Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          kP5PR+AuSYIq8pp9jk84S7lDaVeyiydH9Sl+Onzz330=
Subject key identifier:   88:F4:87:5D:86:81:65:79:9E:F9:0D:8E:8E:CE:24:88:96:34:2B:36
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019D28F2E3EFB097577652E205B822C8AC10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          0A55
Signing time:             Thu 26 Mar 2026 07:01:39 +0000
Manifest this update:     Thu 26 Mar 2026 07:01:39 +0000
Manifest next update:     Fri 27 Mar 2026 07:01:39 +0000
Files and hashes:         1: 1Z4EQZv8pw305qtI7QN_PKdHZJE.roa (hash: xOHVIxkvcYwrKOFM5nVGP5q212Wgzb4Q6U3ZxUHbKh0=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: 80FmrBK+aNJ8mhi0o4MI2GJ5tw6yJtWoSq7WcqxkzZw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:e3:ef:b0:97:57:76:52:e2:05:b8:22:c8:ac:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Mar 26 07:01:39 2026 GMT
            Not After : Mar 27 07:01:39 2026 GMT
        Subject: CN=88f4875d868165799ef90d8e8ece248896342b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d4:58:b9:d9:3f:40:91:a8:52:7a:c8:5e:67:
                    69:7a:53:6e:bc:3a:95:01:f3:f6:72:e6:cc:71:40:
                    a0:8b:3b:1b:3f:cb:b7:27:b5:f2:1d:f4:90:87:07:
                    6e:c3:43:0e:57:58:18:d9:24:0d:2b:e3:a6:80:88:
                    b9:e4:ca:cd:c5:c1:f4:03:95:53:21:d4:80:18:05:
                    04:05:95:e5:1a:63:10:7b:80:e7:52:60:d6:ef:0b:
                    37:c9:ce:c0:32:f3:41:fa:3d:03:29:e6:67:2f:b2:
                    91:f8:a4:19:b9:4d:a5:2a:08:cd:0a:88:2a:14:42:
                    3b:d4:0f:3a:5d:92:b0:cf:8a:e7:c3:28:8e:75:32:
                    a8:9f:f6:29:ca:75:6a:da:ae:25:42:91:85:37:de:
                    f0:6b:4b:c7:6d:a8:0b:e8:77:ae:74:ac:de:0d:93:
                    cd:b7:59:fb:c3:65:0a:45:6a:7a:14:14:2a:7f:48:
                    7a:e5:6f:7b:f7:f7:b2:7d:5e:f5:17:9f:9b:5e:81:
                    12:8c:ce:9c:01:8e:4d:ad:48:0b:87:4f:1c:6a:3d:
                    8d:ca:28:5a:f5:67:cd:44:0a:f4:49:73:9d:d2:85:
                    cb:35:c2:de:53:7e:fe:74:62:96:7d:73:c6:f2:4f:
                    6a:25:e2:a7:4e:7d:41:03:bb:be:e9:21:51:7a:01:
                    48:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F4:87:5D:86:81:65:79:9E:F9:0D:8E:8E:CE:24:88:96:34:2B:36
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:97:62:21:fa:b7:ec:6c:5e:f7:f9:6a:8c:53:2b:9c:c5:f3:
         3a:43:a0:3c:a0:e3:5b:f5:06:74:60:71:c6:cb:8a:b3:0b:16:
         9d:77:c1:7c:01:ad:fb:18:bb:2e:6d:0e:06:6a:8f:a6:89:28:
         1f:e1:f1:a3:d8:f8:f2:16:e9:7b:5d:29:0a:92:29:ec:b4:1b:
         f8:2b:c7:7b:60:0b:03:90:96:eb:16:08:c6:5c:b3:c0:c9:f2:
         6f:73:bf:e3:7d:de:5e:5d:60:30:8d:27:f5:03:9d:f8:7a:c4:
         9c:62:a0:a0:b2:87:13:1d:0c:0a:92:4c:89:09:03:68:d9:ab:
         16:e3:f1:b0:a9:2b:08:0b:26:3a:98:c9:bd:29:e1:7f:3c:25:
         89:37:f0:0a:65:0f:53:31:35:cd:92:5b:d2:c3:2a:68:b0:95:
         07:2f:f1:42:3c:16:08:98:fa:25:30:16:8e:e0:80:9d:a2:b4:
         0e:2c:30:17:e2:24:a8:d5:b7:f5:55:77:28:7e:9e:1a:3e:c4:
         55:e0:c0:8d:34:b9:43:13:ae:08:bd:91:4b:7a:b5:e2:f4:dc:
         90:e8:b9:8e:d9:69:e3:91:fd:e4:48:e8:1b:64:fb:c8:15:27:
         b8:8d:0a:2d:c2:44:b5:f1:9b:49:f8:2c:5c:06:75:fe:a8:d2:
         5c:57:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:31:33 2026 by rpki-client