Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          ozIAZjGJ8sR3lBvIGRZ69Mxyz9aDSao/1k4mDsP9IX0=
Subject key identifier:   36:E8:CE:9C:8B:4C:BD:DD:BA:0C:2E:E2:C6:79:AF:60:46:E1:A5:3F
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       01A0D9F187CF514DDB4DCAE061BFF4E35656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          0499
Signing time:             Fri 25 Sep 2026 19:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:19 +0000
Files and hashes:         1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
                          2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: f47sRMHHJQPiBITSKbvqYZfGt8HNVDZLuhY2gCHx+fQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:87:cf:51:4d:db:4d:ca:e0:61:bf:f4:e3:56:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Sep 25 19:01:19 2026 GMT
            Not After : Sep 26 19:01:19 2026 GMT
        Subject: CN=36e8ce9c8b4cbdddba0c2ee2c679af6046e1a53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:75:3e:19:8c:a6:b8:cd:08:a5:4c:2a:1a:a1:
                    c8:38:97:89:cb:1a:a6:99:c8:81:80:ed:06:bb:ac:
                    75:27:2b:bd:af:ce:88:05:3a:e9:36:02:bd:0e:57:
                    09:fa:b8:e2:da:08:b2:c9:a5:6b:82:fb:9d:5c:01:
                    99:b4:84:b0:58:58:10:1f:ab:e8:7c:8a:be:2f:97:
                    e6:3a:2a:ce:41:1c:7f:7c:42:57:13:2c:cc:90:ee:
                    f5:53:6a:ea:a3:42:97:0f:c0:f0:9c:cf:58:ac:4e:
                    e0:54:db:c4:51:99:0c:7a:0c:10:43:c1:e9:32:a2:
                    dc:cb:fa:c4:43:d4:a7:b7:6f:0f:bc:de:be:93:b7:
                    53:d0:a3:e0:c8:f9:f2:84:cd:5c:f0:c6:08:24:b2:
                    a2:a6:19:05:7f:f3:13:71:99:82:61:6b:07:53:21:
                    64:19:74:57:cc:48:94:22:24:36:29:9f:29:a5:fd:
                    2d:20:b6:22:ab:dc:37:ab:50:78:ca:70:3b:98:b7:
                    b9:0c:57:6b:b3:9f:d2:8f:38:94:ab:cf:95:4a:bc:
                    da:65:71:f1:a0:d3:27:3e:cc:48:c3:f7:2e:ab:5d:
                    69:14:80:f0:50:41:b6:19:ba:f3:1f:d8:69:ad:36:
                    5d:96:36:8d:eb:71:aa:ff:f4:1d:9a:0d:80:81:9e:
                    62:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E8:CE:9C:8B:4C:BD:DD:BA:0C:2E:E2:C6:79:AF:60:46:E1:A5:3F
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:69:a7:89:62:a0:2b:53:d8:d5:6f:1b:14:48:f4:f9:ab:
         98:95:35:45:77:0e:62:d2:da:4e:95:ee:b2:5b:f1:5e:b6:3c:
         0a:8f:c4:d4:b5:8e:00:de:23:2b:e2:9e:af:d6:d2:06:24:24:
         e4:ec:1c:7e:ee:f3:de:8a:e0:ec:b7:d7:8b:37:1f:27:b5:b9:
         17:77:70:5e:de:f4:fb:fb:66:fe:92:14:43:51:fd:8b:0c:36:
         3b:69:73:bd:ed:55:69:f5:0f:a2:40:4c:da:3e:ee:4b:9b:08:
         71:54:e0:67:16:9c:ec:ac:f2:53:9b:72:1b:7a:28:bb:a5:69:
         50:ed:e8:0d:23:a5:e5:92:87:99:13:d4:15:52:3e:6a:5c:c8:
         8d:6c:55:35:d7:3e:55:d2:f1:27:2f:6c:24:c9:06:1e:fe:36:
         01:b0:a8:25:83:56:88:1a:80:e9:2e:0c:3b:96:c1:0d:eb:47:
         ec:74:1e:86:f7:87:ae:51:52:f1:10:bf:b6:cf:69:42:30:6f:
         ec:cc:38:51:ec:93:af:75:27:10:54:5f:80:73:0e:1f:88:65:
         c3:39:8f:82:4b:8c:e8:59:4c:f2:24:e2:26:d1:f6:60:7e:70:
         8f:41:91:14:7c:46:c5:85:d6:13:3f:4e:c4:c0:80:89:8c:6b:
         6c:35:82:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:16:43 2026 by rpki-client