Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
File:                     FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json)
Hash identifier:          Q4VYpodQo33aDdQxqiOCZzJzNyPS+xggXpPN6zzttFA=
Subject key identifier:   35:12:50:B0:D7:2E:64:68:14:B6:C2:63:16:A1:E0:C6:BE:47:37:D9
Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51
Certificate issuer:       /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
Certificate serial:       019CAAC65CD6279E34403F296B42AD2E609B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
Manifest number:          1846
Signing time:             Sun 01 Mar 2026 19:00:52 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:52 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:52 +0000
Files and hashes:         1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: zTzmx2j7Pt3T146eXfIDGZ+Fe+y4Xca3xDGwnUhbyr4=)
                          2: wZYLGJBlCTJUsX-eSFhRzVh3OJs.roa (hash: eKqFE/Zg8siqql4lhjgWwbmByQIzTXxNcXcT1aXdcZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:5c:d6:27:9e:34:40:3f:29:6b:42:ad:2e:60:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51
        Validity
            Not Before: Mar  1 19:00:52 2026 GMT
            Not After : Mar  2 19:00:52 2026 GMT
        Subject: CN=351250b0d72e646814b6c26316a1e0c6be4737d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9a:1c:6e:59:08:0b:60:0a:90:8f:95:b7:7f:
                    1c:6a:79:05:91:46:19:49:07:a7:d6:71:84:02:67:
                    5d:5d:e5:32:35:3b:c0:92:ce:47:93:94:54:29:be:
                    8e:4e:54:14:ea:84:b5:fe:26:78:0c:f8:3f:3e:71:
                    d3:c9:ba:b6:7b:61:9c:67:91:8a:44:26:85:b9:fc:
                    72:8b:2a:ec:a5:de:ae:5b:0f:10:a5:e5:47:d6:e5:
                    b5:3f:2a:2e:7a:5a:46:46:83:e3:6b:17:63:34:df:
                    00:77:20:75:95:74:71:95:ec:c9:da:e1:64:97:24:
                    3e:b9:eb:39:55:4e:5d:96:cb:77:26:7f:73:f3:fb:
                    6f:3a:57:74:41:48:c1:46:1f:05:64:d2:83:9d:f4:
                    bc:4c:0f:b0:46:b0:e2:d0:6e:e6:a3:69:29:da:b3:
                    9a:6a:99:64:65:70:48:77:0f:17:6e:0f:c1:5a:49:
                    d2:af:1e:50:63:38:01:f8:9d:82:08:a4:c0:bc:12:
                    ab:00:b6:40:2a:ad:06:44:f2:21:7b:08:0d:f7:98:
                    c9:02:b1:7e:5d:09:d7:b8:f1:4e:ec:ec:a4:fe:fa:
                    cb:de:7b:b3:52:af:19:58:00:89:04:38:58:ea:c2:
                    ac:bb:a1:c6:cc:ef:bc:af:06:76:9b:f6:03:74:41:
                    77:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:12:50:B0:D7:2E:64:68:14:B6:C2:63:16:A1:E0:C6:BE:47:37:D9
            X509v3 Authority Key Identifier:
                keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:90:e4:d6:27:a2:ad:da:88:69:69:11:98:02:64:f6:21:ae:
         c5:a5:fa:f3:f5:61:92:12:3c:8b:a2:47:94:12:83:ba:be:74:
         a3:ba:33:8a:01:6f:52:29:35:f6:23:20:3f:7f:32:cf:2f:17:
         7e:3e:20:36:47:84:78:17:cf:db:5a:fe:8b:d2:13:7e:a7:9d:
         7f:f7:ca:67:b1:97:3e:57:f7:02:8e:7e:9e:fa:e1:ee:ae:f3:
         d1:b7:89:58:be:9d:eb:89:05:2d:ba:97:9c:77:dc:d4:b1:d6:
         fe:9c:e2:f4:67:ed:37:a5:8f:b4:f6:c2:cb:f4:da:2a:a1:0c:
         b1:68:c9:2e:0a:9f:9c:e8:24:59:a5:67:12:a6:ca:b9:aa:79:
         a6:9a:e5:80:28:11:86:17:8f:2a:aa:b7:05:fa:79:9b:81:ee:
         88:ec:81:a4:a2:83:3b:56:55:7b:3b:2e:a8:9b:f9:11:16:6b:
         70:bb:24:df:6f:a5:06:3e:73:16:6b:10:f1:06:55:ca:15:2d:
         69:6b:a4:d8:36:6c:ec:c8:8c:53:a3:29:cf:d0:aa:32:c3:ff:
         a0:02:5d:7e:32:1f:fa:62:c7:45:3a:5c:ce:7b:7e:53:0e:8e:
         fd:0a:31:b0:68:74:71:30:57:4b:55:b6:ed:2d:ca:12:6f:14:
         04:b1:08:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:38 2026 by rpki-client