Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File:                     FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier:          P1Wozb2VPiIXwlKNhsqOTu6x8GPxxleDbE8J2trlHoI=
Subject key identifier:   91:AC:A0:3D:BE:77:F3:89:10:F6:21:81:18:60:9A:C9:6C:A0:45:FB
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer:       /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial:       019D28166DF9F9FE02399CE436747DB86F1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number:          02B5
Signing time:             Thu 26 Mar 2026 03:00:51 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:51 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:51 +0000
Files and hashes:         1: 9gJCDoefYLTOALLR7m3uY4ZFTrs.roa (hash: rDMT0XfW0LmY8GbUzIJRZiwWfpYyUk7Ld0WUStlDnJo=)
                          2: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: L8bzmdcPV4qO0QgtHD3GiFiyhC0cpRyYWZomGxFDvx4=)
                          3: JudSUCOqbrtWbahpUSi_qKz1NTU.roa (hash: bQyJrY/9C3LHftNvfMRZW3PNS7iigGqzrsnlBjeZ04o=)
                          4: ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa (hash: ey3Sif7k3v1Kz3BRtrxCLM84dh6fPOogRHH2kMK+y6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:6d:f9:f9:fe:02:39:9c:e4:36:74:7d:b8:6f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
        Validity
            Not Before: Mar 26 03:00:51 2026 GMT
            Not After : Mar 27 03:00:51 2026 GMT
        Subject: CN=91aca03dbe77f38910f6218118609ac96ca045fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:18:e1:8c:a5:e2:1e:d8:2a:d3:96:9f:77:
                    d7:df:47:a7:cc:cf:25:a2:93:26:f9:5b:4a:1c:76:
                    bb:d8:19:4c:26:90:f0:bf:ab:fc:15:2b:b6:fa:a1:
                    af:6c:5f:79:87:90:ed:46:09:a4:dc:bf:a6:3f:4a:
                    c3:37:ae:95:81:b0:f7:1e:75:c7:6c:27:1b:e4:69:
                    f8:be:ef:36:05:fa:37:ed:fe:ae:da:5d:64:67:63:
                    f1:9d:a0:78:33:6a:84:67:af:3a:71:2c:68:f7:23:
                    f1:e8:66:04:fc:1c:1c:34:4f:47:6f:61:7e:8c:da:
                    ea:ea:27:66:80:03:1f:2d:a4:cb:ee:e6:65:36:6c:
                    99:29:13:b3:4f:7e:56:e3:6b:80:6b:fd:0b:fc:eb:
                    8b:05:47:4f:a5:6f:e2:a7:66:66:b5:4e:ae:86:52:
                    7a:3b:34:72:8e:34:12:20:7e:6e:00:e0:e9:3d:08:
                    f5:dc:3c:91:ee:06:fd:de:32:19:4b:3c:4d:bb:91:
                    c5:90:f8:86:3f:4b:91:0b:c2:d8:2c:4c:90:07:61:
                    4b:10:5d:7d:09:4e:a5:ba:b9:b8:de:d1:0e:7d:74:
                    a3:73:77:a0:f1:65:a9:81:d4:5e:a3:a3:9f:04:fb:
                    a5:00:09:3b:a5:9f:4b:a1:b8:6a:91:f9:ff:61:48:
                    ec:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AC:A0:3D:BE:77:F3:89:10:F6:21:81:18:60:9A:C9:6C:A0:45:FB
            X509v3 Authority Key Identifier:
                keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:95:48:52:07:96:e0:6c:50:96:ce:32:f6:3a:24:b3:c5:1f:
         39:b4:34:a0:2f:ec:b9:db:8d:03:df:f3:31:11:0c:34:79:d0:
         6e:96:2e:fa:b6:b6:c0:9b:17:58:35:80:9b:d7:b1:26:67:b9:
         be:db:60:d8:ee:a6:ce:0d:f7:8d:c2:4d:25:3a:b7:52:76:8c:
         31:f2:93:db:1d:0a:06:39:58:68:60:23:ed:3e:10:bf:3a:7b:
         21:17:d6:76:5c:88:56:32:ed:b1:03:9e:a6:73:0e:30:c8:6d:
         95:4f:3d:77:ef:94:0b:6e:16:1f:bc:c3:9b:e9:7f:3e:2c:a7:
         06:b6:28:ae:b0:4a:d2:91:70:cd:37:b7:60:6b:e9:a0:1a:c5:
         df:31:9d:52:5f:fb:29:3f:1c:3a:e9:4c:2a:fc:af:31:b5:1b:
         d9:0e:07:ef:da:0e:10:af:15:6e:94:f4:5b:84:c4:f0:5c:17:
         67:ef:f9:35:e2:0e:a0:b6:8d:ac:7b:74:b3:7b:38:47:f1:48:
         b8:7b:9a:a5:f5:2c:c0:57:fa:ed:f4:f9:c6:69:a7:1f:df:76:
         2b:99:7b:1f:74:cc:27:f1:ad:57:0c:4c:ad:0c:4e:5e:ef:4b:
         8c:a6:65:89:ec:13:f0:d8:8d:4e:96:51:e4:a2:e5:90:5c:af:
         83:f5:3f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:56:38 2026 by rpki-client