Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
File:                     3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft (raw, json)
Hash identifier:          oJQ3lhlRfk21L2lhNQdNU4KL9NBHl3UHGqFif0jbIKU=
Subject key identifier:   C7:1F:21:1C:2B:FF:F7:AB:66:B6:58:0F:92:1C:0A:19:3D:CD:15:6B
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Certificate issuer:       /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial:       019CACEB9DA2AAD53AE58895E6BE61BF887A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
Manifest number:          1788
Signing time:             Mon 02 Mar 2026 05:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:48 +0000
Files and hashes:         1: 3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl (hash: tLK+BgkbCTzVudqo3YaXtYqq36szsy0+Xn2/g7HeaYc=)
                          2: 6xKBRhcPGOW0-ef_87nk8nPvflA.roa (hash: ljMD+xiZ4YQ7UeRE1RQr2u8g+4zja/CKtgOQ244SoZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:9d:a2:aa:d5:3a:e5:88:95:e6:be:61:bf:88:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
        Validity
            Not Before: Mar  2 05:00:48 2026 GMT
            Not After : Mar  3 05:00:48 2026 GMT
        Subject: CN=c71f211c2bfff7ab66b6580f921c0a193dcd156b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:b7:50:09:bb:43:0e:b6:9e:6b:16:95:11:
                    25:64:fc:13:a8:e1:9e:e2:ef:4b:e1:8b:87:94:55:
                    a3:67:5b:23:7f:d0:e3:09:a5:c7:8b:6c:35:3b:9c:
                    21:cb:8c:85:c7:38:e7:8b:7a:94:34:ee:a1:58:8f:
                    b5:fd:34:af:3c:4a:3a:e4:ba:3b:c2:b6:42:00:35:
                    bb:34:57:a0:b8:d4:d0:7d:66:22:c2:32:70:24:bc:
                    32:9f:83:70:90:b8:b1:d9:f0:c6:43:a5:22:fa:32:
                    3f:b5:0f:2a:a1:b8:44:84:9b:5e:3b:d4:75:0a:0e:
                    cc:db:ed:71:64:d0:e4:68:65:e6:78:3c:6c:cd:64:
                    32:f7:3b:bf:fc:20:55:cc:7b:50:b5:73:4c:f1:0b:
                    d5:a6:71:23:d5:c9:fc:79:08:f3:a1:9f:68:4b:12:
                    0c:3a:59:f8:cf:35:de:9c:e4:a2:b2:43:e9:63:77:
                    d8:5d:8e:14:02:dd:dd:fd:9d:35:67:f6:58:d8:e1:
                    40:2c:2c:55:33:7f:be:aa:51:d1:54:18:da:a3:6f:
                    49:da:fe:ba:13:66:0f:9a:f5:a7:71:0b:01:91:32:
                    22:97:40:c1:2a:ef:2c:ce:35:01:41:28:da:a6:d0:
                    8e:e9:ed:94:7b:ef:e0:c5:03:07:d2:a6:01:42:36:
                    bf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:21:1C:2B:FF:F7:AB:66:B6:58:0F:92:1C:0A:19:3D:CD:15:6B
            X509v3 Authority Key Identifier:
                keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7d:a0:97:f7:63:af:e5:62:b0:85:6e:8f:27:55:e8:bd:4b:
         5d:ac:13:62:23:6d:18:8c:81:9d:8d:41:92:65:43:41:38:bc:
         de:c2:2b:94:41:db:4e:7c:f7:45:df:f8:07:78:82:3b:55:a4:
         cd:75:18:a6:b6:de:39:01:51:97:35:06:b2:c7:3b:f6:09:70:
         4f:48:42:33:9e:62:80:0d:19:06:e8:2c:ce:3f:6d:7c:5c:78:
         47:b9:93:fd:d2:13:7f:93:55:6e:d5:ec:0f:d0:19:b5:6a:cb:
         06:a4:a2:e8:46:1b:d7:4a:33:fc:d3:8a:7a:f4:78:92:ae:6a:
         97:7f:04:12:0c:da:28:30:2c:d9:cf:cb:20:ad:d4:d9:30:4e:
         2b:0b:7c:fa:40:fc:c2:13:ff:1e:c7:5c:c5:88:7c:79:b7:21:
         ec:b6:bc:31:7c:bc:27:2c:e6:ee:3f:0e:0f:76:cf:56:40:69:
         59:4a:03:0d:27:9b:e8:81:35:50:f3:e1:39:5a:42:c5:4d:ea:
         49:1d:9f:bf:d9:6b:35:9c:a8:c6:8a:ba:57:5d:f6:84:4b:ab:
         ca:31:da:87:22:61:53:d5:b3:ba:5d:b1:87:6d:0c:b5:31:c5:
         26:23:31:db:57:37:96:6f:bd:ae:14:87:dc:c0:33:64:96:6f:
         18:62:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:00:50 2026 by rpki-client