Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          iqFk/xvsmYGzqSrUm8pRjDDyaS1rNc73JdR7bfJgfxk=
Subject key identifier:   2E:4F:46:AD:3E:E6:BB:89:4A:68:CC:95:93:96:22:89:8F:9A:08:4A
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019D2928FC38D94C610703010242E821BD04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          181A
Signing time:             Thu 26 Mar 2026 08:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 08:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 08:00:44 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: 41WJR8PyUI8l3oE0ygwH8qsZU2Re4O8JqRWOtilfLak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:28:fc:38:d9:4c:61:07:03:01:02:42:e8:21:bd:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Mar 26 08:00:44 2026 GMT
            Not After : Mar 27 08:00:44 2026 GMT
        Subject: CN=2e4f46ad3ee6bb894a68cc95939622898f9a084a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:83:24:77:7c:ed:0d:b7:28:0a:db:00:94:
                    f5:9d:bd:35:ee:a3:21:c7:fc:f8:78:fb:d4:80:c4:
                    a4:fa:1b:c6:21:5e:46:ae:12:78:bc:8d:dd:f0:7c:
                    8d:3a:79:aa:53:36:5c:88:74:84:f2:2e:d3:c7:37:
                    34:93:a3:d5:16:2f:02:07:6c:f5:e9:5e:3c:29:4d:
                    d8:09:b5:32:a8:88:36:ca:04:c1:b4:db:95:83:b2:
                    da:c4:a8:de:43:4f:31:9a:8d:8f:1f:07:da:f1:40:
                    1e:bd:74:59:f8:a8:c9:0f:28:b2:90:e2:be:cf:16:
                    57:a6:de:7b:16:b9:71:14:6f:c1:9b:03:67:7e:f8:
                    69:c7:06:0b:9f:73:ec:af:36:43:61:6f:00:9a:0f:
                    d8:f7:01:6f:21:e2:07:4d:2f:17:6a:17:3f:9b:9e:
                    28:c8:86:ba:ca:de:27:1b:37:02:14:fc:24:92:04:
                    36:c4:3a:32:6e:61:42:48:71:ed:89:7a:72:8d:25:
                    dc:c8:a0:b8:00:f3:9d:21:1c:cd:b1:7a:44:20:92:
                    69:75:52:4b:5a:ba:3b:d0:65:e9:90:8c:9e:11:83:
                    3a:fb:de:8d:a8:b1:02:4f:27:7e:bd:98:2b:46:d4:
                    2f:70:4f:d9:76:88:c3:0b:9a:30:b9:11:0f:8e:df:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4F:46:AD:3E:E6:BB:89:4A:68:CC:95:93:96:22:89:8F:9A:08:4A
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:a1:4a:94:aa:06:66:d2:1f:f7:19:7c:dd:b1:37:6a:96:
         8d:75:30:28:31:5b:a7:89:41:c7:42:7e:d9:38:ef:ed:72:31:
         0c:dd:6a:47:00:13:d3:1d:8c:0e:cb:7c:35:61:2e:f7:58:2a:
         12:fb:d5:38:4e:1f:10:8d:4e:fc:ed:e9:bb:01:b5:24:cb:1b:
         16:52:ce:01:ac:b5:c6:f6:66:d9:da:99:17:69:62:5e:0a:5f:
         2e:2b:79:10:9c:f7:42:07:1b:f8:66:ba:be:c7:b1:63:d6:4d:
         fd:b1:99:31:d7:07:ab:59:68:5f:e8:12:3f:20:ab:44:5c:eb:
         ba:86:f3:7d:e8:85:77:1a:fc:5e:1e:19:c3:48:e6:b9:04:36:
         4a:3a:4e:03:b9:f7:9b:13:8b:53:db:78:68:db:f6:87:cf:a9:
         b5:ce:bf:f7:13:36:aa:69:f9:1a:6e:72:a6:bd:c1:eb:84:9d:
         69:b1:aa:4b:1b:a4:f8:cf:97:e8:8a:f1:ed:9d:8b:3d:34:97:
         a0:73:8f:f4:db:c5:a1:61:f7:ae:ee:34:95:d2:3c:7d:ad:36:
         e9:b9:0e:ee:31:52:15:01:a9:10:b6:f4:ea:46:b0:39:cb:3b:
         54:1f:56:43:79:a1:88:0a:ea:54:f2:92:5f:c8:40:0d:d5:fc:
         49:3e:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:09:00 2026 by rpki-client