Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
File:                     FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json)
Hash identifier:          i/nhFQCAR5EnYA8pZ1nPZHqoBJksDesjVJtvSKkYJnY=
Subject key identifier:   FC:BC:99:DC:66:26:D6:46:A7:4C:DD:41:0C:A4:73:84:69:FC:1E:48
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Certificate issuer:       /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial:       019CAA5860E01CA0F530833482B8CE884427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
Manifest number:          187A
Signing time:             Sun 01 Mar 2026 17:00:44 +0000
Manifest this update:     Sun 01 Mar 2026 17:00:44 +0000
Manifest next update:     Mon 02 Mar 2026 17:00:44 +0000
Files and hashes:         1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=)
                          2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=)
                          3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: CPdjRxNze3coc/mCW1QBPJx27hKW44AC486IbGtFa4g=)
                          4: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=)
                          5: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=)
                          6: dlNg4jKyuvWtkOqh3BoUDhRtRF8.roa (hash: jwm/3oScvLPEeGbSo2Jnt2w09tQTXUvo49okZJ+us7o=)
                          7: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=)
                          8: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:58:60:e0:1c:a0:f5:30:83:34:82:b8:ce:88:44:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
        Validity
            Not Before: Mar  1 17:00:44 2026 GMT
            Not After : Mar  2 17:00:44 2026 GMT
        Subject: CN=fcbc99dc6626d646a74cdd410ca4738469fc1e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:af:39:0e:23:01:ed:5a:61:c7:09:c0:f1:
                    0b:14:bb:f8:cd:65:64:69:e6:d3:b0:5b:bf:30:10:
                    f9:28:ae:aa:3d:25:87:51:28:34:7f:7c:da:58:13:
                    0b:12:eb:a4:46:f3:07:2c:57:b8:b9:19:28:8a:79:
                    3a:61:8c:75:51:85:66:43:5e:f9:cd:51:d7:59:0b:
                    c4:3b:4d:1b:fd:ec:bb:81:7d:74:64:b1:00:00:6e:
                    c6:58:72:61:28:a3:df:ef:c6:dc:96:64:b8:22:91:
                    95:a0:3d:5f:b9:8f:a8:25:46:20:8a:ef:bc:89:c6:
                    93:f6:a9:62:c6:93:5b:11:51:5e:f6:cb:33:a9:b1:
                    0b:4c:e9:38:0c:a6:91:f8:7e:de:53:0b:e5:bc:4b:
                    43:c7:cd:b2:45:f9:20:7a:1f:91:1d:b2:0e:b5:6f:
                    76:5c:b2:50:af:36:82:15:21:6c:a0:a5:5a:4e:8d:
                    1d:c5:2d:20:ff:de:65:8a:8d:d3:75:14:af:10:cd:
                    73:81:c3:37:13:c0:16:2d:e9:fb:ee:4c:b5:81:85:
                    58:6a:33:97:93:40:3b:a6:f0:75:a3:b5:2b:05:57:
                    c8:99:d8:d1:9d:72:54:30:bd:43:34:f1:2b:01:f7:
                    f8:83:c1:8e:d6:50:9c:f4:74:b6:28:aa:19:bf:37:
                    71:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:99:DC:66:26:D6:46:A7:4C:DD:41:0C:A4:73:84:69:FC:1E:48
            X509v3 Authority Key Identifier:
                keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:9f:a5:27:5d:48:4d:42:ea:13:ed:1f:b3:2d:c0:80:25:3c:
         33:0a:53:ea:c2:1e:fc:b5:01:26:a2:f9:64:31:4e:65:9b:ab:
         a4:d8:8c:f2:c0:05:a0:39:9a:97:f9:70:e4:0e:5b:0c:af:d9:
         31:86:16:a5:33:ee:1e:af:58:7f:32:14:ee:d5:c3:7b:bc:e4:
         75:25:6a:b4:24:0a:3b:cb:d8:c8:70:dc:85:5f:26:de:8e:0f:
         a0:d9:ac:dd:a3:43:44:00:c3:10:52:60:e8:21:7b:0d:44:96:
         e4:c1:93:0a:5a:46:fa:e7:9b:65:88:1f:bb:c2:5e:49:c0:c4:
         50:61:0e:a6:c2:9a:21:e1:40:08:bd:64:da:07:b4:e4:fd:8d:
         39:00:ec:01:b9:14:9f:35:98:de:be:34:5f:32:2d:b4:bb:23:
         35:92:cc:97:10:29:5e:92:7a:28:37:05:15:a4:56:fc:7a:82:
         8a:b8:1e:b6:90:98:f5:7e:65:a6:97:dd:cc:75:07:58:df:95:
         67:1a:35:db:5a:00:5a:a2:77:a4:bb:6d:9a:68:e8:53:f3:91:
         bd:62:40:9a:8e:37:ee:9d:ad:6b:bc:62:ca:10:68:e9:5b:ad:
         ac:42:d0:18:aa:7a:a2:06:e0:55:8a:25:c6:da:74:80:f1:28:
         32:2a:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:08 2026 by rpki-client