Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
File:                     fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft (raw, json)
Hash identifier:          b9bF6PlZ7BcI9X0vgiPO4TBTW8dOofw/CTsCfvpBZ90=
Subject key identifier:   D1:DD:91:8C:F5:04:0B:0F:1A:D6:BB:CA:3F:35:5C:AD:7F:6F:8F:A9
Authority key identifier: 7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59
Certificate issuer:       /CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
Certificate serial:       019CAD59CEF2C6B6D36DB0A2CBE2F9F17054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
Manifest number:          0C69
Signing time:             Mon 02 Mar 2026 07:01:09 +0000
Manifest this update:     Mon 02 Mar 2026 07:01:09 +0000
Manifest next update:     Tue 03 Mar 2026 07:01:09 +0000
Files and hashes:         1: 9k0dsqb1d6KW0H9rWBxGERBZOic.roa (hash: FhB4cjzWorn9MftYwNSX8WEXFBMVO6EYBKbMGx2rmWM=)
                          2: MXSLo6LQrIP-KSqVsT4Vi31Yu7Y.roa (hash: jmYre0cvNWduC7MGqKdKXsaIMO8Tset9JAHfEBid25c=)
                          3: fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl (hash: 4k84yEr9cSgqYg5tL9+7WQXo15rmqBJPOb84N2lnsrQ=)
                          4: mlq23mwn4gLppdq_n5N8dl-i1JU.roa (hash: mWWAMciQpKRURn7RkDiPvmb9dly+JR/rksPzC6qiQJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:59:ce:f2:c6:b6:d3:6d:b0:a2:cb:e2:f9:f1:70:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee5c0f95ab7be8b85f711fa433665c14e6e9359
        Validity
            Not Before: Mar  2 07:01:09 2026 GMT
            Not After : Mar  3 07:01:09 2026 GMT
        Subject: CN=d1dd918cf5040b0f1ad6bbca3f355cad7f6f8fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a4:d0:de:aa:36:df:0a:72:b5:ed:05:6b:0f:
                    81:f2:80:48:78:d6:d0:b0:bc:d1:b4:96:7a:a6:ad:
                    5f:71:97:aa:0b:e8:ba:09:0e:4a:5c:ef:0e:76:2d:
                    bd:d7:de:59:4b:15:b6:30:a9:ed:55:87:99:74:7a:
                    7f:fa:fa:38:23:c8:83:83:db:9d:56:74:17:28:99:
                    50:dd:0e:86:2d:96:3c:10:21:4f:6b:00:af:ab:84:
                    a0:6f:52:c4:96:9e:c0:b5:21:f9:42:34:75:3a:91:
                    31:f5:c9:b8:40:6f:0e:33:9f:a0:d1:b2:d8:de:d8:
                    fc:09:c5:8a:7a:02:03:5a:7c:7e:be:30:4e:0b:87:
                    e7:bf:2e:d2:c8:fe:4d:cd:ef:ae:40:f6:9e:59:e1:
                    a7:5d:bc:c9:78:b4:d1:12:02:de:db:59:29:62:e6:
                    7c:cc:9f:3e:be:69:93:54:91:b1:27:46:91:bc:73:
                    26:9b:d8:d8:97:df:70:2c:dc:c4:07:ff:0b:42:c5:
                    86:f4:66:45:d1:f0:8a:99:02:1c:7f:d9:f0:4c:60:
                    1b:c3:b4:ab:8f:6e:06:c6:be:61:fd:ca:6a:40:ee:
                    dc:c8:af:41:98:6b:70:89:2a:26:6d:84:86:85:d4:
                    6a:25:67:87:ee:ea:25:87:a4:43:b0:0e:a2:e8:8d:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DD:91:8C:F5:04:0B:0F:1A:D6:BB:CA:3F:35:5C:AD:7F:6F:8F:A9
            X509v3 Authority Key Identifier:
                keyid:7E:E5:C0:F9:5A:B7:BE:8B:85:F7:11:FA:43:36:65:C1:4E:6E:93:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuXA-Vq3vouF9xH6QzZlwU5uk1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/a83886-8b4a-4b23-b4aa-90194bd68428/1/fuXA-Vq3vouF9xH6QzZlwU5uk1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:85:ee:c7:75:70:31:fe:f7:54:c6:e9:86:2d:38:6a:70:fe:
         b1:45:b9:76:36:00:a6:79:02:1a:b7:1a:12:8e:f2:21:76:f5:
         e6:15:76:eb:e7:34:02:02:fe:61:56:f4:0d:51:0b:9b:27:1b:
         8e:98:8b:81:45:4f:62:1d:25:ee:1d:b3:c9:fa:95:52:07:34:
         55:8d:3b:a4:3a:cd:ee:6a:ef:9c:ad:b1:94:72:6a:ae:6d:26:
         d4:e5:65:f1:4b:a4:89:b6:33:46:17:68:87:c3:e7:5e:af:7b:
         dd:77:d8:1d:43:15:a2:54:c9:85:74:f3:78:48:53:0e:07:92:
         88:a9:08:6e:14:52:64:f5:60:ef:fe:18:42:05:e2:55:a7:b9:
         73:ef:94:16:49:6b:74:3f:cb:03:61:69:9e:de:4a:6b:70:07:
         e8:26:62:f0:1a:ca:45:87:82:8f:dc:67:76:8f:cb:1a:8d:bc:
         35:d7:fc:1c:81:59:83:fb:2c:9a:8d:5c:36:a6:08:3d:03:35:
         52:9b:0f:e9:c4:b8:40:89:90:47:0b:4a:04:6a:66:d2:8b:15:
         01:56:1d:12:df:76:71:22:13:c7:a9:b6:c8:6e:b3:cc:32:82:
         29:b0:b0:24:d2:e4:69:23:93:76:a9:40:de:9a:da:46:f1:26:
         35:8f:3d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:43:15 2026 by rpki-client