Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
File:                     F3m5XYpY_MpqgS53fn72lFP4rJg.mft (raw, json)
Hash identifier:          4+buLdt1QRrMW4k8WLs4xlfYSabk2mV+fiLjKShkSto=
Subject key identifier:   A2:12:99:89:03:D0:8D:D3:01:8D:21:06:F0:EF:22:7D:02:05:B1:2D
Authority key identifier: 17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98
Certificate issuer:       /CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
Certificate serial:       019E330611F16361DA138A20D026C70B73B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
Manifest number:          116F
Signing time:             Sat 16 May 2026 23:01:36 +0000
Manifest this update:     Sat 16 May 2026 23:01:36 +0000
Manifest next update:     Sun 17 May 2026 23:01:36 +0000
Files and hashes:         1: 49LVYnP73rA79wdiuJHMdcdFkIQ.roa (hash: WzC9WsaFwOO23usPmJCjxbi0AXme2savY/KQqeCN0+c=)
                          2: F3m5XYpY_MpqgS53fn72lFP4rJg.crl (hash: fRGiBYO6LN/l2WVY9wC6XUZJOf/AOIEhrHA7J4a+vqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:33:06:11:f1:63:61:da:13:8a:20:d0:26:c7:0b:73:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1779b95d8a58fcca6a812e777e7ef69453f8ac98
        Validity
            Not Before: May 16 23:01:36 2026 GMT
            Not After : May 17 23:01:36 2026 GMT
        Subject: CN=a212998903d08dd3018d2106f0ef227d0205b12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:b7:6b:b6:7c:ea:93:85:e3:6e:6b:f4:5e:
                    9c:32:ff:90:ab:9c:59:29:8d:06:a0:a1:bc:50:fe:
                    05:3a:05:3d:b2:3b:19:16:3c:5e:e7:2b:d6:61:64:
                    bf:b0:dd:87:25:e8:f2:b7:2b:61:7e:6e:28:e9:30:
                    8f:1d:24:e7:f2:55:7e:9c:5b:9e:62:86:47:20:06:
                    fd:ec:8a:87:2c:2e:11:82:64:31:fb:52:ca:79:40:
                    eb:20:0a:4f:59:fe:64:0b:e7:c7:c3:6c:91:b8:b4:
                    e6:93:eb:fd:0d:89:69:b6:6c:3c:79:0e:72:15:39:
                    1f:dd:15:9d:c7:30:7b:77:b3:05:b6:4b:12:0a:f6:
                    53:72:cf:4f:dc:88:c2:cd:ed:59:64:14:69:d5:86:
                    d0:57:34:7b:2f:0c:88:04:bd:c3:72:b0:2d:c5:29:
                    56:8c:a7:6d:0c:5b:12:04:bb:86:55:31:48:36:a3:
                    8c:e6:c1:7f:9f:bf:6f:25:af:40:3a:5f:2f:4d:24:
                    89:a2:2f:78:24:c3:fd:96:e4:cc:7d:be:a3:80:9b:
                    dd:a7:c7:ac:18:09:a1:cb:39:26:9e:69:d6:59:00:
                    55:a9:ed:8c:e1:bc:ba:85:a2:cf:c0:b9:f9:16:40:
                    5c:e9:30:5d:79:52:0c:04:dd:e2:35:9d:fb:8b:25:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:99:89:03:D0:8D:D3:01:8D:21:06:F0:EF:22:7D:02:05:B1:2D
            X509v3 Authority Key Identifier:
                keyid:17:79:B9:5D:8A:58:FC:CA:6A:81:2E:77:7E:7E:F6:94:53:F8:AC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3m5XYpY_MpqgS53fn72lFP4rJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b3c065-ed1c-4585-99a6-407e3fe63945/1/F3m5XYpY_MpqgS53fn72lFP4rJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:67:e7:22:d8:08:99:96:03:c3:5e:b1:67:7c:57:a5:b7:87:
         ea:cc:cd:c5:3e:e4:c0:d7:5f:2d:f8:56:33:b7:a5:02:f9:85:
         ab:0f:31:36:84:15:6b:c9:69:6b:65:8d:9c:53:7e:99:22:b6:
         b4:d5:0b:ad:6a:e2:be:d7:fa:c0:cc:96:bf:9e:c6:50:79:50:
         09:35:33:ec:e0:76:1e:00:d6:ba:e6:f1:7c:c5:6d:c1:37:48:
         f6:f7:7f:87:19:77:39:1f:f5:0c:04:e5:36:76:7e:23:db:86:
         65:5d:b0:28:79:e3:46:99:aa:e1:05:57:87:ba:00:80:e9:b3:
         e8:d3:57:c7:5d:ee:fb:2e:e8:77:4a:f6:14:85:d7:cc:b6:ad:
         62:ee:cb:10:a2:02:08:b2:20:6f:fa:d4:76:a3:c6:9b:cc:30:
         db:93:69:0d:75:bf:1e:77:7d:7f:1c:e1:e3:49:bd:ac:f6:68:
         6b:cb:ac:cb:2b:04:fe:f6:e0:6d:06:cc:91:d7:15:3b:1d:d0:
         26:88:21:a6:e0:3a:65:87:d3:80:c1:e3:21:8b:a1:23:74:70:
         16:9e:8c:55:03:2a:0d:61:0e:60:4f:55:3b:7f:72:3a:ce:ef:
         d7:c4:81:d0:c4:ac:c4:e9:73:ad:05:a4:22:67:65:20:38:19:
         e2:a3:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:02:59 2026 by rpki-client