Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File:                     FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier:          wGMYIe+3YlHD7igWU6oz4aqwJf1aZEbAQYPjti7FeUo=
Subject key identifier:   7B:DA:5A:F3:5B:AA:A1:A6:1D:D6:4C:F4:2F:29:6B:42:3B:A1:44:EB
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       019D284E2A640D5948A6B9653583B03BCA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number:          0D04
Signing time:             Thu 26 Mar 2026 04:01:44 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:44 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:44 +0000
Files and hashes:         1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: PuXUrtX2uUSSp16NpLbfgrsEs+ODHeZZCgKDNFFSgu0=)
                          2: mpJtsbgETmC7dBt4ggwDy82h6R0.roa (hash: E+0fFewOuAbiSOJJdk0VjGz9UYn9lB3tMo/+quCRNnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:2a:64:0d:59:48:a6:b9:65:35:83:b0:3b:ca:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Mar 26 04:01:44 2026 GMT
            Not After : Mar 27 04:01:44 2026 GMT
        Subject: CN=7bda5af35baaa1a61dd64cf42f296b423ba144eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:2d:2f:07:41:c4:c3:ff:a6:7b:8f:ab:fb:
                    c4:f3:d1:95:3f:04:fa:1e:7b:ca:60:10:c6:a0:5e:
                    26:f7:fd:c1:2a:14:e8:bf:f9:be:2b:23:35:b7:7d:
                    fe:6c:7f:66:80:12:aa:34:94:be:f3:4c:c6:25:9d:
                    d2:b9:80:6c:c7:8d:5b:3b:4d:41:97:0e:d4:fb:a6:
                    24:0c:4e:27:71:6f:98:ca:6f:dd:92:42:9c:87:8f:
                    f5:2a:c1:cc:e3:5a:90:1e:b9:f7:01:ff:58:3c:59:
                    db:87:28:24:ae:47:b6:d4:ce:49:fb:1e:1f:30:11:
                    f2:f3:c6:08:de:36:86:ad:de:d5:71:dc:28:ac:f0:
                    32:ea:0f:b7:d1:bc:0f:54:c1:ed:c5:ec:e4:75:85:
                    b7:da:60:06:30:04:ff:53:89:bb:52:49:ee:46:f7:
                    86:8c:3b:44:7f:48:b4:c8:f8:17:b4:5c:12:29:e2:
                    e8:1e:70:8f:c9:4b:ab:f9:dc:00:8c:51:bb:91:b6:
                    a0:58:60:4f:5c:22:ca:f9:ae:6b:09:d8:f2:ad:fd:
                    b6:34:77:5f:a1:53:c2:d6:05:ad:5d:30:31:2e:2b:
                    24:7b:56:67:59:49:b0:e9:09:7d:b8:ff:89:a1:ad:
                    9f:cc:2d:a7:e5:a0:17:db:c2:f7:da:96:87:fa:42:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DA:5A:F3:5B:AA:A1:A6:1D:D6:4C:F4:2F:29:6B:42:3B:A1:44:EB
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ea:34:6a:37:c6:cf:12:4c:68:4f:49:24:27:fa:77:56:3f:
         aa:13:fa:fe:35:c0:8f:8c:4e:df:8e:e4:e3:57:7c:a7:ce:07:
         69:57:19:42:c3:47:f6:3f:ff:e6:19:38:d8:c6:a0:75:2a:87:
         d7:d1:20:31:e7:31:98:ed:61:bf:27:63:87:b0:51:49:77:d0:
         0f:70:31:25:13:d0:24:c3:bd:4c:61:5d:d7:e9:e4:a6:a4:cc:
         89:55:47:5d:1e:43:eb:d9:1b:bf:93:7c:8f:0f:2c:6b:49:4b:
         e8:dd:40:c1:d9:3f:f2:5f:14:66:0a:3f:f2:3f:96:1a:f8:fc:
         43:5f:50:c7:ed:2a:20:b3:df:6e:be:1f:63:21:b2:9a:97:3d:
         22:ee:32:20:57:98:e3:46:4d:4c:05:a7:94:0a:8b:5e:83:1a:
         79:6a:6e:f3:b7:f3:6d:99:59:4e:e1:77:d9:69:84:db:f1:f9:
         d7:de:cd:11:72:cf:58:9c:a8:2d:f6:53:f8:78:66:a9:e3:6a:
         af:61:15:52:ee:49:32:52:7d:26:ba:d2:cd:05:94:47:9b:7c:
         4b:c5:cd:95:4b:09:81:81:c1:ee:92:b8:55:dc:05:67:57:18:
         48:5e:39:77:28:24:84:1b:4e:11:5a:72:38:9c:bc:aa:f4:d3:
         f8:bd:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:47 2026 by rpki-client