Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File:                     FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier:          aO8ANz5YrPmU1un6eLHXiF2nUXyow2PEncUGOP74LN4=
Subject key identifier:   6B:9F:10:69:F9:9C:35:71:37:8B:F0:05:A9:F0:7F:C7:BD:5C:16:D3
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer:       /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial:       019CAC7DBED58982EDA91EF8EB952DAC024D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number:          1858
Signing time:             Mon 02 Mar 2026 03:00:47 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:47 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:47 +0000
Files and hashes:         1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: Aocg58flZyeBVEefwFcAA5n06UNJSK5crr55qR03g+I=)
                          2: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (hash: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:be:d5:89:82:ed:a9:1e:f8:eb:95:2d:ac:02:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
        Validity
            Not Before: Mar  2 03:00:47 2026 GMT
            Not After : Mar  3 03:00:47 2026 GMT
        Subject: CN=6b9f1069f99c3571378bf005a9f07fc7bd5c16d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4b:8e:9e:5d:47:f6:c8:be:ee:22:68:8c:2e:
                    fc:ad:a6:16:12:fb:7f:c8:47:d3:59:78:b2:22:06:
                    63:08:43:09:ed:c8:f2:4c:8a:d3:5d:c3:2a:38:6e:
                    1a:c8:61:3e:d6:10:76:8b:48:2d:f0:10:cd:5c:c2:
                    6c:97:f5:54:05:09:56:a2:c9:6a:b0:b9:41:49:a1:
                    e5:31:da:d5:d7:dc:96:64:03:f4:b4:fd:57:dc:8c:
                    1a:21:00:39:a5:31:48:6d:05:aa:f8:a1:07:20:c6:
                    b3:81:e0:98:0c:cb:ec:2b:17:92:56:1d:03:82:74:
                    1b:52:fa:68:1f:5f:47:42:85:23:b7:7e:fd:0b:37:
                    b5:88:64:e8:3f:4d:81:73:0f:7e:11:c9:de:eb:a9:
                    63:f8:94:be:96:0d:95:83:06:c9:ad:f9:1e:64:9d:
                    de:7c:fc:fe:cc:7f:62:5d:55:4c:37:78:c5:90:47:
                    4f:58:4f:96:82:99:67:7a:4f:59:34:1d:fb:71:fd:
                    1b:5f:9e:ce:8a:35:74:8d:ea:12:a2:ff:35:96:d4:
                    5c:fc:1a:63:5d:bf:a2:e9:a2:9c:b9:45:c6:ad:da:
                    11:81:10:4a:27:96:a6:60:47:4a:f8:a7:2e:74:8f:
                    8d:11:fa:9f:14:0a:35:96:42:dd:37:2a:19:07:f7:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9F:10:69:F9:9C:35:71:37:8B:F0:05:A9:F0:7F:C7:BD:5C:16:D3
            X509v3 Authority Key Identifier:
                keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:d2:d6:26:46:9c:77:09:d4:bb:37:b8:fb:fe:93:4c:a0:
         14:cd:03:a2:86:2d:1d:cb:0e:dc:44:80:fc:e2:30:52:df:3a:
         e0:be:1f:d5:54:86:27:26:13:b6:15:ad:46:89:f3:d7:87:67:
         bf:7f:fd:01:67:5c:8b:d3:7d:07:4c:b1:15:fb:c0:4a:27:9a:
         6e:7c:22:57:8e:ea:05:d0:61:05:e2:1b:4d:d4:0d:1d:80:da:
         7c:ad:1f:f0:5f:7e:2c:fa:ac:f0:d9:b8:aa:f8:6a:99:e4:36:
         1c:83:47:6f:50:d7:40:b6:aa:87:15:6a:f2:08:4d:95:c2:92:
         34:df:e3:f4:8b:aa:9b:d6:6c:a6:d7:73:f2:f5:56:f9:68:32:
         8b:a1:fe:53:82:8a:dd:d2:b0:d9:b4:78:e1:4d:d0:70:50:39:
         c8:af:d1:ed:b6:82:8e:ee:f6:df:76:0b:84:8e:d4:9d:37:d3:
         f3:4a:14:6f:8f:d5:e5:fe:d6:54:fb:f9:db:57:7f:ee:c0:00:
         c1:30:51:bf:d8:ba:55:6c:99:65:11:e6:3d:dd:4c:c5:3b:19:
         7f:aa:ec:f7:cf:c8:9b:96:07:95:af:ed:e7:09:e8:e5:cd:b3:
         f9:1b:75:e4:d6:90:78:a9:14:5a:ab:11:c0:1c:d9:1f:3f:7b:
         05:d8:47:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:10 2026 by rpki-client