Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
File:                     FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft (raw, json)
Hash identifier:          Hfy4upp2dj88dC8pwAmq3ozTWmW7XG/+yoPUIOWPlUI=
Subject key identifier:   CD:50:84:BD:7C:0B:68:99:5A:02:8A:28:98:40:3E:20:8E:35:FA:D9
Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3
Certificate issuer:       /CN=173b0d7f0eac665733d92816dd49162d72e221f3
Certificate serial:       019D2DAA4E1FFEEAC7B0BE175FFA43041468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
Manifest number:          188E
Signing time:             Fri 27 Mar 2026 05:00:28 +0000
Manifest this update:     Fri 27 Mar 2026 05:00:28 +0000
Manifest next update:     Sat 28 Mar 2026 05:00:28 +0000
Files and hashes:         1: FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl (hash: aOnNNrjoXY7RJ7BZvzE24s9NciJpngbhUYzkyYScBM4=)
                          2: lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa (hash: njg2lEvNlP78vJZCgNqoI9ZZjFefykyHjoEjFHNtef0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:aa:4e:1f:fe:ea:c7:b0:be:17:5f:fa:43:04:14:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3
        Validity
            Not Before: Mar 27 05:00:28 2026 GMT
            Not After : Mar 28 05:00:28 2026 GMT
        Subject: CN=cd5084bd7c0b68995a028a2898403e208e35fad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:70:c0:af:a0:b8:d3:26:a0:80:13:4b:64:
                    b2:93:e3:a7:13:7e:7b:5a:97:5b:17:9a:d8:1f:0d:
                    2c:56:c2:ac:77:5c:b0:de:32:8a:63:c1:7c:72:1b:
                    2a:b0:38:e9:96:fa:0e:b5:51:c0:6d:5e:40:59:b6:
                    5f:2e:a0:41:86:2d:a5:5e:2c:fe:5c:dd:f9:f7:bb:
                    8a:96:2a:29:02:fb:df:e9:f5:21:bc:69:b6:a8:18:
                    16:7e:c8:bb:d0:a6:40:c3:5b:3f:f9:2e:b3:d9:10:
                    39:7f:5a:80:e3:16:d2:7f:1e:39:aa:6e:28:d0:7c:
                    ce:47:b6:d3:d0:b0:89:a6:2c:d0:c2:77:cc:a8:fa:
                    48:a4:9f:e5:d4:3b:2d:a8:9c:91:21:d1:03:62:b3:
                    b4:45:4e:15:c5:15:67:d7:be:b7:7b:b0:e0:cc:cc:
                    14:5b:0e:53:a7:92:7e:aa:7a:81:b7:83:63:f8:4f:
                    a4:af:f5:13:a2:44:5d:ee:c9:fc:3f:8f:87:f7:b5:
                    9a:dc:37:c5:4a:dc:75:7c:8d:95:61:63:fa:f2:b3:
                    e6:fa:a3:a0:fb:43:f2:06:a1:60:4a:13:7e:4c:61:
                    a2:30:fe:d0:b0:a9:c9:9c:3c:f8:b0:e0:f1:5f:66:
                    b8:b1:ff:a4:f9:a3:40:97:53:ae:d5:66:8b:ec:fc:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:84:BD:7C:0B:68:99:5A:02:8A:28:98:40:3E:20:8E:35:FA:D9
            X509v3 Authority Key Identifier:
                keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:3f:b7:3a:87:4a:28:bf:e4:a9:02:9b:fc:f0:b1:44:6a:
         88:5d:e9:95:a9:c6:cb:cf:fd:c1:77:b1:74:9c:1c:8a:78:fb:
         2f:69:e1:18:58:a4:28:a4:23:c0:92:d6:74:f5:02:49:f4:78:
         41:a3:c3:3d:f4:5f:83:b2:07:e6:4f:72:6b:15:39:d7:61:5b:
         0f:b3:da:66:30:5b:9f:65:26:c7:53:d6:27:a0:fb:d2:76:fc:
         6f:a0:48:68:f3:44:1e:6c:6d:60:3d:66:47:6c:df:07:f8:d0:
         25:f4:5d:c6:3a:35:18:df:2f:d6:2b:97:22:3f:1f:d5:80:81:
         bb:c1:c0:39:21:68:8f:10:20:9b:46:27:0d:cc:3a:55:83:a9:
         05:df:58:e0:e8:11:06:df:4b:a9:c1:e6:be:00:30:47:55:8d:
         04:e5:8e:b9:fd:58:22:3b:4f:df:ce:6f:6d:46:46:ee:2c:93:
         a7:6a:08:ee:c1:13:cd:d5:65:9c:c9:e6:2b:74:de:f8:63:f8:
         99:19:6b:d4:98:e5:de:51:38:49:8c:ae:21:8c:49:a5:f4:10:
         1c:5f:13:09:dd:eb:23:23:53:0d:d6:cd:74:7c:30:f8:7e:03:
         6b:34:85:9d:a7:df:ac:ed:6a:57:4f:43:1b:55:6e:c2:dd:93:
         5c:5f:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:30:19 2026 by rpki-client