Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
File:                     fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json)
Hash identifier:          K737xdLYulVdy9lL4xY+9YGiIHqKTMYl/+5w8s3WBP8=
Subject key identifier:   55:53:C1:73:47:22:7F:23:58:99:9B:D3:3A:81:7F:F0:06:66:91:F2
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Certificate issuer:       /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial:       019D2C60C66BFDB527241C7FA278F577482D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
Manifest number:          C0
Signing time:             Thu 26 Mar 2026 23:00:32 +0000
Manifest this update:     Thu 26 Mar 2026 23:00:32 +0000
Manifest next update:     Fri 27 Mar 2026 23:00:32 +0000
Files and hashes:         1: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=)
                          2: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: AjNzpiMKcLPm/r3IdGPevR5fic1SkCb7E4wdO7sTseo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2c:60:c6:6b:fd:b5:27:24:1c:7f:a2:78:f5:77:48:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
        Validity
            Not Before: Mar 26 23:00:32 2026 GMT
            Not After : Mar 27 23:00:32 2026 GMT
        Subject: CN=5553c17347227f2358999bd33a817ff0066691f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:75:f8:d1:27:14:56:bf:2a:b7:4c:d7:89:
                    c3:96:37:3f:11:99:ce:4c:f7:56:95:1d:97:06:8c:
                    94:a4:1f:94:b6:f4:af:a6:35:42:90:3d:80:c8:00:
                    c5:2f:e0:9b:96:f4:1d:ca:e5:31:27:df:46:a7:de:
                    6e:3a:1b:dc:ae:f3:e9:29:57:8f:6a:f9:5e:67:67:
                    26:0a:77:e7:b1:ef:aa:f6:bf:27:e1:a0:c4:fb:ea:
                    9c:f7:dc:42:b2:8d:6b:43:fc:e4:88:82:fd:81:05:
                    b3:27:47:7a:f3:7f:5c:13:72:50:be:1b:32:75:c4:
                    8b:c3:e1:f8:ad:15:ef:d4:33:7e:68:91:57:b5:d4:
                    46:98:5a:cf:b4:60:04:6e:a1:2f:b0:7b:83:17:16:
                    f9:3a:56:3a:dd:a5:f6:b8:c4:d3:77:4c:04:0b:98:
                    4b:5a:3f:38:71:7f:e1:62:c3:c7:7c:2c:51:e4:9b:
                    57:57:11:de:80:10:e7:ac:fb:22:83:b4:e4:a6:fa:
                    0c:92:69:8f:4b:0a:35:46:8f:60:9f:2c:79:e2:99:
                    1d:7b:55:c6:9e:79:80:fd:47:4f:a2:f8:63:a5:fa:
                    a0:2c:cf:3b:82:6e:b7:ee:ad:77:cd:36:a4:cc:1d:
                    d8:6e:cc:26:48:6a:80:07:1e:09:77:ba:13:2e:7d:
                    39:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:53:C1:73:47:22:7F:23:58:99:9B:D3:3A:81:7F:F0:06:66:91:F2
            X509v3 Authority Key Identifier:
                keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:db:6b:1c:f5:f9:5a:33:ab:4a:7d:24:a3:ba:27:13:b0:49:
         1f:47:83:9c:66:6e:3a:ae:35:49:7a:c6:5e:1f:da:13:2b:78:
         78:67:25:89:ec:92:22:fa:61:80:5c:b8:c7:3f:1f:c8:0c:46:
         4b:1a:85:48:ed:df:a1:37:5a:d5:b2:70:ef:51:26:19:83:1e:
         44:b4:4f:1b:10:8d:fa:6e:92:4c:90:21:52:e8:72:83:8e:a7:
         bd:6b:d5:2e:65:ce:91:69:e4:f3:bb:fb:7f:8d:2e:52:74:15:
         b9:51:32:a7:62:e6:13:ff:e9:91:8f:f3:30:59:a7:44:54:f9:
         2d:35:cd:86:9f:0b:21:44:92:c1:d2:43:e6:ee:22:1a:d9:99:
         99:24:cc:27:3e:3b:17:b5:7b:bc:c3:93:dd:fd:80:a7:59:fe:
         3b:89:e1:3d:b2:75:9f:45:45:b3:34:91:e5:56:6c:1f:5a:1f:
         25:ee:1a:73:37:a9:4d:d0:0c:90:10:b2:74:4a:13:6d:3c:a9:
         13:42:a8:f9:e9:43:5e:41:13:76:1a:20:62:d3:3b:7b:6e:1f:
         c8:45:89:9c:5c:3c:99:19:f4:13:99:eb:03:4d:b4:17:95:c0:
         09:63:1f:36:46:4d:8b:b5:72:a7:ba:9a:c9:3e:b2:d0:3d:18:
         2e:47:bc:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0sYMZr/bUnJBx/onj1d0gtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0
MTQzNjgwHhcNMjYwMzI2MjMwMDMyWhcNMjYwMzI3MjMwMDMyWjAzMTEwLwYDVQQD
Eyg1NTUzYzE3MzQ3MjI3ZjIzNTg5OTliZDMzYTgxN2ZmMDA2NjY5MWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk11+NEnFFa/KrdM14nDljc/EZnO
TPdWlR2XBoyUpB+UtvSvpjVCkD2AyADFL+CblvQdyuUxJ99Gp95uOhvcrvPpKVeP
avleZ2cmCnfnse+q9r8n4aDE++qc99xCso1rQ/zkiIL9gQWzJ0d6839cE3JQvhsy
dcSLw+H4rRXv1DN+aJFXtdRGmFrPtGAEbqEvsHuDFxb5OlY63aX2uMTTd0wEC5hL
Wj84cX/hYsPHfCxR5JtXVxHegBDnrPsig7TkpvoMkmmPSwo1Ro9gnyx54pkde1XG
nnmA/UdPovhjpfqgLM87gm637q13zTakzB3YbswmSGqABx4Jd7oTLn05kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVTwXNHIn8jWJmb0zqBf/AGZpHyMB8GA1UdIwQY
MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt
ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi
LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNtrHPX5
WjOrSn0ko7onE7BJH0eDnGZuOq41SXrGXh/aEyt4eGclieySIvphgFy4xz8fyAxG
SxqFSO3foTda1bJw71EmGYMeRLRPGxCN+m6STJAhUuhyg46nvWvVLmXOkWnk87v7
f40uUnQVuVEyp2LmE//pkY/zMFmnRFT5LTXNhp8LIUSSwdJD5u4iGtmZmSTMJz47
F7V7vMOT3f2Ap1n+O4nhPbJ1n0VFszSR5VZsH1ofJe4aczepTdAMkBCydEoTbTyp
E0Ko+elDXkETdhogYtM7e24fyEWJnFw8mRn0E5nrA020F5XACWMfNkZNi7Vyp7qa
yT6y0D0YLke8iQ==
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:52 2026 by rpki-client