Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          NNt9ZAVTk/PoycXEwGe65OByizWTXreyl3GiMbyJO44=
Subject key identifier:   B3:58:AD:E4:30:68:7B:A1:20:A9:D1:FD:E2:3E:01:E0:41:44:14:B8
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       019CAD226568BEE66D90A3DA194C445493A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1849
Signing time:             Mon 02 Mar 2026 06:00:38 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:38 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:38 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: d8Lnmj+rwmvCU3OHeXCGXIrh04palyF5lQUo53YSFHI=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:65:68:be:e6:6d:90:a3:da:19:4c:44:54:93:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Mar  2 06:00:38 2026 GMT
            Not After : Mar  3 06:00:38 2026 GMT
        Subject: CN=b358ade430687ba120a9d1fde23e01e0414414b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4a:1e:40:d9:6f:14:e8:4c:3c:d2:e6:cb:a2:
                    77:54:a4:90:fa:89:2c:50:d2:93:8e:08:69:04:a3:
                    1d:3a:45:45:70:9c:06:06:14:97:a7:f1:d0:2d:82:
                    66:a8:12:d9:14:8d:3b:fc:21:e3:85:a5:8a:a5:83:
                    4c:0d:5c:3f:94:7e:58:22:59:26:61:ef:59:c1:e1:
                    e0:ed:50:31:c8:6a:50:f4:dd:27:86:27:71:89:55:
                    65:48:ca:13:2a:1f:26:db:59:5d:5a:1c:af:43:fe:
                    f3:e7:0d:f4:95:e0:15:52:3c:05:d3:4e:c9:c9:bb:
                    88:94:8c:e4:23:73:d9:25:a2:9f:6d:b5:dc:ff:27:
                    92:0b:6f:0f:c6:aa:02:1f:b8:8f:4a:b0:dd:65:db:
                    8c:20:93:f4:35:0b:76:a3:e6:51:b5:30:4a:9b:97:
                    f7:df:d0:d0:bc:8c:76:84:42:b3:70:42:1e:a6:c9:
                    f6:a8:a6:41:dd:38:89:35:24:ff:77:a7:43:9b:bc:
                    a9:e6:6e:f5:7b:45:a8:34:da:ce:ad:61:98:c6:e6:
                    55:a9:c2:12:30:bc:8a:6c:fb:52:fc:93:ed:8e:fa:
                    2b:d3:f5:5c:bb:66:32:cd:50:39:d6:b7:85:39:18:
                    a0:d6:05:6a:a8:62:13:48:9b:dc:8c:a8:0a:9a:a6:
                    8c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:58:AD:E4:30:68:7B:A1:20:A9:D1:FD:E2:3E:01:E0:41:44:14:B8
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:b2:ed:7e:4e:8d:7f:55:08:b1:57:14:30:e3:55:2d:a4:
         cd:3f:f7:10:a8:09:34:9b:9e:c5:3d:9f:84:6f:b2:c5:92:b6:
         27:b5:45:79:02:f9:fb:c9:58:3e:8c:73:f8:b9:9f:3e:20:b2:
         93:f3:d7:1b:08:64:c0:d1:7f:91:45:54:c7:cc:7b:1c:23:99:
         36:10:c6:e9:06:64:7a:b2:08:a1:9b:b1:69:02:cb:be:8f:a4:
         d8:a3:a0:e0:38:50:d6:21:c3:cd:a8:61:11:f4:d0:58:20:a6:
         17:d5:5b:42:6c:df:f1:bc:bf:96:a8:fc:ea:ff:67:32:09:0c:
         1f:46:9c:a1:33:f4:63:84:72:10:93:06:ad:02:76:6f:a9:5a:
         ef:10:33:f4:22:12:bb:f0:f8:18:3b:00:41:1b:c4:09:a6:01:
         dd:6f:7f:f1:19:71:e5:b5:a3:ed:80:91:19:12:cd:f4:49:9e:
         e7:e7:ca:c7:6a:c9:3c:58:fb:84:d6:7d:75:7d:8e:5b:81:54:
         15:1f:8d:d9:c6:3c:90:ff:69:3c:c6:a9:25:1e:8d:f0:b1:d2:
         9b:f7:22:f5:84:52:a3:9e:da:b9:ad:c8:f6:ee:ca:a6:5b:a3:
         01:37:37:64:0b:70:8b:32:68:ef:70:43:0c:9d:1c:2f:59:40:
         95:3e:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:25 2026 by rpki-client