Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
File:                     Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json)
Hash identifier:          DNBVA63WG+i9BoTrH0bKXcisJZrtD7N2aypf2LObtyU=
Subject key identifier:   A7:DA:C2:A8:80:3F:24:6A:B7:83:02:EC:B5:4E:A4:34:A9:37:D5:79
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Certificate issuer:       /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial:       019CBD3AED50E7091C3710E6CE5969A68F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
Manifest number:          184E
Signing time:             Thu 05 Mar 2026 09:01:21 +0000
Manifest this update:     Thu 05 Mar 2026 09:01:21 +0000
Manifest next update:     Fri 06 Mar 2026 09:01:21 +0000
Files and hashes:         1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: r2mrUQbiErzQX5p+oFCRnn+i32dreVgmPUrM8CMwEEQ=)
                          2: xpG2n7uOaA6uJtKoLlPX_didybY.roa (hash: yoBkvwTXsxWufbIraEfKOn7JbJXfeY9e9MM70Sw1B2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Mar 2026 08:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:bd:3a:ed:50:e7:09:1c:37:10:e6:ce:59:69:a6:8f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
        Validity
            Not Before: Mar  5 09:01:21 2026 GMT
            Not After : Mar  6 09:01:21 2026 GMT
        Subject: CN=a7dac2a8803f246ab78302ecb54ea434a937d579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:8c:c1:d3:e6:39:39:92:39:43:8f:25:97:
                    13:78:b4:f8:ad:8f:7f:a0:9c:32:57:ea:82:c3:7a:
                    4c:86:94:e3:65:97:b4:96:94:58:ae:20:62:75:0a:
                    d2:7d:4f:84:ff:cd:82:fd:b1:53:b1:4b:3a:b6:74:
                    5c:55:96:1f:73:56:e5:23:3a:6e:ba:e0:f2:66:2b:
                    5a:a3:d3:14:aa:74:e6:96:d0:88:f1:c9:5d:6f:ee:
                    f5:e4:ff:db:b1:e6:32:9d:9d:b5:20:06:9b:ad:97:
                    84:cd:59:e4:9b:f9:e1:ed:32:bd:de:61:4c:36:f5:
                    00:3e:ec:6d:09:10:a7:97:2c:68:25:fd:c3:b4:52:
                    31:d8:42:27:3e:77:f4:ad:3e:bc:f9:cd:98:78:7c:
                    40:5a:76:61:cd:cd:30:68:51:22:82:29:8c:01:1c:
                    fb:64:d9:67:57:86:06:f0:f3:df:9a:09:24:f0:9f:
                    90:3e:a6:ce:01:a4:b6:7f:01:95:4f:59:23:8c:93:
                    63:3f:72:a0:1c:8f:b0:92:53:89:9e:7a:8a:f4:14:
                    66:3b:b3:6d:35:71:47:53:b3:a9:a2:43:3b:5c:9d:
                    ce:b6:46:82:c7:3b:52:a1:52:86:f0:59:4a:00:d4:
                    95:3c:56:2a:03:97:dd:69:73:6a:c5:d7:3f:a5:3e:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DA:C2:A8:80:3F:24:6A:B7:83:02:EC:B5:4E:A4:34:A9:37:D5:79
            X509v3 Authority Key Identifier:
                keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:97:46:63:84:ab:cd:50:d7:88:83:3b:90:2a:dc:88:9b:5f:
         3d:f7:bd:04:5d:08:a2:cc:27:cd:30:76:fc:8f:84:93:19:c7:
         04:3b:78:7b:ac:10:40:bd:75:18:3d:d5:fc:f7:43:5c:fa:c1:
         3e:2c:69:98:d1:16:82:6f:9e:3e:88:77:09:70:ed:d3:05:57:
         34:dd:26:45:9d:ec:8b:65:5f:a2:6e:f2:f9:29:1b:ad:a4:51:
         5e:77:5e:a5:5a:a6:a3:8f:2e:6b:c1:9a:c5:17:da:6f:22:77:
         3a:88:2f:60:30:de:c0:af:d7:1e:51:9a:fc:2a:e7:3e:57:97:
         99:e9:f2:44:fb:10:48:00:48:f2:55:90:c4:a3:92:32:a2:2f:
         d3:cf:a0:16:94:43:d3:e1:89:56:07:89:77:1a:8d:6c:49:d9:
         5f:27:0b:9d:eb:05:73:a8:ba:fa:79:28:b1:ed:85:4f:43:af:
         5c:c6:94:68:a3:53:3a:6d:03:36:f5:dc:c5:05:c3:da:90:73:
         d6:25:b6:47:19:b4:85:70:fe:f6:58:84:25:83:a5:76:7d:5f:
         60:ca:46:3f:dc:b5:67:e1:f6:7b:8a:4e:ab:0f:66:71:fc:86:
         f1:e2:a0:74:2c:92:15:50:d1:ae:11:b9:91:d6:1e:c0:5c:1f:
         33:cc:2b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:24:34 2026 by rpki-client