Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          LXPafiwLFBDxc61K2YnQIH01Raoocd1GmgPEtefvg2Y=
Subject key identifier:   57:BE:C4:A1:03:01:5E:30:BF:A7:A9:EB:08:70:42:F1:8F:FF:38:FA
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       019CAC104C5A92E635F35017F2E2D6EF56A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1865
Signing time:             Mon 02 Mar 2026 01:01:15 +0000
Manifest this update:     Mon 02 Mar 2026 01:01:15 +0000
Manifest next update:     Tue 03 Mar 2026 01:01:15 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: +oChpVxXXSA1f9ccWRJblisK1tXkR8oSr1lF8j8XSDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:10:4c:5a:92:e6:35:f3:50:17:f2:e2:d6:ef:56:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Mar  2 01:01:15 2026 GMT
            Not After : Mar  3 01:01:15 2026 GMT
        Subject: CN=57bec4a103015e30bfa7a9eb087042f18fff38fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:1b:fa:08:36:0d:14:d8:6f:a6:e8:3f:bc:
                    36:4d:9c:21:62:66:df:62:ef:c5:bf:58:05:67:e2:
                    26:8b:00:b9:d9:62:7f:79:c0:b6:16:3c:8b:12:1f:
                    a0:0e:b8:6c:6c:61:63:96:8c:46:72:e3:38:77:ce:
                    42:55:72:0b:8d:1e:6d:15:77:ee:44:54:34:ad:2c:
                    5c:3f:8e:b4:21:60:2d:02:bc:e1:2e:a0:38:3c:1b:
                    56:b6:14:9c:0a:e6:6a:e8:f2:b5:3e:c4:81:18:7e:
                    10:18:1f:8e:54:60:1e:69:81:67:1d:96:bb:9f:f8:
                    55:62:2b:a0:1e:cb:6b:9c:e8:10:4b:63:77:e2:a7:
                    7c:24:93:74:f8:f2:a3:68:61:36:b2:9c:10:26:ec:
                    6f:09:b8:1c:56:f1:4d:2b:cf:6b:09:9f:e3:db:f8:
                    b0:0b:ad:a8:fe:30:0e:98:bb:10:95:98:25:b7:49:
                    ba:49:f2:92:3e:80:89:d2:8c:78:86:cc:4a:92:e3:
                    c1:1b:f0:79:8d:8e:54:d5:84:e9:6a:9b:a1:d1:04:
                    46:22:72:93:91:00:34:4e:78:c9:24:74:2d:d6:dd:
                    d6:d4:f4:ea:1e:0c:3e:da:3e:3a:81:12:cf:d2:32:
                    b3:84:6e:37:62:1f:84:1d:e5:8e:5f:47:55:43:d2:
                    2d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BE:C4:A1:03:01:5E:30:BF:A7:A9:EB:08:70:42:F1:8F:FF:38:FA
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:07:8c:29:77:94:4b:88:4a:3a:7a:a5:ed:d7:db:6e:c7:63:
         02:e1:63:47:7f:d8:75:b3:9c:6e:de:f2:a0:22:7c:d0:2b:ff:
         39:ab:12:83:75:84:7f:77:a5:ad:1e:d4:ba:9a:a8:68:ef:d6:
         c0:0c:3d:be:66:37:af:9e:18:4b:6f:de:7e:d8:22:7a:0b:6e:
         03:3e:f1:58:f6:d3:b1:73:52:d7:61:1c:67:12:6e:3c:9a:42:
         c0:d4:47:27:29:f6:62:50:e6:e1:22:d6:a1:3b:5b:26:8b:71:
         59:db:9b:77:02:87:62:e3:60:32:7c:f6:33:6d:6d:f2:35:e7:
         5e:50:6b:40:eb:dc:02:cb:77:a2:43:ca:a4:3f:34:96:eb:a5:
         28:ae:9d:49:0f:88:5c:d1:40:da:fd:01:11:ee:43:2b:7b:3e:
         c8:5c:e8:db:e8:33:06:87:a3:6c:23:e4:6c:b7:d5:7f:b7:9b:
         67:ad:b9:7e:57:8e:d8:ea:92:c6:8b:48:0e:e6:d4:ef:40:f7:
         d1:95:87:01:b6:fd:47:8c:8f:c4:d1:e2:ed:90:6a:df:33:80:
         a4:f1:27:29:56:7b:e8:0d:61:87:80:68:c2:4b:86:c6:2d:52:
         89:8d:ef:6f:cd:fb:1e:a4:f1:f0:d0:4c:6c:28:5b:fc:b1:e7:
         3a:0e:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:41 2026 by rpki-client