Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          btHnMF0nE8IzjumZVOGXGoAh2lqYC8NbltyM7SLw0y0=
Subject key identifier:   DA:DD:8B:F7:4D:8D:32:C0:F0:B5:23:6B:58:F5:A5:52:13:3E:44:87
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019D38656C22F04D73B57AE738392C9FD6BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          0A5D
Signing time:             Sun 29 Mar 2026 07:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 07:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 07:01:03 +0000
Files and hashes:         1: 1Z4EQZv8pw305qtI7QN_PKdHZJE.roa (hash: xOHVIxkvcYwrKOFM5nVGP5q212Wgzb4Q6U3ZxUHbKh0=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: GjkJB/Toyf7s8pJgyVObb36lYu00R6pcdp+Qy3FpmS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:65:6c:22:f0:4d:73:b5:7a:e7:38:39:2c:9f:d6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Mar 29 07:01:03 2026 GMT
            Not After : Mar 30 07:01:03 2026 GMT
        Subject: CN=dadd8bf74d8d32c0f0b5236b58f5a552133e4487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:23:fb:8e:f1:3d:be:11:f4:f9:83:c6:e7:fa:
                    f5:da:f3:05:ae:c0:da:75:30:9e:6d:7b:de:a5:73:
                    ea:16:02:2c:24:30:94:e2:41:84:b1:98:6a:60:ee:
                    63:8c:5a:51:cd:4a:1b:dd:20:6d:fb:31:03:ad:46:
                    c5:fd:dc:f1:40:14:ed:00:92:a7:1c:cf:b5:3e:22:
                    22:47:c2:36:4b:a3:60:f6:fa:1a:af:82:84:e7:df:
                    bc:4c:df:5b:a3:31:d4:70:b7:41:20:07:b7:62:b3:
                    7c:d8:ed:98:cd:53:a6:29:dd:60:96:e1:3e:fd:a6:
                    68:fa:a1:60:f9:e8:44:69:27:54:69:c1:0c:32:e0:
                    be:a6:7a:87:45:b4:0b:1b:f4:9a:ef:33:c9:1f:91:
                    f7:98:f1:aa:ac:d0:8f:72:35:ea:b9:52:2f:b9:a7:
                    09:3a:fa:dc:5d:b5:2d:f9:b3:94:8b:d2:eb:4e:c9:
                    79:c6:71:c9:f9:3c:46:4e:1b:3b:15:fb:e8:2c:2a:
                    f6:36:03:08:28:a9:08:0c:3d:b3:ca:32:c6:bd:d2:
                    0c:71:b1:5c:41:f6:c3:73:ff:0a:4c:c4:64:cb:d3:
                    d2:1d:2e:cf:76:fc:30:95:1b:98:1c:08:d1:f5:e5:
                    15:2d:5a:ae:7d:da:43:b8:e1:c0:e3:0c:7c:ac:72:
                    9b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:DD:8B:F7:4D:8D:32:C0:F0:B5:23:6B:58:F5:A5:52:13:3E:44:87
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:bc:2e:3c:71:2d:9d:b4:a3:28:5b:e0:d4:a4:84:dc:f7:
         2c:62:d4:ce:1a:dc:ec:58:9d:68:01:d5:a7:a9:cc:8a:f2:81:
         39:01:7d:c4:63:77:2d:36:b0:84:95:de:95:99:2d:ef:38:9a:
         83:5f:3e:62:34:73:29:6d:77:00:76:87:ae:89:c5:b0:03:39:
         7d:38:87:e2:6a:84:24:5d:2b:5d:78:a4:56:fd:ef:83:04:50:
         55:7a:4e:82:89:2b:86:33:eb:e2:d1:7b:b5:b1:fb:34:2c:e0:
         cb:1c:63:17:9f:34:f6:e0:40:55:72:d6:aa:1e:c8:da:be:21:
         cd:70:a6:7e:85:88:64:29:16:0e:20:e8:40:f5:a9:b5:0a:b4:
         fb:11:c3:e7:33:56:e0:eb:5a:47:5a:f6:bc:cb:08:78:04:c5:
         d0:b4:40:7e:a0:5f:c4:65:d5:e9:d7:42:b5:c5:ba:b8:70:3b:
         70:f3:33:49:2d:1b:6f:73:dc:b7:8c:b5:63:2e:f0:bf:e1:a0:
         54:b2:09:99:82:da:7d:b0:de:6c:1e:61:98:63:9d:0c:d7:06:
         66:e3:8c:b5:42:51:2b:e3:5e:40:fa:0a:fd:df:e3:95:d9:a0:
         d5:8f:42:86:e2:e6:0d:b6:c7:05:63:e8:1f:4e:76:31:e0:40:
         64:ef:54:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:32 2026 by rpki-client