Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          ALPBQscahySVBqo0RDkWd/pwu3xJ+0dBQD2PySlr4hI=
Subject key identifier:   DD:C7:B7:06:56:CA:B4:02:6B:B9:B5:77:C3:56:88:A6:B4:69:61:54
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019CAC46F1095EAFFFB555869246CF41E753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1587
Signing time:             Mon 02 Mar 2026 02:00:56 +0000
Manifest this update:     Mon 02 Mar 2026 02:00:56 +0000
Manifest next update:     Tue 03 Mar 2026 02:00:56 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: Ut6+ldJjE9Od3lpvwzftWzWTgUcq6+PM1MxKPlIxXgc=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:46:f1:09:5e:af:ff:b5:55:86:92:46:cf:41:e7:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Mar  2 02:00:56 2026 GMT
            Not After : Mar  3 02:00:56 2026 GMT
        Subject: CN=ddc7b70656cab4026bb9b577c35688a6b4696154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:89:2a:e5:32:3b:e8:57:a0:8c:c1:c2:bf:
                    70:39:f1:eb:99:76:82:b7:07:db:6e:49:f8:78:98:
                    dc:05:45:19:e2:a7:cf:40:30:e6:b6:e5:5f:07:80:
                    c6:bc:b6:2e:c3:1c:52:f3:ee:33:03:50:4a:39:ea:
                    9b:d0:cd:10:db:1c:c9:e8:63:3c:80:fc:91:62:9d:
                    32:27:a5:32:a9:8a:2e:40:43:2b:34:75:22:89:f8:
                    29:c6:1f:24:d3:80:e7:10:f3:93:03:b1:69:93:31:
                    2d:60:21:37:cb:5b:8c:24:e4:c0:ff:38:cf:31:c3:
                    2a:60:9e:9d:35:f9:f5:e2:e6:30:7c:19:73:88:88:
                    ca:39:32:1a:4a:7a:be:3e:6f:96:55:39:35:9b:9d:
                    08:51:e0:df:26:05:35:aa:0e:47:90:23:74:5d:d1:
                    22:07:15:78:cd:9a:68:cc:f4:35:90:30:39:2b:50:
                    02:8b:8e:82:cb:02:04:a3:12:4f:15:25:25:92:74:
                    3b:c6:d0:d7:4a:52:bf:2d:de:30:95:1b:d4:db:80:
                    56:e2:9e:d6:39:23:d0:85:8a:32:63:34:57:d2:0b:
                    67:6e:df:9f:d8:7b:75:69:76:c1:ec:5e:ea:72:31:
                    24:cd:84:7b:3e:9c:03:0f:01:47:87:62:42:c9:c9:
                    b7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:C7:B7:06:56:CA:B4:02:6B:B9:B5:77:C3:56:88:A6:B4:69:61:54
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:66:87:d3:2c:33:ed:66:78:10:0d:91:32:30:d7:92:91:
         4c:df:af:da:e8:cf:b8:63:7a:fe:e4:8e:1c:c4:63:b2:27:d1:
         a1:b4:d6:97:ea:dd:00:14:cd:27:4d:91:83:89:d4:7d:78:be:
         68:dc:23:91:18:b0:bd:8c:5e:78:fc:c5:a5:fb:8d:3a:f6:1b:
         94:3a:71:19:c9:a3:13:33:56:6e:fc:2c:d5:57:e7:de:1e:58:
         04:a9:32:49:e0:b2:e8:0c:9a:f1:bf:41:be:2b:61:d0:79:ca:
         c5:26:c6:35:7c:64:26:15:db:40:0a:ce:e5:8e:3d:3a:f9:fb:
         ee:e2:65:84:64:3b:9e:27:97:81:b2:6a:0d:fc:db:ce:8d:11:
         bb:b3:23:34:ff:0d:99:80:b3:f2:7c:61:f4:fe:85:49:71:11:
         fb:c1:c5:f7:89:bb:85:91:dd:47:bc:2e:e3:4b:c1:9b:d1:9e:
         5d:6c:64:11:86:f6:16:57:79:02:95:fc:0e:04:17:65:b7:cd:
         a8:21:d6:b1:95:41:3a:3d:72:98:63:75:fb:21:20:e1:4e:a4:
         1b:8f:c9:45:e6:df:77:f2:1c:c6:b0:7a:24:6e:e9:16:09:b2:
         94:f3:50:cd:fb:4c:f9:af:ae:28:fc:f6:b1:c5:59:c9:f4:c9:
         6b:3a:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:10 2026 by rpki-client