Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
File:                     fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft (raw, json)
Hash identifier:          kI483E65yjo+/1lkwpHCTdgfrdoKmdIi5lfGLLTN6fA=
Subject key identifier:   BB:C9:5A:E5:80:DD:91:5B:0F:AA:E5:E5:B9:5F:57:38:CB:0D:5D:36
Authority key identifier: 7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73
Certificate issuer:       /CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
Certificate serial:       019CAAC6F97DAC6940B68F0D80D97BA792F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:32 +0000
Files and hashes:         1: LWui8AzaPFASP_4ivNyGkEz1ysQ.roa (hash: lMC5CJ6/t2xSIhms0GWqMAwmNRtMrmrsLXuQBgs3rpY=)
                          2: fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl (hash: EvOt+jsoQ67X8fBeO8vSVPb4u+60ZYTXWwaYtELDBPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:f9:7d:ac:69:40:b6:8f:0d:80:d9:7b:a7:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f2a32ba4219680dcdd58f6101e5c7aec1540a73
        Validity
            Not Before: Mar  1 19:01:32 2026 GMT
            Not After : Mar  2 19:01:32 2026 GMT
        Subject: CN=bbc95ae580dd915b0faae5e5b95f5738cb0d5d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:14:7d:91:d9:d5:89:75:12:b3:14:3a:ef:
                    40:9b:79:5e:cb:2c:ec:52:a5:26:79:0a:84:9b:80:
                    b0:39:4b:14:9a:9f:81:ef:29:d8:ed:32:da:8f:4c:
                    d9:17:ed:fe:d6:28:6d:a1:4f:77:d9:e9:5e:1b:19:
                    15:65:ba:6a:85:4e:a2:63:ad:f2:6a:2c:a9:05:93:
                    6e:3a:ed:81:53:2b:b8:b8:1c:3d:7b:1f:ad:fd:84:
                    8d:96:c5:8c:43:25:d9:ed:75:ff:cd:23:d9:fc:4a:
                    f2:7a:32:f7:ed:b3:f9:fd:85:9d:45:94:b2:a9:0c:
                    e2:df:b4:ac:58:2c:2f:1c:e5:8e:b1:8c:e2:92:c5:
                    7f:20:54:d6:34:35:03:06:ff:7d:8a:67:fa:44:9b:
                    e9:95:e7:88:82:d9:05:41:09:e1:b1:e5:aa:40:0f:
                    19:f4:be:f9:70:11:37:cd:0b:9e:1e:ab:7b:97:12:
                    cb:86:e5:17:10:52:44:e2:9a:c6:ac:5f:68:2e:30:
                    a7:b3:fa:bf:b1:44:cc:c8:93:cf:6b:3d:5b:43:55:
                    7c:01:49:ec:cb:06:45:6a:83:5a:f5:8e:a6:41:d6:
                    3a:27:04:9a:37:ad:7e:94:e2:f0:d4:c9:2b:14:9e:
                    8f:4a:84:0e:ae:b2:94:95:39:63:c5:16:90:89:82:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C9:5A:E5:80:DD:91:5B:0F:AA:E5:E5:B9:5F:57:38:CB:0D:5D:36
            X509v3 Authority Key Identifier:
                keyid:7F:2A:32:BA:42:19:68:0D:CD:D5:8F:61:01:E5:C7:AE:C1:54:0A:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fyoyukIZaA3N1Y9hAeXHrsFUCnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/143e9e-96e6-474e-ad2c-22e6df4584af/1/fyoyukIZaA3N1Y9hAeXHrsFUCnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b4:fc:3c:02:ee:e5:b2:f5:8d:91:15:83:eb:53:1c:f0:b3:
         08:88:dc:ae:07:8a:23:12:01:39:d6:24:3c:19:8f:c8:e3:35:
         3a:1c:88:0f:0c:5a:fd:ef:22:ee:cc:80:d9:72:20:a8:61:db:
         ad:80:d3:35:fd:a7:4c:6a:f5:c9:c8:a3:cf:7b:93:41:69:9b:
         63:43:16:fa:9e:d1:2c:95:7a:b9:9a:ba:3f:a8:a4:91:36:8a:
         d1:18:c2:a7:d8:5b:9d:87:53:25:e2:8a:7f:89:04:eb:37:f9:
         9b:b4:2d:e9:8e:71:dc:92:27:f6:d6:45:1a:95:7e:42:e0:85:
         d1:0e:e8:b2:63:1e:b0:f8:41:9c:9d:7f:fc:e0:2f:1a:1a:24:
         c3:82:d9:48:50:c8:9e:6c:55:ba:4a:90:8b:28:3f:4a:3e:87:
         6b:ad:6b:42:23:1f:3c:f3:14:6d:7b:74:ce:cd:33:bf:f9:0a:
         10:80:b4:c8:17:72:b5:d1:d1:e1:79:12:77:9c:d5:30:eb:e5:
         f3:c6:b1:62:12:bf:6b:9b:34:c3:5e:58:71:ca:85:47:fa:b4:
         de:bb:ed:e8:3f:50:d4:0d:b5:66:c6:24:39:b3:22:5f:9b:c6:
         2b:68:e7:41:23:a1:11:7d:3a:49:81:4d:be:0c:21:15:1a:3d:
         fe:ce:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:48 2026 by rpki-client