Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
File:                     Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json)
Hash identifier:          PsTeJPtOTu0ZRStig4trLCmAgFkJ1NlvgkR6cL5NUVY=
Subject key identifier:   F6:8A:E2:89:A7:9A:B6:B4:3E:9A:CE:7C:11:63:D2:7B:CE:A2:2B:73
Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6
Certificate issuer:       /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
Certificate serial:       019D2703B931D6CBAF2DC54BE328CF6F7F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
Manifest number:          0669
Signing time:             Wed 25 Mar 2026 22:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:48 +0000
Files and hashes:         1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: 3giKWpAIWSAblTpi1UUVIR0UJx9oxyO8E1eztz1XFW4=)
                          2: uLaeGKv0bs_oO1vI3aT6N_vyvt8.roa (hash: WgJz3pk2ezCDKffdanrCW5yiZF/5p4B0bPNVwrYCrNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:b9:31:d6:cb:af:2d:c5:4b:e3:28:cf:6f:7f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6
        Validity
            Not Before: Mar 25 22:00:48 2026 GMT
            Not After : Mar 26 22:00:48 2026 GMT
        Subject: CN=f68ae289a79ab6b43e9ace7c1163d27bcea22b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8d:16:fc:f7:fc:a5:17:53:01:87:39:eb:a2:
                    c4:2b:cf:fe:75:4a:ef:9f:9a:53:b3:da:03:18:27:
                    3c:4c:b9:25:44:b6:fe:c3:c2:33:30:f7:5a:d2:f9:
                    ad:80:c6:3b:00:46:98:0a:5d:ff:85:34:b2:50:62:
                    a7:19:78:18:15:b4:93:5c:50:06:6b:57:83:d6:ef:
                    1d:d4:a0:14:2b:9f:ef:46:d0:f2:9a:ff:dd:f0:0e:
                    23:1e:63:4e:d0:16:32:aa:56:39:4a:a7:90:6c:25:
                    17:af:84:be:7a:50:73:40:81:ef:26:dc:b7:ce:f9:
                    cb:2d:a0:bd:fa:c4:67:40:ad:2c:fd:a7:54:e2:5f:
                    75:3a:37:24:e5:d5:5b:d5:60:10:22:96:cd:1f:ea:
                    60:63:cb:e4:bb:a8:72:7e:98:9f:84:e1:a2:96:ed:
                    9d:3a:e6:65:55:d5:23:af:3b:ac:98:29:aa:47:22:
                    49:1d:ab:31:07:30:ee:20:52:96:82:74:b6:aa:f3:
                    f8:20:d3:70:1b:27:74:8f:2e:d3:d2:b9:6a:b3:79:
                    21:5f:3a:e2:0b:be:3f:f7:38:f8:54:c4:03:3e:69:
                    01:e2:da:ca:02:e3:85:33:32:b1:78:d2:f6:d0:ec:
                    c1:bc:82:83:f8:23:a7:94:23:14:7d:59:89:44:ac:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8A:E2:89:A7:9A:B6:B4:3E:9A:CE:7C:11:63:D2:7B:CE:A2:2B:73
            X509v3 Authority Key Identifier:
                keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c0:f7:66:01:72:21:f0:c8:e4:92:26:91:21:23:6a:92:57:
         6f:e0:76:12:21:cb:07:3b:e0:c4:8a:ce:cf:c7:06:e0:6f:87:
         81:31:94:1a:b5:8f:35:28:e9:95:a8:2d:32:de:db:85:c9:ac:
         06:bf:56:07:5b:71:f8:33:0a:49:b2:46:c8:60:14:ef:0c:68:
         5e:03:f7:0e:7f:a8:2d:47:92:fb:9b:37:93:88:18:3f:f1:b5:
         80:e4:31:84:54:a1:1c:fd:e1:5d:1e:4e:11:fb:3b:19:d8:67:
         51:21:1e:63:36:51:ed:c2:fd:2f:65:9f:7e:99:ad:a7:39:0b:
         0f:b0:07:a7:9e:f5:f3:07:11:73:df:eb:d1:50:c8:d1:5e:5b:
         e1:d3:80:da:fc:9a:11:f3:eb:4d:65:24:1c:67:87:cd:64:ef:
         c9:00:bf:96:4d:c3:5f:47:9e:8e:75:56:63:47:e7:b3:83:3f:
         09:b7:68:c3:ee:6b:99:b7:0f:d1:8c:00:a5:1c:47:a3:4d:d6:
         12:68:16:33:36:06:a2:a7:e7:0c:ea:8e:f4:3d:7c:e8:c7:14:
         39:bd:6b:ef:a0:86:8a:bf:c3:17:7f:40:81:96:c9:3f:8e:ac:
         73:23:70:1f:00:15:89:4c:b0:78:1d:95:87:b1:cc:9c:f0:6c:
         8b:8d:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:05 2026 by rpki-client