Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File:                     Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier:          JgL9Vx3yJZ4FKZqBsT2wVOjgZb43lNALhk9lGvwpF5g=
Subject key identifier:   B7:39:62:4C:78:D4:45:C2:7D:F0:BB:06:E2:A6:62:FC:38:E3:43:7D
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer:       /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial:       019D284DE6B2CA3013A19BC3EA956007A954
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number:          166D
Signing time:             Thu 26 Mar 2026 04:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:27 +0000
Files and hashes:         1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: 2DAVnZuZSZG4iZXWROzO0x2tYTappTdfRYjGcx1cebk=)
                          2: b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa (hash: GBEZ8Y0pqF1M+xMOeRWL/nxMJhb8iYsyNvr/SwhBu1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 04:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:e6:b2:ca:30:13:a1:9b:c3:ea:95:60:07:a9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
        Validity
            Not Before: Mar 26 04:01:27 2026 GMT
            Not After : Mar 27 04:01:27 2026 GMT
        Subject: CN=b739624c78d445c27df0bb06e2a662fc38e3437d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:57:ed:23:70:00:97:0c:71:db:89:0c:38:87:
                    c2:0d:cd:05:e1:79:bc:9d:52:29:5b:a7:dd:d8:96:
                    63:1e:af:02:85:ab:f2:32:c2:cd:ee:d0:96:cf:c0:
                    b0:96:06:0b:6b:1c:26:0e:83:dc:cb:a8:1f:36:4e:
                    54:34:7a:cd:a6:d4:e4:bf:11:c0:0b:de:c5:b0:6e:
                    2e:72:a1:51:89:98:df:70:2b:29:20:53:7b:84:92:
                    13:51:c7:5b:9f:64:2a:a8:38:7e:ca:d5:b5:aa:9f:
                    1e:60:3d:1f:e7:c1:2a:62:99:bd:46:a0:8a:2d:5b:
                    3d:d4:82:88:88:c9:5f:e9:73:a6:89:d1:83:9b:a0:
                    55:05:b9:e7:c2:07:a0:8c:10:53:0b:fc:2b:dd:c9:
                    88:03:c6:f5:8e:aa:ef:2e:9b:d3:1e:ab:bf:82:db:
                    00:0c:e3:02:dd:ba:ff:15:f8:1a:a3:ba:ea:9a:8e:
                    69:37:16:92:b6:0d:ad:1c:89:c4:20:85:90:b6:f9:
                    95:b3:b6:19:1c:30:1c:f8:96:2b:3e:5d:2d:d7:8d:
                    d8:f7:ad:01:7a:3c:88:25:01:dd:0f:fd:d9:25:dc:
                    87:6a:16:4c:3b:bf:1d:20:5d:0d:79:1b:9f:eb:82:
                    22:ec:01:1a:f0:45:41:12:84:47:6c:3a:af:37:cb:
                    07:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:62:4C:78:D4:45:C2:7D:F0:BB:06:E2:A6:62:FC:38:E3:43:7D
            X509v3 Authority Key Identifier:
                keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:18:4f:89:a1:b8:d6:f1:09:ac:30:a5:9d:a9:c3:53:a5:12:
         92:4a:cf:b5:19:7a:cb:3a:bd:ad:e8:45:67:42:1b:05:95:07:
         18:5d:48:e7:1c:97:17:8a:dd:b3:1d:16:c3:a3:0d:fa:37:4a:
         7b:84:29:98:38:26:f0:93:cb:ad:64:5a:32:41:33:88:5e:73:
         d7:e9:db:ef:e9:fa:2d:3a:ea:d1:eb:cd:49:03:d7:8d:a3:9d:
         f4:1f:62:5b:43:8f:93:0b:6f:f2:45:c7:79:7b:cf:32:5a:9f:
         7b:1a:29:3a:3f:01:7f:c0:aa:e3:5a:9b:ef:52:f2:8e:05:be:
         35:96:0b:4a:e6:bd:e5:1e:8f:f2:d9:78:a1:1b:fb:53:76:80:
         6d:d9:b0:d0:87:44:17:f6:c6:a2:e6:a5:5c:b4:6a:5d:89:7d:
         4a:2e:37:25:f1:7d:5b:c3:28:99:17:b5:3e:a6:63:02:9d:40:
         2b:84:8a:f5:aa:b6:c2:aa:98:17:15:fd:7e:0c:1d:89:2e:13:
         3f:ec:e5:2c:8a:8c:73:a9:af:19:d7:ce:bb:30:b1:f3:07:09:
         fd:97:e2:98:b2:f1:93:c5:6b:54:d4:d4:22:1d:fb:ee:29:bd:
         fa:06:87:66:49:d0:55:85:f0:3d:0c:17:97:8a:8f:e9:c1:7e:
         5e:ee:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:50:17 2026 by rpki-client