Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          Hev+3KyD4XdG4KKSG4P8Ce9EX7N3eL5tXNyMq35IIcw=
Subject key identifier:   87:B3:97:82:91:C2:AD:75:80:C0:4E:68:32:B5:3D:4B:CD:2E:66:35
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019D29CE815BA4602207ED65BD1E110A9A62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          06BA
Signing time:             Thu 26 Mar 2026 11:01:32 +0000
Manifest this update:     Thu 26 Mar 2026 11:01:32 +0000
Manifest next update:     Fri 27 Mar 2026 11:01:32 +0000
Files and hashes:         1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: 03tCT8HpvO2Hs+0T8BJRf+XqLduPkQlYdU3F5J/nELQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:ce:81:5b:a4:60:22:07:ed:65:bd:1e:11:0a:9a:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Mar 26 11:01:32 2026 GMT
            Not After : Mar 27 11:01:32 2026 GMT
        Subject: CN=87b3978291c2ad7580c04e6832b53d4bcd2e6635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:12:34:e2:04:23:22:23:45:3d:be:9e:92:96:
                    90:98:0e:59:2a:91:3d:f0:5e:5d:4a:c0:41:2e:92:
                    65:92:67:70:44:14:1c:16:a6:65:d0:d6:c6:98:64:
                    a2:69:86:83:3e:70:24:da:64:56:9a:d6:06:4f:6f:
                    b1:aa:1e:fc:43:7a:e1:6e:92:ac:21:cd:90:e5:80:
                    aa:da:51:4d:19:a9:51:16:f9:4e:a6:e9:7a:59:14:
                    60:cd:f7:1f:92:37:17:cd:d8:8c:ea:c6:91:2c:6b:
                    a0:d0:f9:51:61:d5:9a:2a:ef:f8:5a:de:7f:54:ce:
                    37:bf:b6:0e:f1:5f:55:d9:f6:3a:5d:fa:69:70:a2:
                    48:7a:32:2c:ea:f9:f3:17:fa:70:0f:1d:3b:ae:d7:
                    e6:3e:d6:52:5e:c1:7b:1f:5e:82:76:21:0e:4f:a4:
                    38:85:dc:34:08:ac:e7:4d:48:5c:4a:8d:ea:48:b2:
                    2e:37:78:ba:20:d3:5c:33:df:d0:83:06:89:6b:60:
                    82:19:8f:4a:e9:20:cb:65:45:ae:5c:34:54:20:57:
                    2a:19:07:e7:0d:c7:4b:54:4b:53:c0:43:65:3f:a5:
                    fc:ad:61:7b:b6:01:da:b4:e7:2f:71:dd:d0:56:a8:
                    60:c4:d7:6f:ad:ad:b0:a3:af:b5:fb:d4:9c:f7:c1:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:97:82:91:C2:AD:75:80:C0:4E:68:32:B5:3D:4B:CD:2E:66:35
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:47:a8:87:95:12:4e:2b:ec:c3:42:99:e7:4c:a1:12:13:eb:
         4a:97:c5:74:a5:c4:dd:a5:7d:5e:c7:07:98:3d:60:d4:9b:3f:
         9a:8e:9a:91:68:22:9b:15:6d:bf:9b:0e:74:cd:06:98:3b:6b:
         bc:ba:20:31:12:e8:a4:ff:10:64:80:7c:fe:7c:af:30:b0:29:
         86:43:83:ab:3f:3b:94:6f:73:cf:ea:4b:cb:69:5b:da:c5:29:
         ff:23:d0:94:9f:ab:99:d8:fe:63:52:dd:2c:28:e9:61:15:2b:
         26:da:6b:22:c5:e0:ae:0e:a4:c6:fb:ef:a3:68:f6:8d:3a:57:
         85:72:39:90:53:f5:ae:b9:2e:a7:03:51:24:9c:34:20:dd:2a:
         1e:31:79:ec:5a:54:b5:bf:80:05:49:56:98:2a:45:56:bb:13:
         50:de:4f:46:09:e0:29:8d:8d:16:60:23:3f:97:58:bb:5a:63:
         32:19:5c:56:31:a2:8b:f9:79:d1:fe:39:7f:74:eb:96:06:28:
         10:0d:cc:dc:a8:bb:b7:b3:81:38:99:d6:fa:c3:94:37:92:be:
         78:69:d4:ef:08:43:ca:dc:13:23:94:e3:dd:5b:c4:42:9e:b0:
         77:2c:3a:74:8c:3b:46:fd:ae:fe:31:36:0e:94:d5:03:25:c9:
         43:c3:4b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:39:05 2026 by rpki-client