Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
File:                     Fwpcah2MIGUdVj4_ELujqD344L0.mft (raw, json)
Hash identifier:          C9D8opxhTDAO1tdcGYzkuWxZRjD3rjgmFtaSHsU7Ysw=
Subject key identifier:   F6:BE:AC:2E:2F:9B:3C:BC:D3:D0:CE:C2:28:92:F0:47:07:93:B9:01
Authority key identifier: 17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD
Certificate issuer:       /CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
Certificate serial:       019CA97D0197789F0D9E173C8BD548A766DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
Manifest number:          1840
Signing time:             Sun 01 Mar 2026 13:01:07 +0000
Manifest this update:     Sun 01 Mar 2026 13:01:07 +0000
Manifest next update:     Mon 02 Mar 2026 13:01:07 +0000
Files and hashes:         1: Fwpcah2MIGUdVj4_ELujqD344L0.crl (hash: nAKWVLs03REKingY2HklZTsJfJ+STMCib9LnYVYu1z4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:7d:01:97:78:9f:0d:9e:17:3c:8b:d5:48:a7:66:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170a5c6a1d8c20651d563e3f10bba3a83df8e0bd
        Validity
            Not Before: Mar  1 13:01:07 2026 GMT
            Not After : Mar  2 13:01:07 2026 GMT
        Subject: CN=f6beac2e2f9b3cbcd3d0cec22892f0470793b901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:35:62:bc:95:1f:9d:89:d0:ed:92:cd:9d:
                    a7:24:79:db:60:94:1e:b9:33:9d:fa:02:5e:31:31:
                    22:8a:5d:d8:6e:95:c0:42:df:16:2d:56:b2:20:f5:
                    7f:1c:66:44:91:26:a2:2e:0d:fc:6d:f2:df:7d:4e:
                    97:55:8b:a9:66:73:a0:20:33:31:40:dc:58:1b:87:
                    7c:44:9b:b8:8a:99:f6:5a:af:c5:7f:d2:82:73:b0:
                    38:e0:46:67:3d:2c:ce:3f:d5:d2:9f:2b:30:73:dd:
                    1d:03:23:79:74:ac:22:8b:4f:e3:d4:d5:35:8d:50:
                    0c:57:a7:1e:38:9a:ba:7e:2d:31:e3:d8:96:15:15:
                    44:bd:63:fa:7a:a4:02:fa:a1:7c:39:0b:fd:0b:d9:
                    ed:9e:be:d9:4d:78:0e:6a:69:c2:54:18:dd:fb:10:
                    99:70:97:d3:a1:d8:37:ef:ad:86:7a:88:8f:61:16:
                    f2:20:7c:c1:08:ab:3f:5b:16:43:d9:87:83:db:12:
                    81:c3:8b:14:89:49:fd:7c:4d:70:78:8b:45:1a:db:
                    66:0b:9a:32:8a:03:ca:54:03:49:a5:e1:cb:e6:84:
                    e2:49:07:26:0b:64:bb:58:fc:94:09:55:31:3a:0b:
                    cf:4e:14:47:89:57:e9:05:e0:d3:ac:52:79:c1:47:
                    36:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:AC:2E:2F:9B:3C:BC:D3:D0:CE:C2:28:92:F0:47:07:93:B9:01
            X509v3 Authority Key Identifier:
                keyid:17:0A:5C:6A:1D:8C:20:65:1D:56:3E:3F:10:BB:A3:A8:3D:F8:E0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fwpcah2MIGUdVj4_ELujqD344L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b14da-8311-42b2-a651-096f6ce9ed6c/1/Fwpcah2MIGUdVj4_ELujqD344L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:28:07:70:15:89:1b:a2:1b:18:92:c2:7e:e5:ee:a5:29:
         f5:bc:e0:72:50:19:93:dd:18:5f:57:d6:df:9a:ce:ed:b1:3a:
         39:8f:5f:93:e0:5c:67:1b:96:a8:a5:15:d7:88:72:7b:46:e4:
         df:0d:54:18:c4:b1:b0:ed:99:88:28:e4:79:73:6e:4e:13:c6:
         80:ac:8f:42:83:85:d6:c3:68:6b:50:e3:96:7e:16:12:db:69:
         db:a2:1d:8e:f4:5a:1b:9a:f3:ae:50:cf:c6:16:af:39:f6:92:
         a3:9d:11:0f:12:72:ac:72:f4:67:11:f4:8d:95:83:ea:96:00:
         6c:7e:24:9f:7a:af:30:6c:78:62:34:b9:2c:10:0d:64:58:ed:
         ee:e8:32:67:e4:28:b3:1f:42:50:90:00:b6:27:28:3f:cc:e0:
         a0:f1:90:1e:77:a6:b7:a8:33:36:25:c4:56:8a:2b:1d:13:66:
         3a:c0:40:5c:59:5f:54:4e:f6:50:31:82:08:f2:b3:21:f7:7b:
         cc:4a:6f:7e:49:6c:ce:7f:44:12:c1:88:d7:a0:e5:ab:1c:45:
         be:ac:3d:b3:8f:3f:2a:cd:6f:3f:e6:de:ff:cb:83:4f:70:ff:
         d9:0b:6a:a5:e6:88:bf:fb:49:99:42:51:86:95:17:48:74:81:
         65:3c:e2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:15 2026 by rpki-client