Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          kpRhIGFCBqLAbfDA9em2TTlCJwuxhsPQf++15Gw98CI=
Subject key identifier:   FB:E3:48:68:C9:31:55:61:CC:D6:95:33:54:67:FF:BD:65:A7:C6:41
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       019CAB340EC4DC4C9FC6D69C4CDEF0EE18A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          135F
Signing time:             Sun 01 Mar 2026 21:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:41 +0000
Files and hashes:         1: 3IB8mthpDOk_BFBQubUuplUkjXo.roa (hash: e+u6WkaJwntAo2oCWNchAEYFIeKwoZYuEMGJQKwp5uE=)
                          2: KaqeHG0uZeg5OeAlCabPEVitkog.roa (hash: kUNIU0ayuenQ62hZ/a8gWBFN8YsJ5arVTqiahqwzqow=)
                          3: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: vwTFUTrVuy5mK7K3IsIsc0c2FEkyN+hGzFPIV3YPR+Q=)
                          4: g8rfoziuF-oQqakJ7VRRFDiP_8Q.roa (hash: tMNJvnilP3OgFRAUiXL5Z4gr4F5ohZRaQsEApjgqeNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:0e:c4:dc:4c:9f:c6:d6:9c:4c:de:f0:ee:18:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Mar  1 21:00:41 2026 GMT
            Not After : Mar  2 21:00:41 2026 GMT
        Subject: CN=fbe34868c9315561ccd695335467ffbd65a7c641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:92:47:ff:9e:d7:42:6b:ac:bc:96:7d:2a:
                    b1:a8:21:ff:c9:fc:4e:9b:96:5a:5b:be:ec:20:06:
                    40:8b:86:58:c1:52:82:81:de:e3:fe:2c:07:ab:c4:
                    01:c5:86:54:bb:4c:13:db:99:ae:27:1c:e5:3e:03:
                    27:c2:8a:03:c4:ad:7f:07:c6:90:36:b7:25:27:e2:
                    ce:81:02:39:22:9f:e1:4a:a9:07:be:03:76:39:1f:
                    ce:7f:51:10:d6:bc:6f:be:54:d2:fc:d4:b7:53:c9:
                    0f:7e:0a:37:f0:16:1f:24:55:10:76:06:22:aa:85:
                    92:dd:86:90:fb:c5:16:c5:d9:eb:7d:9e:33:6a:21:
                    0a:c9:50:8a:55:f3:86:e9:b8:ff:4c:e3:67:55:b0:
                    5d:af:62:87:b2:3b:9d:a3:30:7e:8a:db:2f:34:cc:
                    bc:d9:ba:f5:cb:d6:13:a4:85:e2:77:1c:a0:00:15:
                    39:97:4d:5f:81:79:5c:34:19:f8:54:b9:5d:70:57:
                    b5:ad:ae:18:e7:e7:0b:47:53:b4:e6:ee:79:f6:67:
                    96:39:68:cb:a1:0b:04:00:3f:b1:fb:33:86:0a:7d:
                    1b:49:87:b3:db:40:09:fb:60:e2:95:03:0c:3b:3b:
                    ee:49:a8:fc:ef:32:fd:2b:89:40:06:b7:f4:bc:92:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E3:48:68:C9:31:55:61:CC:D6:95:33:54:67:FF:BD:65:A7:C6:41
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3e:5d:29:8a:19:d7:da:18:01:20:0e:18:ca:c5:06:24:4d:
         a2:a6:ab:cd:0f:a5:af:84:de:29:f4:59:cc:6c:a3:fb:06:63:
         31:fd:45:73:1f:74:0d:2c:40:be:46:b7:7e:38:ec:0d:16:f4:
         97:bd:06:4e:96:cb:94:05:d3:a7:64:7c:9f:42:2b:c4:04:b1:
         fb:04:4a:0d:16:95:2e:3f:73:20:bc:9d:00:4e:07:d8:81:a5:
         d7:a9:72:80:de:bd:1a:67:fc:61:49:70:0f:69:37:bb:57:76:
         1b:f8:23:69:b8:af:3e:d2:1d:6b:a8:d9:c5:9e:70:ad:d3:b8:
         b6:ae:ea:67:4e:3a:0c:b0:a1:76:ca:4b:cb:99:30:67:36:e9:
         57:5d:1f:65:eb:c5:62:d9:1c:9b:b6:64:48:d5:0f:af:d9:00:
         8a:4a:78:8f:27:d7:b9:86:d7:5d:e2:ec:d0:6a:69:c6:70:39:
         03:dd:cc:cb:0a:11:8f:4e:c2:01:a1:83:52:db:78:f2:e0:2b:
         e5:2e:a6:9b:fc:3b:2d:f5:86:ba:96:fe:a8:f8:21:cc:b6:93:
         d3:58:2c:1f:32:4d:74:55:11:c5:e4:20:bf:67:c6:ea:1c:29:
         c4:54:c6:79:35:f0:be:e8:b7:0c:57:13:af:4b:28:fa:6b:34:
         4a:e6:b4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:35:11 2026 by rpki-client