Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File:                     FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier:          MXTV06/xlOlWZyi7ZNMy+NFnO1zPBaXKb4idfGZVtkk=
Subject key identifier:   19:00:1E:C0:0B:68:3E:6E:F3:9F:B5:B5:E0:95:E2:6D:70:9C:2F:39
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer:       /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial:       019D27A8D38DD8BDC084E15CDDB78F6187BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number:          0B92
Signing time:             Thu 26 Mar 2026 01:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:08 +0000
Files and hashes:         1: 20k_piblwEYsVd_YiDJCaz9Ey54.roa (hash: 4RIWua1sQFhhYH4ddyZN8LNm60NZVa4EtH71m0R8zfU=)
                          2: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: Kvm1efRuFx1CUpJtwY8eP6NeNTJfE+d3I8Mye526dEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:d3:8d:d8:bd:c0:84:e1:5c:dd:b7:8f:61:87:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
        Validity
            Not Before: Mar 26 01:01:08 2026 GMT
            Not After : Mar 27 01:01:08 2026 GMT
        Subject: CN=19001ec00b683e6ef39fb5b5e095e26d709c2f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:41:28:44:f0:3c:73:19:8f:8b:0b:4c:f4:
                    8f:7d:2a:9a:08:39:49:3c:09:7c:c7:88:d3:0d:76:
                    b5:8f:b2:2a:32:33:f3:3d:ec:91:57:cb:64:4c:33:
                    45:99:c5:a6:bc:cb:ec:bd:30:d7:44:3d:cb:f3:f2:
                    f1:4c:95:da:fd:d3:e3:eb:d7:b8:3d:06:e8:1c:72:
                    c5:05:e6:60:95:d8:18:d4:41:a9:ff:72:c9:be:16:
                    ab:a2:88:42:ea:65:65:5c:f5:bd:cc:46:30:eb:ae:
                    22:68:a8:00:ba:73:b8:29:f7:1e:e3:57:d5:14:99:
                    c4:3c:66:eb:1d:22:41:72:51:17:cc:b5:fe:4b:38:
                    43:db:7d:69:c2:20:39:50:c3:b6:b6:ef:b8:67:ae:
                    41:26:41:cd:ab:77:ca:ec:5b:21:07:d8:58:ea:9b:
                    b9:6b:80:8c:b4:77:59:e6:cd:3e:8c:a3:6f:dc:a0:
                    95:ef:c5:e0:d1:44:23:bf:b9:9e:30:7a:2a:f9:75:
                    66:77:c2:7f:08:aa:15:81:80:94:34:c7:92:f8:0c:
                    88:35:4b:41:e7:2a:3d:54:56:09:9e:2b:87:a2:47:
                    5d:54:0a:07:ea:da:bc:44:c5:19:eb:2b:03:2b:e2:
                    ca:28:29:55:25:d8:ef:9e:19:62:fd:1e:1e:3c:80:
                    34:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:00:1E:C0:0B:68:3E:6E:F3:9F:B5:B5:E0:95:E2:6D:70:9C:2F:39
            X509v3 Authority Key Identifier:
                keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:95:9f:ef:4a:fe:e9:e5:5f:fd:e4:45:3e:d0:61:7f:c4:
         05:db:ef:51:61:19:b8:0f:8a:ad:75:bd:4f:0c:53:3b:dd:51:
         ef:02:a3:57:bd:5b:d4:70:f4:06:fa:53:bd:f6:88:ba:46:2c:
         8c:c9:32:0f:b6:00:c8:a3:ea:49:80:72:0d:fd:5b:3b:ef:70:
         ce:13:54:4f:60:29:fe:d6:7d:99:c7:e8:46:13:ad:0b:48:bf:
         d9:45:dc:c7:f8:87:17:54:15:f3:11:7a:64:3e:50:9a:5c:36:
         85:df:28:c4:45:cc:d1:4c:79:93:b1:ca:0d:11:b6:bd:d9:3f:
         4d:fb:a1:4a:0c:70:a6:41:c3:88:83:e8:6b:b7:12:b2:dd:74:
         5c:5a:64:26:8f:4e:c5:09:30:24:20:d0:67:48:76:d4:66:61:
         ad:7e:61:17:3a:0e:d5:68:13:97:14:59:9a:85:25:0b:6c:9d:
         e5:37:92:33:8b:d9:67:76:c7:a0:8f:91:7e:3b:56:1f:8c:9c:
         ec:fc:be:b9:ff:1f:d8:33:13:4f:3f:35:ea:64:fa:10:7a:88:
         b1:d5:cd:8a:ca:83:7d:e8:83:38:1a:5d:58:a1:b8:0c:d2:01:
         3c:1c:d5:be:07:d0:2e:5c:d6:ad:e9:2a:cb:f0:18:2a:33:e1:
         62:ff:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:44:59 2026 by rpki-client