5a:25:af:e4:e0:3b:bc:57:
                    a9:89:34:0f:ec:e5:fd:c0:c5:16:16:25:05:b3:3f:
                    bd:4d:29:69:0a:b6:69:bb:a0:77:90:88:97:f3:03:
                    ac:9d:e0:d6:dc:30:f9:5e:2a:89:bb:ed:4d:89:f3:
                    a8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D3:FE:EB:6B:E6:91:F5:E2:CD:3D:70:52:52:CF:05:9C:C3:2C:47
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b6:6e:8b:50:67:65:24:e8:03:33:bc:ef:f8:97:72:c4:45:
         b4:e9:75:1d:e6:d5:d2:74:2e:49:2b:f5:da:cd:7b:97:ce:61:
         57:80:53:cc:41:d2:cf:66:55:db:b6:c1:87:0e:f3:90:62:5f:
         6a:d9:a0:1e:b5:3c:54:0c:a1:65:07:c2:ea:76:58:74:96:37:
         4e:05:ab:a6:e9:70:fd:60:84:55:3a:ae:99:9c:70:7b:b4:08:
         69:37:18:16:8e:7b:08:8c:9f:55:30:f2:74:c7:4f:e3:88:51:
         85:9a:d3:96:1e:50:56:bb:d3:93:08:09:76:5c:0a:e4:14:90:
         62:76:2e:f2:59:47:25:f9:a8:6a:9c:7b:43:0e:b3:f9:98:06:
         be:0f:26:07:a0:e0:52:e0:2d:1e:74:4e:5e:ff:de:c5:c4:ad:
         4b:4a:eb:b3:1a:e8:dd:a7:72:4e:aa:9e:52:16:78:ba:81:6b:
         f3:5e:0f:5d:ae:2c:2f:0f:53:3d:89:4a:f3:43:37:b1:22:05:
         da:d1:4a:d7:f0:07:d8:a4:92:e5:ff:45:83:ba:aa:cb:ff:5b:
         e2:ef:ca:86:c4:43:dc:6a:a2:18:e4:2c:28:f6:c0:ae:ea:d7:
         b9:92:91:81:96:e8:9f:eb:f5:6a:78:70:a4:e8:b8:74:14:3b:
         48:a3:70:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:02 2026 by rpki-client