Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File:                     Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier:          163eE6ghZUc97yvTM9U/iyJjdKZ4iEGrF6hZFukjAG4=
Subject key identifier:   D2:DC:5E:98:C9:D0:EE:57:4A:43:27:B9:B1:A7:21:59:0A:44:D5:33
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer:       /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial:       019E1F7F499593B8E221BC6453E0CD812F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number:          036E
Signing time:             Wed 13 May 2026 04:01:36 +0000
Manifest this update:     Wed 13 May 2026 04:01:36 +0000
Manifest next update:     Thu 14 May 2026 04:01:36 +0000
Files and hashes:         1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: qfrUOcaJXWO8e5z/JpglOG/8fNzblta0ux8D+DW5GIc=)
                          2: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (hash: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:49:95:93:b8:e2:21:bc:64:53:e0:cd:81:2f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
        Validity
            Not Before: May 13 04:01:36 2026 GMT
            Not After : May 14 04:01:36 2026 GMT
        Subject: CN=d2dc5e98c9d0ee574a4327b9b1a721590a44d533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8a:03:cf:24:ba:7a:b9:36:b8:d4:64:2c:b5:
                    94:72:cd:20:1a:74:c1:9d:08:1d:d8:09:66:60:10:
                    71:59:a2:25:27:8b:50:5f:12:56:4c:5d:ea:63:19:
                    29:66:ef:02:aa:06:db:a0:a9:20:1c:a5:ae:24:38:
                    05:73:82:6a:40:17:d6:ff:1f:b5:d9:c6:86:00:f8:
                    c5:be:bf:7c:2d:45:c2:8a:2c:28:7d:35:64:1b:e1:
                    a8:49:d6:30:c7:da:69:6d:78:3e:df:ee:1e:e8:5d:
                    10:d2:9b:94:c0:60:f2:a4:de:08:8a:4a:28:a0:21:
                    36:24:6c:fd:83:7f:38:6e:ce:f0:46:26:d4:c4:d3:
                    c9:0c:e6:fa:49:ad:56:cf:f2:f7:c6:40:08:73:56:
                    c1:98:cd:2f:f7:79:d2:db:c0:26:2c:dc:0a:c9:6f:
                    f3:26:49:99:26:6d:51:8a:24:a9:5b:85:4f:e6:57:
                    53:cd:93:49:62:80:0f:61:65:f4:08:e8:b1:78:2b:
                    b7:f0:66:86:2f:1d:2a:4a:de:4c:08:0f:9b:e3:97:
                    22:0a:b1:b6:ce:f4:cb:27:cc:77:0e:b1:26:19:86:
                    27:e9:20:32:71:00:b7:41:de:f2:91:3c:c6:7e:e1:
                    79:87:b0:16:5d:00:57:fd:91:e1:d2:56:7b:51:8b:
                    36:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:5E:98:C9:D0:EE:57:4A:43:27:B9:B1:A7:21:59:0A:44:D5:33
            X509v3 Authority Key Identifier:
                keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:c7:7d:80:60:b2:95:df:3c:f3:e4:19:9d:51:2e:5d:ee:
         c8:56:5f:cc:0f:7e:3c:ba:47:43:cd:83:13:50:52:04:f8:f7:
         af:8e:0b:52:b6:22:48:89:ec:93:86:a1:7e:5b:3c:e6:e7:f1:
         d4:f7:38:7a:48:c6:7a:a2:90:cb:c5:5a:d3:a0:fc:ef:cb:fb:
         21:96:da:7f:72:2e:38:45:6c:2d:4d:13:1c:6b:99:6d:42:21:
         5c:61:1c:2d:9a:7d:d4:c7:3f:1c:c7:d9:d2:c9:e5:db:b7:83:
         24:30:1f:b2:8f:d8:0e:c5:3b:b9:6b:57:76:19:3d:41:25:7b:
         b6:73:ac:79:60:ea:b4:fd:c2:f2:a7:f8:96:10:41:b4:c9:2d:
         81:79:28:bc:92:4a:58:38:72:4a:0b:ee:0a:ff:6d:05:cc:05:
         75:47:97:b1:ec:dc:80:8a:d0:66:b0:52:d6:ed:ec:6f:88:12:
         a5:e3:ca:eb:e6:1f:ad:2e:d1:af:04:66:a9:ef:f0:42:1e:cf:
         83:4d:48:d2:2c:35:dc:08:d1:34:7a:d7:70:d8:95:de:03:7a:
         2b:8d:27:5f:12:34:71:82:c7:71:63:42:56:95:a8:3e:9b:db:
         64:47:89:d4:55:7d:4f:9e:20:66:1b:01:18:33:64:ba:9f:15:
         fd:fa:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:52 2026 by rpki-client