Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
File:                     fxePr2QB4vNxbjF2RWnfcx31jyI.mft (raw, json)
Hash identifier:          X/4uCm0XR5eq7Ys88Moy3fSp+Wyc5eDRm+le3LxgG3Y=
Subject key identifier:   D4:1B:0C:89:A3:F2:E5:6B:23:D4:3E:92:C6:D5:D3:3A:CC:D7:E3:72
Authority key identifier: 7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22
Certificate issuer:       /CN=7f178faf6401e2f3716e31764569df731df58f22
Certificate serial:       019CAA9014C247CCA23BFEBAB61331D18967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
Manifest number:          12B9
Signing time:             Sun 01 Mar 2026 18:01:35 +0000
Manifest this update:     Sun 01 Mar 2026 18:01:35 +0000
Manifest next update:     Mon 02 Mar 2026 18:01:35 +0000
Files and hashes:         1: M-YtErUxsBexOppW_oy6TWvdZT0.roa (hash: TZXW/GBDFQYE5cnY/AzLaMpfHnhV7VNLTQcf/qj2o7Y=)
                          2: fxePr2QB4vNxbjF2RWnfcx31jyI.crl (hash: My8rnzf5xmuRDd09KFBYrdJ7jG5NzV8Mu+6SHfrvQG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:90:14:c2:47:cc:a2:3b:fe:ba:b6:13:31:d1:89:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f178faf6401e2f3716e31764569df731df58f22
        Validity
            Not Before: Mar  1 18:01:35 2026 GMT
            Not After : Mar  2 18:01:35 2026 GMT
        Subject: CN=d41b0c89a3f2e56b23d43e92c6d5d33accd7e372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ec:e9:d4:3f:e2:eb:0b:7c:08:c9:b7:13:0b:
                    e9:0c:06:22:8a:71:d0:ee:1c:df:56:cb:52:42:f3:
                    29:94:73:0a:2b:66:56:59:76:89:bd:25:92:ec:9b:
                    d2:c2:be:5c:94:34:e4:bd:89:cb:9c:1a:ec:d7:4f:
                    61:49:24:33:50:92:58:75:6b:fe:e8:ff:be:b3:64:
                    b7:d7:b0:67:d2:39:3d:69:3e:95:d0:82:7b:13:be:
                    0c:a4:0f:5b:b5:80:b1:bc:03:6c:a5:28:24:a2:3c:
                    af:57:c7:47:7b:ab:cd:12:cf:ed:5c:2b:dc:f8:0c:
                    bd:40:92:70:fb:e5:06:e6:91:3f:2e:35:24:0c:0f:
                    c9:a0:c1:89:99:a5:a3:3e:f0:cb:8c:66:4f:f9:80:
                    af:01:b8:49:f6:94:c1:ac:ca:2e:48:2c:f5:73:d8:
                    8e:9b:3e:83:95:a0:76:2e:3c:2c:ea:db:e8:1b:15:
                    67:ac:e2:4e:ec:b4:00:84:2b:90:bf:6c:dc:b8:a6:
                    78:46:06:61:e4:f5:04:ca:cb:75:eb:60:8e:2a:f8:
                    ac:7f:2c:60:54:03:6d:00:12:f0:f5:7e:7e:41:cd:
                    2b:69:09:25:8e:d7:72:39:f2:6d:dc:e2:3f:d2:3c:
                    5a:be:ae:d5:a0:5c:89:2b:73:e6:59:ad:bf:c7:4a:
                    33:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1B:0C:89:A3:F2:E5:6B:23:D4:3E:92:C6:D5:D3:3A:CC:D7:E3:72
            X509v3 Authority Key Identifier:
                keyid:7F:17:8F:AF:64:01:E2:F3:71:6E:31:76:45:69:DF:73:1D:F5:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxePr2QB4vNxbjF2RWnfcx31jyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1b7968-ca4d-45f4-b671-2e7f78489cd3/1/fxePr2QB4vNxbjF2RWnfcx31jyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:90:8c:fa:89:46:92:f7:f9:d0:8a:5b:11:d2:d2:86:3b:b0:
         c0:cb:bb:57:8a:5c:64:51:01:05:36:1e:04:32:18:73:e8:04:
         2e:98:2e:64:b6:43:e6:89:ef:8c:98:29:a2:15:af:03:de:ea:
         8b:f2:11:13:76:49:01:2d:10:bb:39:17:df:23:e4:ce:da:82:
         b1:83:bf:5d:9e:c7:cb:97:20:af:62:e9:da:fa:55:75:54:c8:
         b5:d2:22:c6:1f:b8:05:33:a5:f9:e7:a8:2d:7c:83:ac:34:f0:
         13:b1:b3:8f:a4:c9:45:3f:3f:21:a4:17:16:96:c0:79:9a:9a:
         0b:02:7b:0e:6a:ea:a5:aa:b4:b3:27:66:ac:d3:99:05:be:42:
         95:68:67:6e:e2:21:0a:33:04:10:08:31:b5:94:03:af:24:2c:
         97:7e:38:c8:3a:27:9b:cc:29:63:13:ea:ed:bd:55:8d:f5:c6:
         e4:57:1f:30:0b:b8:78:fb:af:aa:97:8f:0f:17:b2:3f:a2:34:
         28:f5:dd:17:be:01:f9:b9:21:96:84:08:99:69:ca:1c:26:c5:
         33:f2:35:e7:c7:1f:bd:83:fc:eb:b2:29:0c:1d:62:e4:65:4d:
         f8:ee:9f:aa:53:a5:44:d5:c9:de:6b:46:49:68:82:ef:b5:ba:
         a0:50:b0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:57 2026 by rpki-client