Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File:                     fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier:          s781n1l9xy7PMz3PzuIxtZGkeRUOEWjUFzkp6kAbR8Y=
Subject key identifier:   29:26:44:98:D3:C1:2A:E5:18:EF:B9:87:41:FC:82:0C:D3:57:1A:F3
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer:       /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial:       019CAC4746055C107785CCD192F60C7C6D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number:          169B
Signing time:             Mon 02 Mar 2026 02:01:17 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:17 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:17 +0000
Files and hashes:         1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: eTXcXmx6+3n6VCGGERDE4q3g8VPonlhUKhPhd4m+eSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:46:05:5c:10:77:85:cc:d1:92:f6:0c:7c:6d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
        Validity
            Not Before: Mar  2 02:01:17 2026 GMT
            Not After : Mar  3 02:01:17 2026 GMT
        Subject: CN=29264498d3c12ae518efb98741fc820cd3571af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:1a:b4:c4:bc:d9:f6:ea:8e:91:05:46:0f:
                    4e:06:7b:c5:35:4e:98:59:0b:d1:81:33:1d:bd:09:
                    20:4f:ee:8d:0e:4b:c5:8d:57:d5:9f:f4:2c:2e:2a:
                    50:c6:41:6b:cd:4d:5d:ec:5d:53:f0:1d:84:69:07:
                    dc:06:ca:f9:a8:95:a4:c0:af:3c:4e:fd:79:71:a2:
                    e6:57:cb:ee:c1:46:2a:c6:bf:24:18:0f:17:23:94:
                    49:c9:2c:59:d1:39:0c:75:88:ae:c3:25:fd:5d:f7:
                    69:d4:83:ba:65:c8:cc:e1:39:c7:2d:5c:01:02:96:
                    d9:9c:30:81:15:c0:45:af:da:0b:82:c9:e8:ed:a0:
                    2f:4e:92:aa:ab:82:40:4e:04:fb:7d:77:09:3b:1e:
                    87:c1:75:5a:d5:0e:43:d9:90:96:f6:2f:64:80:1c:
                    d1:52:eb:70:7d:7c:2a:83:db:95:17:29:19:bb:c5:
                    b3:33:e9:2f:ee:77:95:ac:bb:83:d5:ed:51:26:cb:
                    4d:8e:26:bc:91:3a:20:ba:60:76:a1:57:48:c4:d2:
                    39:6a:ce:a0:23:b3:f2:6f:52:51:99:05:88:2a:62:
                    92:02:1c:d1:a4:89:ca:b9:bc:8b:5c:01:c5:85:94:
                    78:5f:c5:ba:b4:0e:6c:18:02:78:58:80:a2:e1:56:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:26:44:98:D3:C1:2A:E5:18:EF:B9:87:41:FC:82:0C:D3:57:1A:F3
            X509v3 Authority Key Identifier:
                keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:8d:ea:b2:e6:43:ce:6a:d6:16:16:83:ca:41:ea:13:06:7b:
         c4:10:00:89:2e:9a:29:10:fb:7f:4d:9b:86:63:5d:5f:15:fb:
         5f:76:11:e3:7a:bf:f9:3b:43:bb:f0:0e:0c:14:3f:14:e5:5c:
         7a:fe:f3:19:79:df:96:19:f4:c6:c1:2b:95:94:24:87:3b:52:
         f6:d1:74:62:ab:e5:34:4b:6a:ce:fc:3d:8f:ec:95:66:82:dd:
         b7:1a:ef:01:0a:58:09:92:29:cb:33:03:b2:78:bf:d2:34:9e:
         4a:23:25:45:9c:a0:5e:af:4b:c3:98:d2:e4:cc:28:e9:9a:8b:
         ef:60:55:89:56:ed:cb:1e:9f:81:8e:60:97:38:b2:9c:95:6b:
         7e:e7:3b:62:56:c2:9a:cc:b7:63:0c:dd:81:12:74:69:d0:98:
         67:7e:74:70:0d:68:70:d0:11:6d:2b:b1:f4:a9:d1:9b:4c:80:
         9f:03:88:e1:13:9a:ef:ab:f5:1c:f4:36:70:5d:71:29:a1:db:
         27:64:fe:3c:07:97:ec:54:b9:d3:79:0b:83:67:3d:c3:12:00:
         0a:09:77:45:89:16:3b:ef:55:a2:71:be:88:19:c2:08:d6:9c:
         0d:9e:9b:c8:b7:48:83:24:b3:86:ac:d7:47:37:9e:ec:e9:7b:
         d5:43:ab:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:07 2026 by rpki-client