Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
File:                     Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft (raw, json)
Hash identifier:          aeKwiDsTflMLZTs/It8dYgZkWXHJ60HXC6/dWydh2VM=
Subject key identifier:   70:1A:57:43:E3:2B:F9:87:27:33:2C:EE:5F:5C:F6:93:C1:04:5A:93
Authority key identifier: 15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C
Certificate issuer:       /CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
Certificate serial:       019D292990DD0895253A0EC9BA4CE31F197F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
Manifest number:          05A8
Signing time:             Thu 26 Mar 2026 08:01:22 +0000
Manifest this update:     Thu 26 Mar 2026 08:01:22 +0000
Manifest next update:     Fri 27 Mar 2026 08:01:22 +0000
Files and hashes:         1: 2AoCTJhqU5v6MlrbH3hvQy0Uf7Y.roa (hash: G3dIE6sYWPhy161h7oAdaMA3nB4HfJRUXVulVZyCG4Y=)
                          2: Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl (hash: Cc5tX9o9HqYXTfvJ97VRph0AuxnGoZxXVZcbpP5aIbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:29:90:dd:08:95:25:3a:0e:c9:ba:4c:e3:1f:19:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cfcfcef82f7d1c5908a2e5a009fd1b3439817c
        Validity
            Not Before: Mar 26 08:01:22 2026 GMT
            Not After : Mar 27 08:01:22 2026 GMT
        Subject: CN=701a5743e32bf98727332cee5f5cf693c1045a93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:b9:49:06:10:b3:81:0e:10:ec:60:72:eb:
                    01:5f:99:4e:ab:2c:6b:68:1c:b6:d9:43:8d:76:c9:
                    0b:b6:80:41:4d:af:c2:bc:73:ee:16:c3:ed:bd:b4:
                    f4:11:8b:06:e3:cb:2f:fd:e0:9b:43:da:8a:3c:9d:
                    cc:c6:4e:5f:e5:90:ba:39:4f:9f:73:19:9e:5e:f6:
                    8f:4b:53:4a:43:f7:14:59:0d:9f:f9:cb:d4:67:c1:
                    12:aa:64:e3:5d:14:bc:44:49:58:10:42:06:5f:cb:
                    dc:94:11:eb:5a:e3:b6:6a:c8:0e:4a:2b:16:1f:aa:
                    38:b7:c6:1a:f7:97:13:af:23:d9:f5:3e:e5:f9:f8:
                    9b:e6:c2:8d:a6:7e:d5:d6:9e:5e:86:24:33:8c:6e:
                    22:d7:74:8a:6a:38:44:c3:cc:b5:43:3e:13:0c:ea:
                    9f:d4:77:a0:38:de:87:d6:d8:c9:93:bc:02:a4:8d:
                    f2:71:15:fd:f4:b1:8c:a9:5f:65:e6:cc:ea:13:b9:
                    1c:58:87:87:8f:3e:6c:7b:63:31:8d:fa:52:17:26:
                    84:c8:84:88:ed:a1:f5:99:29:58:31:83:ae:48:41:
                    71:c5:4f:bd:96:1a:12:aa:e7:29:6a:b5:61:4d:9e:
                    f2:17:5b:3a:51:33:f7:66:cd:77:ab:f1:be:64:7f:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1A:57:43:E3:2B:F9:87:27:33:2C:EE:5F:5C:F6:93:C1:04:5A:93
            X509v3 Authority Key Identifier:
                keyid:15:CF:CF:CE:F8:2F:7D:1C:59:08:A2:E5:A0:09:FD:1B:34:39:81:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d3790d-9723-4b53-ad13-611ea442d2f3/1/Fc_PzvgvfRxZCKLloAn9GzQ5gXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f3:23:06:13:55:e2:c7:a8:29:7e:6e:57:e7:e6:80:e3:6d:
         94:76:ea:64:2e:cd:08:67:f0:4b:cd:ce:2d:40:53:f3:f4:91:
         e2:c4:75:37:98:d5:8a:9f:ed:16:f4:67:bd:62:b6:bf:8a:ef:
         61:a8:21:59:ce:d1:ca:ba:f7:db:97:39:c5:6c:86:d4:1f:96:
         63:40:d3:10:c0:d0:f9:20:6a:f5:ec:dd:aa:54:52:33:36:82:
         58:b1:e6:63:6c:2a:28:d1:0b:ec:40:55:f5:f0:44:64:52:24:
         11:06:d9:17:77:1b:46:b2:c9:34:08:a3:af:09:91:09:23:36:
         8c:0e:33:bc:04:73:40:8a:a3:e5:6a:0c:38:ae:2e:d1:5c:60:
         7c:7e:21:b4:5a:dc:7d:3a:bc:38:45:e5:36:67:d6:d1:30:89:
         14:33:56:19:81:70:46:98:8a:a6:3c:9b:51:47:b1:0d:f5:21:
         34:00:f0:db:80:36:c8:78:ae:24:a8:0f:6d:09:e7:95:c6:12:
         cd:8b:05:12:f5:63:09:6a:56:46:cf:b2:46:f4:23:8e:49:92:
         39:43:17:8a:85:9b:1b:57:01:29:b1:74:31:dd:79:98:81:24:
         56:ed:e3:ff:2e:2c:bb:16:7e:7f:58:e9:61:64:3d:73:e5:b1:
         7b:eb:8e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:35 2026 by rpki-client