Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File:                     Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier:          8qBSqcnd1D7zVwnUJQ3TY/6icsbJmgzxIIexLQzHCiU=
Subject key identifier:   97:45:84:3C:24:13:CC:54:AF:03:92:58:B0:95:8A:ED:25:AB:E6:D8
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer:       /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial:       019D3865D50436D59E360A3DF475A0FA5FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number:          188D
Signing time:             Sun 29 Mar 2026 07:01:30 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:30 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:30 +0000
Files and hashes:         1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: iaG8rYQc30cHJWvmEmgGpht3N/EJQ0oaNV6/NepSV/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:d5:04:36:d5:9e:36:0a:3d:f4:75:a0:fa:5f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
        Validity
            Not Before: Mar 29 07:01:30 2026 GMT
            Not After : Mar 30 07:01:30 2026 GMT
        Subject: CN=9745843c2413cc54af039258b0958aed25abe6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a4:5d:45:6a:21:15:6e:5e:a6:91:58:a2:23:
                    fa:39:75:95:7e:2c:24:28:81:9d:5e:62:32:c8:29:
                    e9:23:10:67:79:6e:d0:e7:74:21:55:af:69:89:b7:
                    78:28:ac:3f:02:7b:11:dd:97:09:6d:fd:db:05:1e:
                    7d:4d:27:20:6f:8c:b6:ef:c4:c0:5e:eb:74:e6:4b:
                    27:86:e6:56:59:bc:b4:ea:b0:cb:e8:a3:b5:31:fe:
                    8e:f2:b2:32:d0:b4:2a:7c:a7:17:27:97:e0:de:85:
                    ce:e4:91:c3:4b:e6:fa:70:23:0c:ab:f1:40:5f:6c:
                    21:0b:5f:e7:6e:4d:50:e3:11:4c:ef:d8:78:49:2a:
                    7d:fb:0d:01:4e:9b:90:50:95:48:3b:14:30:1e:ac:
                    94:c6:b8:be:6e:9b:8a:49:a3:f1:ed:d2:11:1b:ad:
                    86:12:72:c4:5f:b4:b4:24:d8:99:f7:8a:48:47:8a:
                    03:eb:fc:ae:3b:a1:19:76:b6:2b:08:a0:e5:3d:db:
                    85:3a:8e:97:85:3e:8e:de:59:9c:20:2f:9b:23:6e:
                    77:8c:df:8d:ae:85:03:33:77:4b:8c:b3:bd:d6:40:
                    d6:61:a0:24:62:98:c8:47:e6:d6:6e:dd:35:f8:d8:
                    f8:42:8b:97:39:52:90:47:d5:03:55:89:88:5f:c1:
                    2b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:45:84:3C:24:13:CC:54:AF:03:92:58:B0:95:8A:ED:25:AB:E6:D8
            X509v3 Authority Key Identifier:
                keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:62:52:bd:2a:cb:76:82:11:58:9a:bb:99:70:2f:e4:fd:f1:
         74:ad:1e:f3:39:5c:a5:c9:78:d8:07:43:39:70:7b:84:1f:76:
         48:de:e0:bd:37:58:50:73:93:9c:b6:f5:b5:6f:43:b8:8f:06:
         9d:16:8c:e3:43:b3:24:2a:11:fa:a5:b4:95:42:c6:c3:8a:a5:
         95:07:ed:44:6c:a4:38:91:09:f6:75:23:21:42:8b:9b:a6:99:
         af:3b:ce:60:34:2a:26:e9:f4:3e:8d:46:35:32:12:70:06:fc:
         25:2d:e1:d2:4b:37:f1:15:74:8b:e6:f1:67:5e:7b:a7:c7:8f:
         eb:62:9e:79:94:c2:ab:f3:2d:11:9d:6f:ed:95:0b:25:bb:b4:
         ef:da:8f:a2:30:13:28:9d:79:9b:e1:ea:74:d5:04:2e:73:1a:
         89:29:3d:18:b7:a9:3f:71:cd:76:da:36:7b:5b:48:de:e5:44:
         8f:c3:d5:73:b5:47:59:8b:f3:dd:94:39:8b:c9:65:a2:10:9f:
         b4:5c:1f:12:77:de:f0:52:3d:67:31:b0:79:e5:18:c0:f0:cb:
         d2:6e:4c:dc:2f:86:88:95:70:d4:19:91:98:20:a9:60:e5:98:
         ab:18:8b:8d:04:3d:eb:f8:1d:55:95:83:fb:63:ae:9e:86:99:
         b8:4f:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client