Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          EFKJZTkw51WbBa2fhiIIU9dC222MzhidWLPEoR2PDng=
Subject key identifier:   E2:88:00:DD:FA:ED:AD:35:9E:4C:FF:9A:F7:05:BB:87:C3:02:7C:0D
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       019CC07228B21EDD3502B57839CFB1ED7C39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          0FED
Signing time:             Fri 06 Mar 2026 00:00:32 +0000
Manifest this update:     Fri 06 Mar 2026 00:00:32 +0000
Manifest next update:     Sat 07 Mar 2026 00:00:32 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: kzEKX2MMaouF/QBythx/6EO5ZYSo+dJiModHY00x5BE=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Mar 2026 00:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c0:72:28:b2:1e:dd:35:02:b5:78:39:cf:b1:ed:7c:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Mar  6 00:00:32 2026 GMT
            Not After : Mar  7 00:00:32 2026 GMT
        Subject: CN=e28800ddfaedad359e4cff9af705bb87c3027c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:d9:bb:67:17:51:f6:a6:ff:69:de:3a:25:
                    4c:6e:a3:9f:99:6e:3c:08:a7:bb:38:85:29:8c:98:
                    42:fb:a4:02:d1:88:bb:4b:44:05:22:6c:0c:f9:08:
                    77:bc:f3:3b:8d:f7:43:24:ad:fe:81:d6:f9:09:12:
                    64:46:ba:09:fc:79:1f:a8:a0:d1:4d:25:b4:b5:d8:
                    27:4e:87:a7:50:59:4d:2f:66:de:50:19:f6:01:9a:
                    66:d3:99:75:5e:bb:8c:4b:49:53:ae:1d:7c:68:e8:
                    93:9b:7d:37:aa:89:ae:a4:47:bf:0a:89:2f:8e:95:
                    ab:33:82:03:f7:76:5e:57:c3:cf:45:86:7e:73:a2:
                    c2:e2:3d:1a:d0:7f:1f:0c:52:ca:7b:59:65:12:6e:
                    e9:32:d1:92:6c:bd:fb:b5:ce:ae:d6:d1:9b:ad:e1:
                    67:c0:b7:a1:cb:df:dc:ed:9a:59:ff:0b:a9:e8:e1:
                    8d:03:e7:10:46:a8:fa:52:1f:68:29:21:e5:8d:d0:
                    2e:00:97:b1:86:94:8b:0f:69:b3:d3:54:dd:0e:4a:
                    73:ab:5d:2f:f6:de:59:be:6b:17:73:15:0e:73:c3:
                    ec:0e:3a:6a:78:5f:94:af:97:0b:2f:3d:14:ba:b8:
                    87:e9:70:66:6b:41:c5:fc:6b:78:82:82:49:d2:e1:
                    de:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:88:00:DD:FA:ED:AD:35:9E:4C:FF:9A:F7:05:BB:87:C3:02:7C:0D
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e4:10:d0:c7:c4:cc:89:ca:cf:e5:48:37:c4:bf:59:dc:29:
         f8:b6:a8:d7:76:42:df:60:49:14:a5:0e:34:db:f9:00:6e:77:
         f3:25:9b:10:fe:2d:67:e5:08:9a:38:aa:ec:82:23:de:eb:fd:
         8d:54:ad:64:0d:21:fa:37:99:d6:80:40:6a:ad:60:6a:eb:04:
         c8:c4:1d:1d:40:8e:ce:56:e4:c9:4a:2f:09:90:fb:f1:98:37:
         8c:7c:be:39:e0:ce:c2:38:5e:91:94:ef:d6:05:3c:95:e7:55:
         ec:38:a2:59:ef:a3:73:fa:1e:15:3d:82:41:05:cd:6a:b4:b1:
         6f:79:87:97:4e:61:8f:17:66:0b:26:94:7d:14:bc:2f:a9:b2:
         4a:d0:e8:42:d7:a7:10:86:ca:1f:a6:e0:47:cb:bb:54:53:5c:
         0f:3d:00:51:c5:87:4c:bf:ce:e4:9f:a1:fc:70:c3:6d:0a:c0:
         8d:61:24:5f:b2:55:80:6c:25:95:50:10:0c:03:26:ec:1d:0e:
         76:89:81:c4:40:ab:17:2a:94:70:4e:28:db:e4:7d:32:53:cb:
         2f:fb:e2:40:22:62:07:aa:86:f0:8a:6f:e7:6b:18:e3:4c:c6:
         d4:58:12:02:be:6c:4b:e7:16:c3:29:6f:8d:3b:e1:05:39:1f:
         ef:e8:47:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 03:58:37 2026 by rpki-client