Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          XSXYtIwtXRAo2fj3Q/OMtFNMsT/gY9euIwLLJP9NY7U=
Subject key identifier:   86:B6:AA:C5:81:41:E6:9B:23:E0:2C:BB:9E:AA:30:E7:AE:73:95:67
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019D386641899AD792B8489CC8EC554BC83E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1892
Signing time:             Sun 29 Mar 2026 07:01:58 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:58 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:58 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: hzmcOROOBJBbo6VXOsHSV6tw1GyUXfBqrvhfU/2V05c=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:66:41:89:9a:d7:92:b8:48:9c:c8:ec:55:4b:c8:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Mar 29 07:01:58 2026 GMT
            Not After : Mar 30 07:01:58 2026 GMT
        Subject: CN=86b6aac58141e69b23e02cbb9eaa30e7ae739567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:93:fb:9b:7b:57:a3:06:03:29:49:2d:f3:
                    30:9b:cb:46:0a:2c:b5:06:9b:96:e7:d9:9a:7b:cf:
                    b4:c1:12:95:fe:49:64:49:00:a0:e1:ec:76:e5:f8:
                    bd:c9:12:69:90:f2:4d:ec:7c:02:bc:8c:11:1a:ff:
                    69:db:1c:b4:d0:a8:62:e9:fd:ae:48:13:37:85:bb:
                    71:8e:36:50:9c:87:ec:ec:c5:f4:25:6a:19:84:0b:
                    fe:83:14:1f:7c:44:ce:ed:8e:80:54:5d:ed:b7:77:
                    45:aa:a4:f1:4b:be:56:11:d7:6c:76:1f:d1:67:9d:
                    3e:60:0b:6f:0f:c2:2d:9b:c3:d7:09:6f:4f:c0:b6:
                    d7:df:9c:9d:7f:2a:03:e6:47:1d:49:77:92:2b:27:
                    d6:61:52:6d:64:a5:a0:ab:e9:56:68:2e:f3:2e:25:
                    44:68:4e:cb:e8:de:2b:09:b8:2c:f2:2f:e9:c8:61:
                    6e:85:f8:0e:16:20:f7:8d:f3:ea:51:62:a0:57:3c:
                    32:f9:de:24:11:78:d9:96:9f:5f:36:c3:20:aa:58:
                    98:21:6f:f1:74:14:f8:c5:5a:d8:23:c5:0b:a2:3b:
                    69:b3:1f:0b:bd:49:76:85:4c:30:88:7c:f1:fc:ac:
                    a9:69:2f:eb:cc:36:87:79:47:64:19:5f:75:2b:80:
                    04:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B6:AA:C5:81:41:E6:9B:23:E0:2C:BB:9E:AA:30:E7:AE:73:95:67
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:95:65:a0:a5:44:43:a8:d6:99:9e:f7:0b:0f:0d:ae:ed:9d:
         51:64:d3:e4:18:dd:13:2e:a1:fb:ad:94:5e:93:76:47:b6:05:
         18:2f:0c:f7:91:18:0a:f0:e3:e1:f3:09:4c:3b:ac:51:61:e2:
         fd:5f:52:40:19:24:54:51:a4:8e:7e:35:fb:e1:aa:d4:d1:78:
         16:59:60:f0:66:da:b7:73:2c:02:8f:01:f9:c1:5f:9b:9a:aa:
         48:b0:fc:8c:e0:75:63:85:ff:44:02:5c:90:26:09:11:d3:a3:
         1e:2e:d8:f7:c9:e9:75:a3:a7:fb:59:b8:f5:fd:13:68:f1:1c:
         a0:d1:72:15:5d:48:3b:50:67:b4:42:79:39:59:5f:36:fe:28:
         b0:31:0d:17:35:66:7d:f5:52:4f:88:da:c4:12:66:a0:ff:18:
         41:fa:40:45:fc:42:0b:2a:c4:04:ab:42:cb:a7:68:2e:d6:27:
         38:9c:66:f0:d5:ed:75:68:e3:02:75:27:a8:19:97:d7:d3:e2:
         c7:af:3a:19:55:c5:56:19:3a:f5:69:53:0d:9f:cf:45:db:c6:
         5c:44:dc:8c:64:8b:ce:d1:c8:7d:cc:ac:bd:22:57:38:49:92:
         b9:98:da:62:bf:60:5f:1e:8d:07:d5:75:04:50:4d:16:07:d2:
         b1:7d:4a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:14 2026 by rpki-client