Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          dgQ/0vOYxuhLFqssvqDgh/8mGAMsv2gh9xjrXfm0YGg=
Subject key identifier:   08:44:9D:A4:64:A1:2C:79:BB:C2:11:FF:2F:33:7B:FB:EC:3D:79:9C
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       019CAA5936B848BA14404C3B62B47C4527A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          1548
Signing time:             Sun 01 Mar 2026 17:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:39 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: fRqdwjOgkE5Yd1kckyw1Poa1GhuV5tcmV3D+JuCcneE=)
                          2: oQtEQsDloQjn_yHhdWK48mAuP_0.roa (hash: IBQycGDwnrvsxVfFQ3rFUHD2uAasJQXEOZ891wf4Qks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:36:b8:48:ba:14:40:4c:3b:62:b4:7c:45:27:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Mar  1 17:01:39 2026 GMT
            Not After : Mar  2 17:01:39 2026 GMT
        Subject: CN=08449da464a12c79bbc211ff2f337bfbec3d799c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:81:d7:8f:e3:2f:69:d6:05:41:6d:4d:a8:6c:
                    c3:32:f3:a7:c4:e9:de:3f:17:b5:ea:ee:3f:d7:30:
                    8c:cf:a1:c3:39:a7:9c:bd:32:68:ca:14:a7:10:50:
                    a4:31:6a:32:a7:e8:e4:ff:36:9e:b3:3f:ae:e8:20:
                    0d:ee:0c:4e:67:7f:d3:a1:6d:aa:bf:a4:79:4e:b6:
                    6a:ac:ec:c3:c2:36:ba:83:3f:87:9d:49:62:3a:8f:
                    21:96:66:43:00:1b:c9:80:72:f6:99:c1:a0:ad:b3:
                    c6:a8:a3:9c:65:20:a8:12:e2:81:c7:cb:d6:b0:db:
                    4c:37:a7:6a:01:b8:d7:a6:1f:bf:df:59:ce:dd:c9:
                    8b:c5:65:3d:cc:06:3b:34:4b:d7:91:8f:23:12:7b:
                    86:d9:35:16:30:ef:c6:e0:9b:7b:96:b1:44:28:6e:
                    a3:12:15:b7:8a:a4:f5:e1:74:c4:22:4c:51:74:24:
                    e6:08:b5:74:1d:16:23:df:ee:30:d5:2f:67:3a:82:
                    99:b9:22:29:0f:be:4e:f4:0a:5c:8f:94:a2:c5:98:
                    f8:53:c0:5f:a6:b3:79:f1:d8:d0:c1:8d:29:d7:ec:
                    fd:63:b2:f5:c0:eb:08:c5:73:8f:b6:7c:1d:7e:d5:
                    c6:a9:fa:bb:c1:1a:03:0e:e6:cb:7b:c4:dd:3f:db:
                    45:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:9D:A4:64:A1:2C:79:BB:C2:11:FF:2F:33:7B:FB:EC:3D:79:9C
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:57:9f:ec:62:c6:da:8e:7e:9a:fd:55:22:a8:19:26:46:02:
         4b:77:97:0c:8e:f4:dd:66:e1:34:62:59:d4:83:26:69:57:74:
         d2:74:02:5e:9e:12:1f:4c:6d:1f:a4:0f:19:ca:88:95:69:eb:
         ff:1e:9c:35:45:3c:95:a2:9b:f0:b5:e7:b1:32:19:e5:37:8a:
         9c:ef:b8:ea:5a:d4:ae:07:c9:d1:da:a6:1b:34:c3:e9:00:b3:
         12:4a:1e:2f:09:aa:5e:9b:9b:a2:5f:68:68:0a:b8:5d:29:5c:
         8c:39:59:00:b9:aa:49:ae:cc:5a:06:3c:50:13:a7:ee:73:88:
         47:a4:da:b0:1a:04:8b:ff:e7:17:8d:50:a1:19:a2:a3:63:34:
         d6:9f:65:ff:ee:47:51:66:75:4d:49:7f:0e:df:5a:a0:7c:4c:
         1f:70:67:a7:75:1d:b7:eb:bf:3b:07:2a:f0:a3:e6:87:55:70:
         9d:29:ce:d6:a6:52:4e:bb:5b:55:4d:ae:5d:ac:eb:59:14:0f:
         bc:a1:6b:bf:3a:8e:e5:f4:f9:19:f1:33:23:3f:79:cc:88:35:
         4f:86:43:b7:35:81:b3:9f:2e:77:b9:44:fa:32:02:88:4c:b4:
         5b:b3:f2:62:10:f7:7d:36:cb:09:bf:80:8c:e3:9d:85:33:14:
         24:b6:2e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:50 2026 by rpki-client