Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
File:                     m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft (raw, json)
Hash identifier:          YJuBi4AGCNz2Iz38rZf47SnhN+qUjTm6m5fDpqd8gQ4=
Subject key identifier:   C5:67:EA:02:81:B1:C1:CC:09:05:A7:E0:85:42:3F:6F:CC:59:82:54
Authority key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Certificate issuer:       /CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Certificate serial:       019D27729EC2B3E8E7C5A97BF3FD5E2D6FCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
Manifest number:          1707
Signing time:             Thu 26 Mar 2026 00:01:56 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:56 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:56 +0000
Files and hashes:         1: m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl (hash: 20HwH+8qSutOwloeHcNMIuKsBO8VklaA4nEYLrEq5xk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:9e:c2:b3:e8:e7:c5:a9:7b:f3:fd:5e:2d:6f:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
        Validity
            Not Before: Mar 26 00:01:56 2026 GMT
            Not After : Mar 27 00:01:56 2026 GMT
        Subject: CN=c567ea0281b1c1cc0905a7e085423f6fcc598254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:6c:83:66:b0:f2:2e:bf:23:5f:a9:4d:c8:
                    b7:af:99:3d:4a:7d:db:55:1a:ba:b5:43:ac:88:dc:
                    d8:ed:6e:56:98:a4:04:11:6c:a9:fe:d0:f7:5f:5b:
                    7e:e6:73:06:b9:e0:09:52:de:eb:88:2a:16:66:53:
                    33:7c:a7:72:78:01:bd:53:04:95:3e:94:e0:e8:19:
                    b0:31:1a:fc:4b:96:91:7b:46:97:db:39:18:a1:dd:
                    fc:a5:1b:bb:0e:94:cb:3a:cb:aa:37:80:fc:f3:a7:
                    ab:96:73:f4:cb:e7:b5:5d:e1:7f:c1:28:68:4a:b3:
                    8c:4f:bb:34:35:7f:68:24:19:5b:5c:89:8f:ef:d1:
                    2c:c9:52:58:8c:02:20:b4:a1:db:85:7a:19:cb:0c:
                    21:92:78:e5:e7:ac:dc:f3:8c:62:e3:8d:4a:be:a0:
                    1a:ec:14:55:9b:23:0f:9b:1d:c7:dd:b3:f2:71:0c:
                    8e:bd:d4:d1:4d:11:0f:1e:cd:53:39:cf:e2:a4:24:
                    92:ad:4d:bd:da:1c:00:c6:27:74:45:3f:b9:4b:29:
                    8e:cd:07:2c:18:7d:96:42:40:d1:76:b5:49:6d:94:
                    dd:4a:78:35:f9:3d:22:da:1c:0b:0f:76:4f:3b:de:
                    b6:c7:18:83:30:1b:3f:80:b6:a6:97:fd:6e:47:e9:
                    bb:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:67:EA:02:81:B1:C1:CC:09:05:A7:E0:85:42:3F:6F:CC:59:82:54
            X509v3 Authority Key Identifier:
                keyid:9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:21:9a:b1:f1:c7:b4:4d:4f:f0:6a:96:95:51:cf:6e:1c:37:
         ed:94:3b:80:82:70:70:7a:aa:53:12:4d:6d:bf:77:bc:af:1d:
         97:c1:42:fa:7b:1c:3e:91:ba:db:7c:be:01:1a:d1:92:12:cb:
         75:1a:86:1a:91:78:c9:39:06:94:46:59:29:e8:e3:8e:ea:cc:
         d4:79:f9:45:39:a3:12:45:68:17:5d:ab:de:cf:8d:ce:21:8e:
         c1:f1:4b:02:3b:a2:85:27:73:fb:94:d4:40:55:b7:a2:3c:9e:
         0b:aa:d7:a2:05:61:8d:2c:3f:ec:85:8d:b5:34:17:9f:5c:96:
         03:50:5e:9c:f8:50:2c:8d:b4:69:3f:d8:46:ba:26:8d:22:8a:
         4b:84:17:02:79:7e:07:d5:92:d2:c4:e1:29:4f:b5:28:80:2d:
         a8:95:29:a5:56:a4:40:3d:f8:a4:db:bb:12:da:6c:22:1c:a7:
         cc:70:54:82:a6:13:84:0d:dc:58:98:5d:60:29:9d:3b:d4:55:
         0d:e9:49:96:4f:67:aa:92:72:2c:d1:2b:f7:36:80:80:70:2b:
         e0:4d:25:a4:2f:b3:68:5c:e5:4d:22:5d:05:9e:d7:34:f4:9e:
         29:e0:4f:48:5e:d2:12:01:6f:68:2b:80:51:d6:f1:f7:96:bf:
         85:97:58:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:28 2026 by rpki-client