Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          uafeUuVkXHmkUsTILHVCSXFB1bNm0auXh0ZOStZChjM=
Subject key identifier:   4F:1D:63:61:1D:D5:15:13:5B:EE:CC:C8:A3:35:A6:16:81:BB:DE:58
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019CA7FD1B116C444B5AB88EED3974A91D01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          0339
Signing time:             Sun 01 Mar 2026 06:01:48 +0000
Manifest this update:     Sun 01 Mar 2026 06:01:48 +0000
Manifest next update:     Mon 02 Mar 2026 06:01:48 +0000
Files and hashes:         1: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: 2GzTDGcemn/jH0VvUcVlxcsYVOoVUk12oWlAFArS3+Q=)
                          2: zV9qn6rjLPdM3Y9L_4yH8rBRu5Q.asa (hash: PbbVW62w4nIIXsACjk+Z131fGv46DWI3bK0EUB7pFbo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a7:fd:1b:11:6c:44:4b:5a:b8:8e:ed:39:74:a9:1d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Mar  1 06:01:48 2026 GMT
            Not After : Mar  2 06:01:48 2026 GMT
        Subject: CN=4f1d63611dd515135beeccc8a335a61681bbde58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6a:7f:50:f7:87:f7:2e:86:4d:49:12:a5:3a:
                    7d:40:88:eb:6c:f2:4b:20:e4:7c:e5:c3:e3:21:92:
                    08:2c:d4:05:b4:cb:c4:08:81:df:3b:46:a4:54:29:
                    18:0a:a7:74:60:44:26:a6:90:3d:15:b6:b5:21:69:
                    77:6b:ce:e6:a9:f9:bc:06:c1:a2:40:92:79:0a:6d:
                    16:bc:bb:79:10:6b:06:68:22:19:64:68:82:5d:62:
                    6e:8d:b3:06:6c:ac:7c:a2:b3:e1:d7:a8:bd:17:3e:
                    d9:57:d6:8f:cd:f1:ff:60:ce:1f:28:d7:0a:e6:85:
                    47:e7:a7:f2:13:b6:27:30:4c:db:94:91:2b:e6:4c:
                    08:f1:a1:a1:b7:bb:52:4e:ec:0b:18:e5:f0:56:54:
                    9c:11:97:e7:3a:e9:28:5b:4d:d3:60:ce:71:53:09:
                    3f:10:68:02:4a:89:a6:27:52:ad:88:23:a2:3d:90:
                    35:31:2a:a8:ad:2f:eb:87:75:1f:6d:9b:99:9e:dc:
                    cf:c1:e4:82:ef:58:c2:86:16:43:f4:c7:c1:7b:67:
                    40:87:08:1e:57:fd:89:0c:29:8e:cc:8c:6c:f9:b0:
                    26:7e:65:a7:21:90:ad:70:74:b3:24:b0:9d:d3:71:
                    8f:9e:85:bb:16:16:13:0d:b4:17:37:b3:d6:d5:07:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1D:63:61:1D:D5:15:13:5B:EE:CC:C8:A3:35:A6:16:81:BB:DE:58
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:b8:23:8a:3d:d2:c5:50:a4:96:9e:aa:d3:a0:7d:c8:80:
         43:4f:e4:0b:30:e7:7f:78:82:d7:59:16:99:2f:b9:24:ba:7c:
         7a:d8:13:b0:59:c9:b7:f8:c6:80:a8:17:ed:3d:09:44:10:93:
         a5:c3:29:a2:37:21:4e:1e:0a:05:b7:36:2f:2b:67:3f:8b:83:
         42:f3:34:11:31:b5:c6:ad:e8:7e:45:a2:ee:4c:b7:2e:e4:a3:
         5f:54:8b:cb:b8:8f:c6:86:d9:db:3e:cb:86:cf:b4:1b:fa:6a:
         2f:9a:93:36:4d:09:c5:d0:36:97:1e:6f:06:e4:05:53:94:47:
         12:c3:81:da:f3:57:dc:1a:72:b5:bf:44:20:d6:25:84:bf:5a:
         b0:d7:8e:db:05:ea:c2:ab:df:7d:80:d7:f0:9b:18:a3:9c:1c:
         1c:59:fd:53:c2:17:76:6a:db:45:a4:a9:e6:f3:68:7b:4d:6b:
         74:4c:ac:fc:06:81:68:41:3b:d9:21:c8:be:23:04:95:0b:58:
         08:1f:7c:0b:13:12:ff:08:bb:f8:9f:c5:fe:1e:c0:4c:11:10:
         00:e9:45:f4:56:6d:68:0f:05:f9:4f:f8:f4:92:1a:b8:bf:ab:
         a8:c6:cf:21:9c:60:6e:14:ca:f3:f6:cb:a3:41:49:2d:b5:1d:
         21:cf:73:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:36 2026 by rpki-client