Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          rhePwJlMyvQtcOU3aHORQEXkHnOTYtm5IwK7Qy6PquQ=
Subject key identifier:   29:FB:7C:A5:01:03:07:67:E5:C7:65:DD:5C:B6:FA:A5:A1:C8:2E:E2
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019CAEA2DA267F99CBEBEEBB3148FEEC1358
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          0770
Signing time:             Mon 02 Mar 2026 13:00:34 +0000
Manifest this update:     Mon 02 Mar 2026 13:00:34 +0000
Manifest next update:     Tue 03 Mar 2026 13:00:34 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: gfDn6vUrI2CeFCtCQ2Sv1tnHvQeVs+Yqz6bALg3Mzgg=)
                          2: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (hash: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:a2:da:26:7f:99:cb:eb:ee:bb:31:48:fe:ec:13:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: Mar  2 13:00:34 2026 GMT
            Not After : Mar  3 13:00:34 2026 GMT
        Subject: CN=29fb7ca501030767e5c765dd5cb6faa5a1c82ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:8a:c2:f4:f0:a9:d9:a4:45:8e:a5:66:7a:
                    2d:1c:6b:48:31:50:50:0a:f9:7c:be:47:ff:bd:3d:
                    6a:91:a1:c4:1d:04:ff:66:51:ef:1f:97:bd:c3:9d:
                    48:ca:38:cb:17:8c:6a:8a:48:5b:f4:b2:dd:cf:51:
                    56:23:19:07:78:1a:d0:0a:51:18:35:f6:2f:05:cd:
                    d3:fa:37:91:a2:49:93:47:8e:71:72:1b:c0:86:83:
                    cf:11:3d:f7:65:36:2f:9e:7a:da:17:95:80:ea:e4:
                    35:b4:8a:97:b2:73:6d:77:28:c0:3f:aa:79:53:8c:
                    7f:73:f4:01:ae:53:7e:17:ba:f4:bf:fc:31:8d:a6:
                    91:99:76:da:a0:65:3e:13:79:04:49:3c:91:8e:ce:
                    3b:59:58:4c:b3:02:55:57:5d:e5:03:d6:4d:84:5c:
                    90:ec:bb:00:13:1f:f9:30:44:c8:13:16:6c:c9:ac:
                    39:15:b5:8e:a0:af:f1:4e:af:d4:90:70:77:4b:18:
                    58:49:e5:0b:04:45:fd:7e:fd:76:73:de:70:ef:8b:
                    b9:ca:7b:56:b5:2a:70:8f:4f:f7:04:f2:f6:e8:f7:
                    38:00:56:4d:56:bd:38:ef:c5:5b:a7:bd:c5:87:9f:
                    98:06:f0:6f:54:f5:7e:7f:ca:a8:7c:a0:bd:8a:98:
                    7a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FB:7C:A5:01:03:07:67:E5:C7:65:DD:5C:B6:FA:A5:A1:C8:2E:E2
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:c5:5a:e6:fb:7d:3f:11:fa:6f:d7:e1:38:9e:c1:43:a5:17:
         2b:02:0c:72:c0:31:20:d8:33:f5:3e:7a:df:89:d1:f4:21:98:
         f5:5b:46:dc:bf:f5:d4:4c:bb:24:44:81:a3:31:5b:32:7c:a8:
         3e:fc:60:f7:ff:fd:ed:4d:a4:45:11:3c:2e:d0:a1:89:c2:36:
         fa:f7:5f:63:5e:95:c4:a0:fb:0f:a4:ea:ce:e9:5b:20:ed:2a:
         5c:a9:a2:3e:80:56:a2:a3:f7:06:4e:95:7e:ea:a1:14:79:f9:
         73:00:50:50:dc:81:ca:d0:36:82:bb:9c:43:4e:11:1d:46:c1:
         f0:d8:78:d5:d3:ec:bc:95:20:be:ac:cc:3b:64:ac:cd:fc:8e:
         50:ae:f0:ea:20:dc:4b:34:e9:99:2b:6c:6b:5e:f5:be:26:19:
         15:43:c2:3b:9b:72:6f:41:f3:66:02:48:4c:b6:dd:58:1c:47:
         55:e7:9b:49:46:c5:be:2d:d2:ed:60:98:ad:d8:80:1d:f5:fe:
         92:19:b5:bb:70:6e:24:ec:5a:6d:75:49:7d:ce:d0:a2:5e:bc:
         ae:d2:77:43:16:8a:5c:cf:e5:fc:74:67:91:76:a6:29:b9:85:
         ea:b1:9d:29:88:99:6f:f6:0c:35:26:bb:84:0d:44:ab:ea:3b:
         02:93:c6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:08 2026 by rpki-client