Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File:                     1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier:          0lR7yYE0mOSpEIr9gYnkv2vvxwgxmZAoA9QoA5SsOrc=
Subject key identifier:   CD:24:F1:BB:9E:90:47:FB:2F:72:17:5A:1D:86:51:36:99:57:7F:7D
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer:       /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial:       019CAC0FB83E782D006094A62DC05BFBD7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 01:00:37 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:37 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:37 +0000
Files and hashes:         1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: UQNiDw4tkP158I10LTkiOu5jlNrwXCyZX7tCeFBDlrc=)
                          2: Vi82WamhNS_7BkMeH_Obwd9eH6o.roa (hash: /zAtnxefQ5sdQ3fDobW8m7Zl2IYqkGJl44bGBXQLVlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:b8:3e:78:2d:00:60:94:a6:2d:c0:5b:fb:d7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
        Validity
            Not Before: Mar  2 01:00:37 2026 GMT
            Not After : Mar  3 01:00:37 2026 GMT
        Subject: CN=cd24f1bb9e9047fb2f72175a1d86513699577f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:d2:6c:aa:3b:ee:8a:32:22:ee:81:61:41:
                    cb:4b:98:bc:4c:eb:24:7c:1a:9d:04:01:60:3f:01:
                    0f:69:51:13:33:a6:cb:66:30:14:2d:64:97:f3:45:
                    63:8b:31:4c:28:64:57:68:b4:8d:9f:b7:91:3b:16:
                    64:c1:8c:3f:70:f5:68:81:b0:42:e5:d3:64:33:29:
                    8e:89:a5:cd:2b:a9:b5:ea:27:6f:78:39:fe:67:84:
                    f2:ef:d0:5b:ee:65:c4:03:3a:80:7e:4e:c6:bc:c9:
                    35:c9:f4:3f:5c:19:9d:1b:47:03:03:6b:23:1c:00:
                    8b:b3:61:34:c9:4b:64:d0:c5:51:1d:37:44:57:c0:
                    58:37:6c:6f:5f:31:33:fa:10:a6:cc:1e:dc:88:2b:
                    d9:9b:01:8f:31:ba:89:58:5e:ea:9a:dc:d0:0f:80:
                    1d:cb:4d:b5:68:0a:8b:ae:db:bf:aa:28:45:f7:bc:
                    41:9a:99:79:85:3a:19:1d:59:3e:08:fe:61:b4:70:
                    f7:6a:3f:71:32:17:8f:4a:da:5e:c3:98:16:10:06:
                    81:1f:a4:47:f5:15:35:65:1e:9b:ce:bd:71:6f:4c:
                    c7:37:0b:c5:7b:1f:f9:89:ca:a5:ad:4d:71:b3:63:
                    36:62:c7:1e:5a:f2:fe:73:cf:c9:57:b9:1c:eb:8a:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:24:F1:BB:9E:90:47:FB:2F:72:17:5A:1D:86:51:36:99:57:7F:7D
            X509v3 Authority Key Identifier:
                keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:d5:e1:8d:6b:e3:9f:44:96:96:8d:97:01:64:92:ba:47:68:
         dc:fc:ce:bc:91:df:1a:33:58:ec:71:2e:e5:be:62:e1:7b:3f:
         25:0e:2d:95:24:6a:4d:47:8d:6c:b6:24:52:24:10:47:a8:0b:
         29:86:68:83:38:3e:5d:de:51:c6:06:4c:f3:60:6b:b0:72:27:
         02:83:66:84:bb:47:0d:2d:0a:93:a1:71:b3:97:42:1b:22:0d:
         ab:ba:1f:f3:7e:3e:83:10:4f:84:a0:5b:d4:93:90:94:36:aa:
         39:6b:bf:c2:13:1f:ab:42:fe:8f:41:7f:e6:54:b9:bc:c0:82:
         ea:ab:16:23:ad:d5:52:66:c7:72:02:1b:35:50:9f:02:e4:12:
         62:5b:ed:7e:e1:6e:a2:b4:fc:ac:1b:2e:17:94:41:b1:9c:de:
         60:30:dd:3d:09:87:65:4b:a6:be:fd:d8:1b:6d:04:bd:0c:25:
         c0:0b:72:df:44:0b:8f:ec:7d:2e:8e:f3:21:2e:ae:f1:ad:d8:
         ba:6e:ab:c5:4d:5a:95:41:90:07:dc:e5:e0:90:49:f1:1e:3e:
         7c:6b:b3:71:e4:b2:55:14:10:8f:aa:85:28:2d:71:0d:b3:58:
         01:da:a7:1c:8d:ab:d3:9e:d5:6a:55:c6:ce:73:61:ec:96:37:
         a1:a0:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:17:41 2026 by rpki-client