Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          7hz4MPfMfOem60n7oijT9fB36yoSU+/l044FGbAl/lA=
Subject key identifier:   77:FE:DC:50:F0:FF:96:11:00:B3:86:D6:F1:8D:6D:6B:3D:67:D7:40
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       019E1ED9EA99DAE8A9CFF17CCA5A3F76AE97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          11D6
Signing time:             Wed 13 May 2026 01:00:58 +0000
Manifest this update:     Wed 13 May 2026 01:00:58 +0000
Manifest next update:     Thu 14 May 2026 01:00:58 +0000
Files and hashes:         1: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: oZAX6VzNevF6iaDOvS+v+dhaIgwTC5G0q4YSn3EP/7I=)
                          2: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (hash: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M=)
                          3: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (hash: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:ea:99:da:e8:a9:cf:f1:7c:ca:5a:3f:76:ae:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: May 13 01:00:58 2026 GMT
            Not After : May 14 01:00:58 2026 GMT
        Subject: CN=77fedc50f0ff961100b386d6f18d6d6b3d67d740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9a:33:d4:c2:78:b2:b1:a1:28:46:cb:b1:84:
                    78:99:47:de:d6:9b:6d:cf:30:25:73:f8:45:45:97:
                    2d:85:d9:7b:eb:85:3c:8b:19:86:ac:5d:10:69:a4:
                    6b:8f:57:84:53:8d:c3:88:ec:45:1f:7a:ae:51:ea:
                    20:c0:ca:2c:93:e8:3a:ee:62:aa:ce:86:ed:09:5c:
                    45:c9:25:69:58:80:3a:ce:92:17:51:40:23:06:59:
                    0c:d3:c5:93:c8:2e:41:22:01:fb:a8:77:ad:71:4f:
                    e0:1c:7b:43:bc:2f:c4:dd:4d:d9:e9:7c:cf:b6:02:
                    fd:dd:0a:60:b9:48:40:cc:3a:4a:e1:af:4a:6c:a2:
                    86:bf:d7:1b:9b:bc:c6:7d:14:e8:3c:78:db:52:3f:
                    99:03:61:30:d2:10:ee:76:42:5b:e0:c4:a6:78:49:
                    1e:a2:0c:3d:e0:be:0a:6d:79:71:18:06:e6:cd:75:
                    8c:09:1a:d5:67:50:6c:8a:5d:5b:2e:18:87:29:bf:
                    00:03:eb:5d:9f:60:e1:30:2b:90:e0:a3:bc:74:31:
                    0c:6e:27:00:a3:23:1e:fd:49:91:a2:79:3d:0e:3b:
                    df:a2:bf:6e:f5:d0:46:8c:ea:4a:e0:f0:9d:87:7c:
                    aa:bf:6c:fd:7f:80:9e:cc:45:e8:4e:24:11:8c:f0:
                    a4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FE:DC:50:F0:FF:96:11:00:B3:86:D6:F1:8D:6D:6B:3D:67:D7:40
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:cb:84:26:e8:77:c2:9c:0c:62:6b:42:00:b5:6e:12:92:
         28:e7:d3:d5:42:c3:44:89:9d:0c:1c:ae:5b:de:be:08:af:1f:
         cf:03:2d:56:15:0b:22:47:e8:b4:67:c8:67:65:7a:5a:9d:73:
         c0:8b:5e:7f:d6:94:15:ea:fc:8b:eb:2f:94:28:20:b9:c4:97:
         45:c7:77:98:ac:9e:1d:24:64:a7:ae:44:73:83:2f:0b:63:42:
         63:ff:3b:6f:2f:06:3a:9f:5e:7b:6f:84:df:c1:69:52:4e:65:
         f3:71:94:a5:8d:98:4d:9e:a0:21:7a:55:a0:30:21:ba:cb:55:
         ad:d7:c6:74:4b:98:32:eb:90:05:aa:cf:04:a1:9a:15:3a:68:
         49:58:26:1d:10:f6:fa:d8:26:f0:ac:ab:4f:bb:d3:4d:48:d9:
         e3:dc:cb:f5:8f:ed:e6:fc:44:a3:60:67:92:4b:27:a2:39:b9:
         27:17:06:ba:75:9f:45:4a:2e:12:ec:c4:99:ff:ff:72:3c:d6:
         52:3e:93:2b:4a:0a:cd:15:37:85:89:73:9d:58:cb:6d:c8:99:
         43:e8:bc:f9:19:4c:f0:c5:be:e8:7f:1d:6b:6a:d9:6d:a9:9e:
         6f:00:39:cd:c5:34:d6:bc:74:72:96:ba:d9:3b:b1:29:57:aa:
         6f:12:a5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:40 2026 by rpki-client