Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File:                     Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier:          Cq1DEH3g4xWTXs1r2b+5L4ZWbKuLGlSZT+0dsL6vmDI=
Subject key identifier:   5A:36:C0:44:75:F6:BE:CB:35:7D:70:E3:68:8E:38:E8:99:D5:3A:5E
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer:       /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial:       019CB0920A3CE92476E4E09F8EE4686041FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number:          02B0
Signing time:             Mon 02 Mar 2026 22:01:26 +0000
Manifest this update:     Mon 02 Mar 2026 22:01:26 +0000
Manifest next update:     Tue 03 Mar 2026 22:01:26 +0000
Files and hashes:         1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: EyMR1rGeqDPEGWIlShJwTyTdQ8H2S38pEoK5ApWZYTE=)
                          2: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (hash: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:92:0a:3c:e9:24:76:e4:e0:9f:8e:e4:68:60:41:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
        Validity
            Not Before: Mar  2 22:01:26 2026 GMT
            Not After : Mar  3 22:01:26 2026 GMT
        Subject: CN=5a36c04475f6becb357d70e3688e38e899d53a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:09:07:98:3b:f9:e6:41:e0:60:c8:ba:6e:b1:
                    88:94:82:72:52:4e:71:02:a4:91:86:26:f5:bc:e0:
                    54:c1:a3:dc:fc:e6:33:e9:95:24:09:d4:bb:45:94:
                    e5:b4:87:1f:86:f7:a8:19:5a:3e:8f:be:25:94:04:
                    c7:1a:01:6a:5b:54:c0:a0:1a:c6:7b:f2:37:48:c0:
                    0b:34:3f:6e:d9:d4:83:67:5e:80:e0:63:3e:95:e4:
                    3c:4e:aa:8f:cd:e1:2d:dc:1d:cc:e6:9e:0f:90:6b:
                    5c:fb:0a:1c:80:e1:8c:80:3d:1e:34:30:47:4a:89:
                    9e:71:5e:8e:ec:dd:1a:7a:30:5e:5c:86:03:58:1f:
                    be:3d:ca:2d:ae:69:c9:9e:21:ac:a0:c6:73:3b:e3:
                    01:43:a9:86:2b:5f:d5:3b:af:87:0b:1b:0e:f7:93:
                    72:4a:a2:85:bf:3f:24:ce:7c:3b:c3:d3:7d:a9:7c:
                    3f:e6:b0:e4:10:30:ed:b3:03:9f:a7:ba:53:ad:f5:
                    91:a0:4b:fe:30:7a:b5:74:87:ea:27:c6:8e:a0:17:
                    53:a6:77:b7:8d:10:e6:3c:17:4a:22:47:7f:a6:4a:
                    70:e4:4a:ae:94:4f:13:0f:06:dc:a3:b3:48:c2:7e:
                    0f:c9:cb:71:c1:7b:00:e4:25:c4:53:3f:6a:ef:aa:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:C0:44:75:F6:BE:CB:35:7D:70:E3:68:8E:38:E8:99:D5:3A:5E
            X509v3 Authority Key Identifier:
                keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:41:6f:31:74:85:98:5c:79:f8:69:db:96:d2:4e:6b:08:a6:
         b3:22:2c:89:d8:99:63:6a:af:07:cc:e2:37:50:3b:57:e1:60:
         82:63:cf:c1:bd:a5:cd:03:24:1d:f5:eb:b9:05:cd:32:04:0c:
         ec:e2:4a:ee:29:21:89:ab:cd:0b:4a:df:6c:6d:39:41:9d:a9:
         9e:40:a3:38:2a:13:88:97:a3:e2:c1:31:d4:3a:c0:0b:bb:85:
         a3:cc:52:02:0e:e1:5a:f7:ac:3e:d0:7c:3f:30:2e:74:2e:4e:
         12:4f:82:d8:70:cf:4f:75:9f:9d:7d:f8:09:b6:e6:5b:b0:82:
         68:6f:8b:12:f4:dd:03:49:42:71:f3:c4:fc:2f:e4:71:0b:95:
         5e:a2:f4:72:a5:43:14:3c:82:55:f6:4d:0f:cc:99:2f:32:50:
         68:cd:32:62:52:96:1e:c9:58:17:1e:87:70:e9:4e:89:5a:18:
         46:ed:33:2b:54:67:4e:ef:e9:f4:7f:b5:6c:1c:b2:06:25:7f:
         f2:13:0e:99:bc:98:e0:80:66:59:a5:06:93:4f:3d:ff:e2:4a:
         ae:55:39:a4:3a:d8:32:27:40:20:ed:dc:71:76:9a:c8:67:53:
         b1:16:92:0a:86:4c:5a:bf:ce:93:22:47:9c:98:4a:dc:26:f6:
         d8:48:81:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:40:19 2026 by rpki-client