Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
File:                     FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft (raw, json)
Hash identifier:          AQYtMmn2CJDgijmBs08NMxdgqJ8bYjq/5OBBk8CqVeA=
Subject key identifier:   F8:86:7C:BF:FA:D6:00:AF:C8:E0:34:ED:79:46:FB:58:2A:88:62:98
Authority key identifier: 17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E
Certificate issuer:       /CN=17096a033650c8830fd56b3fe5ffd49a174d322e
Certificate serial:       019D27A8E9497A45B97DC981D5AAFE9E47BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
Manifest number:          AC
Signing time:             Thu 26 Mar 2026 01:01:14 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:14 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:14 +0000
Files and hashes:         1: FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl (hash: mV8co9b8HmgCFs72ReteUggYohKTXpSIymfBEi4FtAI=)
                          2: nNBvu_nSPGHqA9h_MtyLsSN73UY.roa (hash: +QJ1/VDdtyvkWD7pbywb3gX3mlPQz4+BuVYL+Ebcgb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:e9:49:7a:45:b9:7d:c9:81:d5:aa:fe:9e:47:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17096a033650c8830fd56b3fe5ffd49a174d322e
        Validity
            Not Before: Mar 26 01:01:14 2026 GMT
            Not After : Mar 27 01:01:14 2026 GMT
        Subject: CN=f8867cbffad600afc8e034ed7946fb582a886298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:97:b0:a3:71:e6:39:c1:99:88:90:86:18:
                    10:3c:c3:45:29:aa:94:e2:32:0a:06:3a:f7:77:c9:
                    68:14:2f:bf:ad:d0:9d:0d:6d:85:8c:39:3d:37:16:
                    33:bd:d2:c2:de:e9:d2:94:fc:8e:bd:6c:20:71:e1:
                    c2:e3:74:6b:2e:bd:a1:d5:af:3d:44:b6:33:1e:7d:
                    cc:06:f7:4b:c8:b4:75:97:41:bc:0f:cf:27:dc:1d:
                    34:ec:c8:9b:94:3d:51:72:44:d0:19:fc:e6:db:cf:
                    61:a3:5b:a9:11:84:44:ce:bc:76:46:69:7a:66:fd:
                    b1:39:f5:db:69:45:a4:b1:d5:61:e7:b5:66:1d:0d:
                    ec:26:87:df:30:86:b1:79:83:d5:1c:48:af:d6:cd:
                    d0:a2:e2:96:31:4a:f3:d5:0e:6d:32:67:55:8f:46:
                    81:9c:c6:2c:a7:a4:d0:5a:21:cf:7a:a2:c5:a8:be:
                    71:c6:33:18:9f:ec:3b:e3:e3:78:26:a2:a6:30:3f:
                    11:79:16:36:57:11:34:6c:e8:d2:c4:e6:34:08:6d:
                    c2:0e:bf:bc:4a:21:a4:0f:ba:c6:1c:dd:b1:76:68:
                    f0:2f:49:94:b0:a3:88:a6:4a:5f:63:0d:ef:58:51:
                    38:54:02:fb:5f:a3:f8:de:d5:2e:d3:04:cc:a7:48:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:86:7C:BF:FA:D6:00:AF:C8:E0:34:ED:79:46:FB:58:2A:88:62:98
            X509v3 Authority Key Identifier:
                keyid:17:09:6A:03:36:50:C8:83:0F:D5:6B:3F:E5:FF:D4:9A:17:4D:32:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e388dd-c74d-42f0-83fb-2e84f1dfdc62/1/FwlqAzZQyIMP1Ws_5f_UmhdNMi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:37:13:2b:b2:a6:14:79:e7:02:4c:6a:6b:42:00:da:20:
         55:f0:39:02:ac:0d:33:b0:93:31:cd:37:ed:87:35:94:0a:ff:
         b4:e0:e9:92:bd:19:f3:76:01:c4:c0:dd:99:1f:60:90:86:15:
         9e:ea:6b:ef:34:0c:4a:2c:15:29:52:d2:86:09:42:67:e1:6c:
         97:00:47:58:83:c6:af:68:9a:32:a7:19:c5:40:dd:8d:3c:d1:
         77:c8:e6:5d:d5:db:a8:78:bc:6e:04:6e:31:39:13:6c:eb:2c:
         2d:62:b6:c3:ae:82:68:39:39:b1:59:85:2f:9a:a7:ee:69:0d:
         32:48:00:eb:ab:9f:38:f3:af:fc:a0:95:38:0f:37:32:0e:93:
         c6:ce:05:09:f5:00:76:fe:9f:85:5b:93:7b:06:13:1a:f5:e1:
         6c:55:51:07:25:ab:91:a8:f0:a7:04:55:96:ae:62:18:fe:72:
         e4:a6:47:61:cc:d6:93:e7:2d:22:df:75:63:ed:b2:b4:9d:91:
         28:6e:cd:43:25:90:69:ce:34:34:be:1e:4d:c4:5b:dc:4f:47:
         36:67:49:36:1e:92:f5:bd:05:65:6a:91:65:7e:6d:a6:93:08:
         8a:7e:da:79:06:3c:29:90:68:04:5b:3e:d7:53:f6:e6:ce:55:
         a2:71:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:58:22 2026 by rpki-client