Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File:                     fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier:          mWhSAW0hcfY0J6fKp+RVQR8O4iFHb9wHWfQC75nhuy0=
Subject key identifier:   F8:AF:BE:FA:2A:10:34:C7:DF:2E:E0:EF:40:F7:FB:17:65:E2:ED:7D
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer:       /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial:       019D9818DE96F2A5C01C7624E5EBB1599AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number:          1334
Signing time:             Thu 16 Apr 2026 21:00:59 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:59 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:59 +0000
Files and hashes:         1: M-YtErUxsBexOppW_oy6TWvdZT0.roa (hash: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y=)
                          2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: /oENNjNVeCPbXmDt0RzUyFqbxughsSy8n8X7ERpwKCA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:de:96:f2:a5:c0:1c:76:24:e5:eb:b1:59:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
        Validity
            Not Before: Apr 16 21:00:59 2026 GMT
            Not After : Apr 17 21:00:59 2026 GMT
        Subject: CN=f8afbefa2a1034c7df2ee0ef40f7fb1765e2ed7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:13:85:38:d2:a8:bf:df:0e:78:10:d8:c9:
                    49:32:00:24:f0:a6:14:3e:6b:8e:4c:ea:ec:0e:88:
                    4b:02:ff:23:1c:c8:67:90:0d:19:85:5d:80:8b:53:
                    21:d3:3c:7d:ab:ad:01:80:1a:8c:16:0d:6c:ae:5f:
                    9c:95:6c:d0:39:71:ab:ab:cb:ae:93:2d:7f:23:0b:
                    f6:46:e6:5a:ef:89:7f:83:9c:bc:f7:06:b0:df:41:
                    d3:31:00:03:b1:21:d2:89:b8:4c:47:6d:1a:fd:1f:
                    41:84:42:37:0d:3d:53:7a:80:85:46:80:78:1d:ec:
                    21:d1:8e:39:f8:96:a8:7d:c6:18:89:52:d4:ac:85:
                    7b:f9:f6:c7:04:69:5e:53:b0:a1:b2:8a:ee:68:b8:
                    28:1d:69:b0:cf:8b:92:2f:28:ad:0f:26:da:42:dc:
                    02:92:f6:d9:57:cb:a1:24:75:b4:71:1b:ff:ad:8c:
                    25:76:e5:78:77:b8:ba:ea:b6:de:bd:bd:2e:2b:06:
                    89:64:22:3a:9f:bb:90:a1:48:2b:91:87:ac:e5:e1:
                    06:11:38:20:92:c9:10:66:a9:d1:5d:e8:25:ee:23:
                    af:b0:1c:04:8c:92:bb:95:55:8d:33:fb:af:ad:85:
                    5d:a5:47:44:af:a5:d9:8e:7f:9e:89:d1:65:72:80:
                    31:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:AF:BE:FA:2A:10:34:C7:DF:2E:E0:EF:40:F7:FB:17:65:E2:ED:7D
            X509v3 Authority Key Identifier:
                keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:55:86:dd:c0:28:bf:aa:09:42:26:f8:a1:c6:fc:e7:be:
         da:7e:5c:39:14:8c:2d:8d:1e:97:f2:c0:21:1d:fa:59:e0:00:
         eb:5f:1d:d8:b0:71:58:11:e5:9b:d0:23:8c:02:27:9b:f8:2d:
         40:02:2a:bb:ac:d0:25:d5:b3:b1:c4:42:54:b0:fd:21:8a:22:
         b9:d9:9c:b4:7f:10:74:6a:dc:d3:0f:6c:89:c5:6c:f4:0c:2f:
         ff:98:12:f1:3e:bf:e7:7b:26:f1:84:d4:53:b9:5c:3c:da:c1:
         c6:b3:1d:4f:bc:9c:78:c7:2f:a6:1f:d8:0e:ab:94:d2:cd:77:
         36:8d:8d:40:b7:59:f1:00:57:6f:ae:90:35:2e:e7:4d:fa:0f:
         e6:c4:93:88:b7:2c:91:ec:7e:9e:51:67:09:bf:8e:7a:51:59:
         cb:a3:a9:7c:e2:d7:9f:87:ac:c7:b0:f9:f2:2b:34:27:82:de:
         c2:b6:83:1f:20:f3:65:be:98:60:2d:fb:30:85:d7:3e:72:0c:
         dd:e6:01:df:31:05:63:85:1b:18:ec:4e:c7:24:12:85:99:53:
         75:9b:68:a0:d3:50:7e:cb:0a:dc:fb:d9:a6:38:b2:cd:3c:b4:
         2c:69:d5:3b:0f:d5:d5:86:7d:98:79:4f:9d:12:fc:51:ab:cc:
         dd:41:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:05 2026 by rpki-client