Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File:                     fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier:          Ic9QtFOiURfJeceB9+YohUgimC0PHvgC5DKHddyHR0E=
Subject key identifier:   84:5B:F2:48:93:84:48:A2:54:CD:18:A8:51:07:A0:5C:15:72:9B:F1
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer:       /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial:       019D9962D7EBD3DA42B271A836B1854E9D9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number:          1785
Signing time:             Fri 17 Apr 2026 03:01:24 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:24 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:24 +0000
Files and hashes:         1: 0KNfQnYQ6OcbM3T_AT3Muh7GC10.roa (hash: PjhLMPqDKMFvKvIdwwT6W9RFU/bl/Jjyt27qCybKXQU=)
                          2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: 4/XSefMmrx6/4z6ETOrCC3NdINLERf8CXRwL7Ln7Mwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:d7:eb:d3:da:42:b2:71:a8:36:b1:85:4e:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
        Validity
            Not Before: Apr 17 03:01:24 2026 GMT
            Not After : Apr 18 03:01:24 2026 GMT
        Subject: CN=845bf248938448a254cd18a85107a05c15729bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dc:cc:bb:03:29:81:78:8d:97:bd:41:fa:0e:
                    50:92:31:a6:71:09:6e:b6:69:57:35:fb:d2:bd:09:
                    07:a4:fb:3a:b4:12:bc:eb:a2:72:27:a1:da:7f:9c:
                    64:10:8c:f8:ae:18:a5:b2:fd:88:09:70:44:6c:6f:
                    57:2c:31:cb:09:ee:93:3c:cd:72:e6:fd:ce:7e:25:
                    e4:77:3a:2e:44:1b:ce:cb:78:29:0b:8a:cb:dd:24:
                    e9:21:21:2f:a3:b7:dc:be:5b:c3:de:62:47:c1:6d:
                    7d:30:73:dd:3f:7d:71:f0:68:cd:8b:e3:2e:ef:e2:
                    5d:58:c9:9c:b6:8b:cd:26:a8:c5:c5:7a:6b:21:3d:
                    77:44:55:0f:78:df:4d:a8:4f:e5:d2:c3:93:92:60:
                    97:07:ce:23:17:35:10:97:e6:b9:0d:4a:31:ff:72:
                    12:01:e0:99:e2:d8:77:01:8e:fc:a6:56:f5:91:fd:
                    40:4d:50:1b:13:63:a2:85:cb:f4:3b:08:7b:83:dc:
                    6d:e2:86:1c:7f:52:45:bc:2c:76:b0:77:03:4a:4b:
                    c1:1a:b1:7a:42:5f:15:79:6f:4c:33:61:50:43:39:
                    b0:df:e8:56:e6:48:b8:7c:d4:5b:42:e3:89:a1:8a:
                    bd:ec:29:ba:5b:bc:0a:53:8c:93:23:cd:8b:ac:66:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:F2:48:93:84:48:A2:54:CD:18:A8:51:07:A0:5C:15:72:9B:F1
            X509v3 Authority Key Identifier:
                keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:bc:07:ec:5f:41:ac:a1:19:15:ff:1f:2b:b5:e5:81:39:f5:
         9d:06:87:a7:f0:53:ed:00:f6:c0:0f:42:3f:ec:ae:4e:3b:da:
         a4:0a:47:41:c0:82:7a:c4:a4:24:15:c8:c4:82:44:02:d0:07:
         0f:4b:7f:7f:aa:e8:8a:e6:4b:7d:5f:98:20:2c:e2:79:5f:38:
         6d:f9:69:f0:40:0a:fc:6b:36:1c:6e:6f:26:c4:21:51:e7:93:
         1b:b1:d4:0b:ba:48:db:d7:95:27:46:e2:31:56:26:ac:be:6b:
         42:93:b4:dd:5d:13:8a:b2:ea:7d:d4:35:7e:14:a0:6b:86:16:
         8e:38:c8:95:64:f0:0b:58:e1:c3:f3:f1:28:11:3f:8e:29:6b:
         3a:3a:62:c3:96:3d:18:52:4c:7b:28:20:f8:c8:b2:02:d4:17:
         bd:cf:eb:64:f3:dc:53:76:92:01:e3:0f:29:a3:13:dd:ce:ce:
         65:08:a6:3a:09:9d:a6:89:73:45:03:28:38:c3:ca:2b:d1:9d:
         f8:f0:e4:04:11:e6:2a:ea:00:03:3d:00:f7:e8:ea:d1:a8:7d:
         92:a8:49:c1:85:68:d1:84:dd:72:75:8d:f4:39:2a:8b:7b:25:
         25:aa:33:72:37:a9:65:46:f3:67:60:a5:cb:7f:a8:dc:c8:04:
         77:45:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:55 2026 by rpki-client