Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
File:                     fzdyg9fCNak9x70rgxeydI8oX_c.mft (raw, json)
Hash identifier:          sRSCzh2xxJIiCmpT9412bsqtyYVy/SO+et7UHRC2k2Y=
Subject key identifier:   20:62:4E:18:E1:A1:B4:7C:3F:0A:72:96:CB:EC:2E:ED:41:80:89:D5
Authority key identifier: 7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7
Certificate issuer:       /CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
Certificate serial:       019D2928EE9BA0130016847B8020B48C1BCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
Manifest number:          0178
Signing time:             Thu 26 Mar 2026 08:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:41 +0000
Files and hashes:         1: fzdyg9fCNak9x70rgxeydI8oX_c.crl (hash: 8KNAPWnTldBcmb4d3+aA1Wdm+eQ1wen9yy4IGy2VsfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:ee:9b:a0:13:00:16:84:7b:80:20:b4:8c:1b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f377283d7c235a93dc7bd2b8317b2748f285ff7
        Validity
            Not Before: Mar 26 08:00:41 2026 GMT
            Not After : Mar 27 08:00:41 2026 GMT
        Subject: CN=20624e18e1a1b47c3f0a7296cbec2eed418089d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:f5:e5:4b:cd:1a:72:20:2b:5a:c8:38:54:
                    30:8c:f1:95:3a:26:20:6e:9a:9e:9e:31:c6:d6:43:
                    96:14:f2:32:30:48:15:30:e3:71:aa:c6:c8:84:26:
                    9f:81:99:99:d7:4e:f2:e5:9f:3e:af:0b:5e:64:18:
                    c7:b7:bb:d0:ba:b7:dd:b6:b9:7e:bb:45:55:65:b0:
                    d1:7a:d5:cb:b6:41:38:6c:cf:af:a9:46:69:1f:5b:
                    63:b1:59:93:8b:10:a9:6d:42:1c:3c:c7:26:e1:33:
                    f9:9c:48:5b:68:50:c5:43:50:47:82:3a:30:4e:45:
                    3d:6c:fd:dc:c3:da:9c:f8:34:4b:5e:ca:66:da:94:
                    09:98:2c:5e:08:1f:8b:72:53:b1:8c:bb:b3:c8:73:
                    53:6f:63:71:56:9a:e4:f9:c1:28:fc:0b:9b:98:02:
                    32:29:24:30:4a:66:dc:14:bd:c2:12:f3:08:dc:a7:
                    ed:80:53:31:c2:49:6b:16:99:60:09:c3:f1:b4:b7:
                    30:f7:cb:9c:b7:59:5e:e7:73:82:96:06:50:4b:00:
                    f1:f3:f4:70:4a:09:84:33:36:67:9b:6b:96:f5:ce:
                    fb:5e:d9:35:66:01:42:ac:4a:e0:af:73:29:fc:b4:
                    7a:cc:03:fc:04:3c:46:16:e8:e3:dd:e1:13:c5:7f:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:62:4E:18:E1:A1:B4:7C:3F:0A:72:96:CB:EC:2E:ED:41:80:89:D5
            X509v3 Authority Key Identifier:
                keyid:7F:37:72:83:D7:C2:35:A9:3D:C7:BD:2B:83:17:B2:74:8F:28:5F:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fzdyg9fCNak9x70rgxeydI8oX_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0fadfc-f49b-43e8-b621-831e2944f8fa/1/fzdyg9fCNak9x70rgxeydI8oX_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:74:cb:b5:21:30:31:93:94:c2:19:ef:bb:3e:03:2b:48:2d:
         b1:cb:6f:46:a8:84:f2:ea:dc:79:08:fa:a6:99:08:4d:1f:ac:
         58:93:50:10:14:19:6a:81:71:bd:af:3f:19:b2:1d:5f:f1:fe:
         0d:72:f5:8d:ab:39:40:a7:49:5a:cc:92:86:33:f2:8f:11:2e:
         54:fa:71:1a:0e:18:3d:67:d5:45:8e:2a:b8:f3:b5:7a:fe:a9:
         c9:ca:97:8d:a5:07:8d:f7:b0:85:56:b1:9e:78:c2:05:5f:48:
         a0:9b:0b:d6:f3:20:e9:f0:00:2a:c1:15:3d:34:4d:66:ad:e5:
         92:5e:e9:9c:11:be:ed:5e:78:17:98:d1:64:3a:46:6c:03:b3:
         f3:13:a8:05:9f:c4:b1:1a:80:5d:91:69:db:51:f6:fe:d5:19:
         79:b2:f4:02:42:e1:13:bc:66:54:04:f6:e1:f2:85:94:58:ac:
         9c:12:53:70:9a:1b:b9:57:26:a9:7a:c4:04:de:94:24:8d:cd:
         f8:d9:2f:48:79:be:65:85:be:04:98:a7:e2:c9:7e:22:85:ef:
         8b:39:71:da:ce:fa:f6:15:97:8b:e7:65:8b:17:80:ed:b7:b5:
         4f:d3:2f:0f:9e:13:6f:4b:4a:97:0b:b4:24:98:89:a1:13:b6:
         8c:0e:39:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:43:22 2026 by rpki-client