Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File:                     FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier:          ZkqG7iNCGgZUp7M7voc6IrVHKM3y3JHymLMulteMIy0=
Subject key identifier:   C2:E1:55:54:55:CB:43:02:91:6B:C4:2D:0A:BD:BB:9D:D3:9D:5E:83
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer:       /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial:       019CAD224A794A03B8E5CA6A13CD6AC8E3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number:          0D97
Signing time:             Mon 02 Mar 2026 06:00:31 +0000
Manifest this update:     Mon 02 Mar 2026 06:00:31 +0000
Manifest next update:     Tue 03 Mar 2026 06:00:31 +0000
Files and hashes:         1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: Xr8JYdkuzP54gLL9aZ5pvERhEi2wFn5piTGvHnjqS7I=)
                          2: W58XMgZh9lZ_P5m3yj1yWR948AE.roa (hash: /DZnUsMGqFUioz1rHfXRehgQ0Epro6BcGMD4flzo29I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:22:4a:79:4a:03:b8:e5:ca:6a:13:cd:6a:c8:e3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Validity
            Not Before: Mar  2 06:00:31 2026 GMT
            Not After : Mar  3 06:00:31 2026 GMT
        Subject: CN=c2e1555455cb4302916bc42d0abdbb9dd39d5e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:29:11:a2:98:6a:e4:e7:7e:ee:08:5e:f2:8b:
                    a1:49:78:5d:c1:db:79:40:d7:61:92:c8:9a:59:56:
                    18:e0:64:40:e6:c0:27:42:47:7d:7c:16:24:5b:6e:
                    8e:60:a8:3b:97:26:ff:ff:27:ca:9c:13:93:fa:dd:
                    76:43:f2:d3:e6:97:2f:d3:b7:50:84:a8:0b:09:5c:
                    c0:9e:89:e9:25:32:8c:e7:ce:da:73:a3:85:63:8e:
                    34:0d:6b:eb:15:f5:e3:ac:8b:cb:e7:c2:cb:4e:7c:
                    c3:85:28:2e:1c:b9:dd:b0:01:e7:23:57:94:43:ec:
                    e1:88:4c:fb:b6:6f:aa:a2:50:75:9c:51:28:7d:dc:
                    79:45:46:0f:14:f1:b9:1b:7e:8f:46:c3:c4:ad:3e:
                    d5:e6:a4:4e:a7:01:5d:0c:b2:92:71:cc:84:53:c8:
                    c7:58:17:e8:5e:9b:fe:8f:37:ef:04:86:dc:22:90:
                    36:e7:77:96:0e:2e:17:9c:b1:c1:31:09:be:51:e7:
                    55:04:e8:35:b6:b3:d6:68:09:d9:90:63:b1:f8:3a:
                    0c:40:fc:89:ee:3e:d9:d7:0d:b0:40:9f:c1:72:31:
                    d9:f1:93:a2:8a:9b:2f:b0:2d:36:a9:6d:b7:f4:dc:
                    b5:5c:85:93:30:fe:ce:f8:ad:c7:8d:46:89:0f:19:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:55:54:55:CB:43:02:91:6B:C4:2D:0A:BD:BB:9D:D3:9D:5E:83
            X509v3 Authority Key Identifier:
                keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:d8:60:12:04:53:2f:62:26:24:d2:4f:83:06:1a:80:a1:
         b8:18:7a:ef:b8:35:8f:62:21:43:15:6a:cc:0e:9c:ef:36:35:
         db:e4:aa:77:7b:c7:e1:2c:02:63:ff:32:ba:f0:14:a8:3f:0a:
         7c:e0:91:75:e5:dc:db:27:35:ed:9d:4a:3b:6a:ef:0f:c1:64:
         ac:8d:4b:67:ed:4c:43:8f:bc:88:d8:59:70:b8:c5:ee:f0:8e:
         1c:f7:0a:72:16:8c:0a:af:e5:b7:f9:56:ef:1f:71:91:87:ab:
         ff:d8:6a:c3:13:e3:7a:c1:40:29:42:25:ad:fb:bd:0e:57:58:
         94:a8:08:8a:9c:ce:23:e6:2c:0b:d8:e9:00:c2:c0:d1:5f:ad:
         bd:86:dc:63:27:e0:24:00:42:60:8f:ac:16:b0:80:53:dc:08:
         b8:7c:37:54:3e:dc:95:96:75:0c:8c:52:49:f1:c2:87:40:05:
         0f:7a:f4:53:89:eb:3c:49:26:2b:2c:cb:3a:bd:fb:3a:e1:c0:
         68:b2:a1:52:32:72:e9:72:26:bb:fa:6c:73:fd:b2:fc:85:a6:
         ba:79:db:04:91:35:39:5f:e2:5f:94:8b:ab:8a:bb:5e:04:26:
         d3:09:33:f7:cb:ba:98:9a:1a:93:7e:fa:5b:9f:4e:04:fd:73:
         f7:ca:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:53 2026 by rpki-client