Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          5O8Pa4zxS0pFi36wmL26N0Lunry5VRhKA9ed/lPUoXI=
Subject key identifier:   FB:D8:6C:CC:F7:B0:C4:BE:AE:C7:FA:6A:BC:F0:83:25:C4:46:5E:E2
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       019D394126A8CC90A1C4223F94B537618B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          0F50
Signing time:             Sun 29 Mar 2026 11:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:04 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: bAxU3YJZI9qOvofqjQHsoN26cNU7BErIxKf3KXKCXb0=)
                          2: l9fKwFyrFQX0Hu9a5zckE9kVhmM.roa (hash: iDegQAjVriQALUYA5V4FoFzaFt+77MbzNuGJvgXPxkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 11:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:26:a8:cc:90:a1:c4:22:3f:94:b5:37:61:8b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Mar 29 11:01:04 2026 GMT
            Not After : Mar 30 11:01:04 2026 GMT
        Subject: CN=fbd86cccf7b0c4beaec7fa6abcf08325c4465ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:66:70:75:3d:e1:6e:62:0b:3c:df:7a:3a:
                    6e:91:2e:26:30:d2:93:19:a6:63:f6:b8:58:d9:fb:
                    0e:ae:3f:06:2b:ef:d0:71:f0:50:ac:ca:8f:ce:de:
                    61:9f:cb:f0:2a:29:77:71:d8:7c:af:1d:c8:84:6a:
                    87:e0:8a:10:c0:8c:b1:9c:59:85:41:8d:2b:0d:dc:
                    4c:2b:3e:89:ea:a5:d1:93:29:f8:4e:af:4f:1b:dc:
                    52:8a:06:db:6c:4a:7c:42:6d:ab:d7:27:1e:a8:57:
                    71:cd:25:b8:a8:0d:a6:a3:a1:6c:72:e2:e4:8a:eb:
                    52:34:85:56:d9:b2:27:28:9f:75:c2:55:fa:21:43:
                    fa:ce:27:fa:3b:1c:8b:0f:17:cf:8e:80:4e:24:a9:
                    f5:78:cb:85:f6:fa:a3:52:a2:75:4c:f3:93:fa:9f:
                    8c:6e:99:42:0a:0d:fa:29:e3:ae:15:44:8e:9b:bc:
                    12:de:e8:44:79:fc:10:df:0c:71:74:4c:df:5a:20:
                    4f:5f:ee:de:ba:8f:ce:d2:94:f0:fe:e0:26:3a:28:
                    27:5e:ed:5d:c9:91:db:1a:f5:02:52:31:bc:86:d0:
                    49:42:8b:f7:6a:7a:2d:35:82:eb:8d:88:5b:43:e0:
                    d5:4d:ba:c2:80:a2:f4:a7:2b:6a:91:15:ab:44:f3:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:6C:CC:F7:B0:C4:BE:AE:C7:FA:6A:BC:F0:83:25:C4:46:5E:E2
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7d:26:c1:80:45:34:d4:8d:8e:72:8c:cb:1f:90:a6:f8:fa:
         db:1e:7c:95:b9:f2:0a:b6:ba:15:ca:ef:c8:b8:0b:5c:66:e8:
         c3:79:99:cf:02:24:81:ba:94:2c:ed:65:ea:cf:08:eb:19:3d:
         2d:8a:b4:1b:4c:df:4f:18:81:03:84:b2:21:00:bf:32:07:a2:
         11:77:a7:09:9b:2e:de:5d:4a:b1:6c:1b:76:db:c1:1e:45:6b:
         52:92:a6:7c:71:8c:bd:eb:c5:cf:ff:45:ab:99:50:af:1e:2e:
         05:ab:f4:cd:8c:45:bb:ed:39:15:0c:94:d1:9a:7b:77:19:ab:
         59:35:db:5b:27:5b:95:e6:62:93:55:71:56:f2:3f:56:00:40:
         7d:69:6a:51:f1:ad:dc:67:32:2d:7b:90:2c:c5:9e:f4:e9:0e:
         78:0a:9a:52:00:5f:e1:53:51:e3:68:75:cc:ab:ce:02:0a:2b:
         f3:2c:c2:a7:18:3c:93:95:b8:d1:e7:ba:8b:b4:ff:89:f0:9e:
         9f:c0:68:b2:1a:5b:b9:77:89:e6:2b:c6:57:61:2f:52:4d:95:
         4e:8c:8f:fe:3d:10:ae:54:45:d6:1f:78:74:a3:71:c2:20:94:
         9c:cd:2a:c3:5a:39:57:3c:11:e5:82:36:a2:80:43:bd:bc:c0:
         04:99:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:58 2026 by rpki-client