Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File:                     Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier:          RksAP1ANjLTDOu3WBYCluRqtDbvlvQc4Xy9gGlhAJYU=
Subject key identifier:   1F:9C:C2:1B:CC:3A:AD:34:45:49:F9:53:D6:91:FE:A8:68:F7:A0:1E
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer:       /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial:       019D27A8E551C8F56FC5D963384E410930CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number:          1814
Signing time:             Thu 26 Mar 2026 01:01:13 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:13 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:13 +0000
Files and hashes:         1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: g1dan6r28jA0x29mVdc9EtNm63PWbPjEVHqGNy6d/RQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e5:51:c8:f5:6f:c5:d9:63:38:4e:41:09:30:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
        Validity
            Not Before: Mar 26 01:01:13 2026 GMT
            Not After : Mar 27 01:01:13 2026 GMT
        Subject: CN=1f9cc21bcc3aad344549f953d691fea868f7a01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:02:97:cf:93:0a:98:71:75:00:9a:7e:d0:
                    67:84:9a:13:17:7e:6e:e0:ee:9e:d1:e6:80:95:9c:
                    35:e0:ec:af:c5:7c:85:1f:ad:cf:d0:c3:fe:12:b1:
                    4c:2a:30:b8:f7:03:a7:93:30:bd:3f:ea:4a:85:00:
                    7c:e1:96:51:e0:68:42:2b:14:d7:ac:79:64:28:dc:
                    09:fe:63:e2:bd:13:01:a7:e3:4d:c4:b1:bb:ea:24:
                    88:2c:d2:5c:04:52:8c:89:e2:c0:30:3e:67:8e:aa:
                    81:0c:73:0f:dc:30:72:d4:c6:3c:dd:0a:3e:e7:e8:
                    ff:37:3b:ed:31:44:8a:3f:7d:53:70:f0:ba:6f:bf:
                    aa:07:fc:4d:7c:7e:cc:1a:fb:12:bd:09:fa:ca:ec:
                    fa:8b:3b:44:de:3f:da:22:59:00:49:ab:28:7e:92:
                    fd:30:cc:95:57:00:45:52:87:15:b7:5d:4b:96:50:
                    f7:8f:0a:f0:33:d0:ef:5f:2f:29:dd:72:20:02:ad:
                    ae:05:16:bb:ab:3d:38:e0:61:b7:cf:6e:f0:3d:3d:
                    aa:5a:4f:06:36:df:af:4b:13:d9:8d:ea:ad:28:be:
                    7c:93:41:3d:e9:06:8e:8f:61:c9:71:33:9a:fc:b2:
                    16:7e:a7:01:f4:2e:be:76:c2:62:91:82:b5:0d:06:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9C:C2:1B:CC:3A:AD:34:45:49:F9:53:D6:91:FE:A8:68:F7:A0:1E
            X509v3 Authority Key Identifier:
                keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:07:72:09:20:d8:f8:85:c6:1d:93:5b:c1:bc:0f:7c:90:
         d0:7d:55:2d:51:18:a3:9a:17:8e:fc:7c:12:57:95:77:0c:cd:
         8c:41:98:fe:21:ee:09:36:8a:f8:f2:b5:d1:f6:ba:b6:4b:6f:
         12:d1:22:b3:72:a1:47:c0:b2:ea:76:d7:af:fc:cb:bd:d4:0a:
         8f:af:d6:db:f6:7b:20:9f:0f:f7:ab:3f:52:ba:a0:27:bb:7f:
         2c:96:e9:33:9a:65:6e:d2:d7:a0:db:a6:56:4f:0a:b8:c6:eb:
         01:84:9f:b0:fd:70:e5:87:e8:c6:5d:e7:f8:1c:8e:8d:67:24:
         a0:f1:19:e1:7a:e7:32:08:4a:d6:43:80:a5:9a:49:b4:65:6c:
         41:93:0c:c7:18:53:63:69:9c:97:f0:1a:e5:76:07:9e:aa:cd:
         ad:20:65:60:89:4c:8e:dc:e4:cf:d1:b9:4d:5d:24:fc:8a:d1:
         37:82:4d:89:eb:ce:9c:60:f6:72:2a:43:ae:a6:01:e4:53:8d:
         0f:35:ed:d0:e7:35:6b:ac:06:67:84:bb:0f:c7:c7:4b:a6:6e:
         2a:6b:cd:bd:50:8c:d0:33:c6:38:07:e1:d1:75:f6:2d:d8:5d:
         61:d0:af:ea:cd:de:a3:8a:96:d8:b5:36:85:f8:63:bb:b2:18:
         f4:7e:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:14 2026 by rpki-client