Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
File:                     FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json)
Hash identifier:          uRzrMlB9/KS8SHg0dtJuy0YCrE7PI/+KkxQKJb2Zdz0=
Subject key identifier:   EE:1E:95:AB:AA:14:EB:D8:3F:04:5A:E7:9F:5A:8C:5C:98:3D:7B:CB
Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC
Certificate issuer:       /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
Certificate serial:       019D2DAAAF2257E4D7495B62EEF645F94B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
Manifest number:          1377
Signing time:             Fri 27 Mar 2026 05:00:53 +0000
Manifest this update:     Fri 27 Mar 2026 05:00:53 +0000
Manifest next update:     Sat 28 Mar 2026 05:00:53 +0000
Files and hashes:         1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: UaURopNSLtvrsvQNk5L7fV2SgGO4iPh/uMAlKOZfTiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2d:aa:af:22:57:e4:d7:49:5b:62:ee:f6:45:f9:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec
        Validity
            Not Before: Mar 27 05:00:53 2026 GMT
            Not After : Mar 28 05:00:53 2026 GMT
        Subject: CN=ee1e95abaa14ebd83f045ae79f5a8c5c983d7bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:ac:9d:35:3b:08:39:15:e3:79:87:6e:73:
                    3a:58:ed:10:bb:4b:13:52:34:80:9d:cc:fa:d5:e6:
                    e3:1c:fc:60:a8:d3:3f:de:07:11:4e:e0:96:7c:89:
                    62:c1:81:9e:1f:5b:ad:1e:20:34:85:85:2b:10:78:
                    3f:c6:dc:56:cb:86:4d:df:07:97:a1:20:bd:aa:6e:
                    56:ad:c4:3f:c8:05:93:c6:e8:34:79:17:52:ae:f6:
                    58:bc:47:29:3c:96:0e:4d:df:53:62:38:0e:c8:2e:
                    65:dc:a9:fc:2d:7f:89:ae:9c:89:ef:16:e8:b3:6e:
                    a8:bf:42:67:5d:b2:93:f3:35:98:0b:71:80:66:9c:
                    f2:62:34:83:37:75:0d:13:64:f9:e1:92:13:1a:db:
                    45:f2:f0:8d:c6:8e:c2:71:5c:a7:48:f9:81:d6:63:
                    2f:d0:a2:61:c2:d9:ee:14:71:21:69:e6:5a:59:1a:
                    50:db:a1:e3:4e:c1:58:ec:9d:37:15:e2:73:1a:79:
                    82:ea:de:30:d6:78:ad:d2:7f:a7:3f:6c:ee:c5:c2:
                    d0:d2:ca:56:23:95:86:af:6f:1a:93:39:bc:84:bc:
                    9e:33:71:5d:d5:47:f2:db:08:b7:53:aa:27:cf:61:
                    5c:4b:92:1a:9f:84:61:33:8c:f2:25:a7:43:ab:4c:
                    8c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1E:95:AB:AA:14:EB:D8:3F:04:5A:E7:9F:5A:8C:5C:98:3D:7B:CB
            X509v3 Authority Key Identifier:
                keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:95:c7:a6:75:aa:45:1a:b7:ba:d0:ff:6f:10:c5:92:46:5c:
         4c:46:d0:af:c8:b7:1d:b6:69:99:74:89:4b:ad:44:50:e8:b8:
         14:de:f0:6e:94:73:01:26:df:c8:58:b7:48:cd:ff:3d:1e:62:
         68:40:61:60:e1:76:37:65:f5:50:fb:ba:d2:36:16:e5:d8:80:
         aa:49:3e:df:03:29:e7:90:b8:c3:b9:5d:a5:4f:26:f7:89:69:
         98:ed:36:b2:9f:68:78:d1:9f:9c:8f:42:e2:5c:f8:a3:07:4b:
         f7:50:85:59:c6:95:77:7f:58:47:31:86:4a:cb:0f:3e:05:db:
         93:db:39:6e:02:c0:98:2d:06:d8:70:5b:43:16:45:86:82:00:
         e5:50:ae:9b:e6:c3:05:7e:0c:06:70:92:53:75:0e:b7:d5:3c:
         93:03:ef:54:9b:f9:b9:4e:f9:75:fe:54:f6:a7:40:d3:ed:5d:
         6b:4e:a9:3e:62:c3:71:92:2f:b5:e3:f6:51:e0:23:e7:6e:66:
         1a:01:fd:17:0e:65:a3:fe:c8:f1:74:35:1b:4a:bf:44:21:57:
         06:ed:6c:ed:f7:03:24:1f:f7:92:68:ff:cf:68:1d:98:dc:2b:
         fc:15:72:4f:28:f2:f7:78:08:47:64:cd:45:3e:af:ad:41:66:
         42:66:bc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 08:11:15 2026 by rpki-client