Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.mft
File:                     FSDh4lSgQD0Gg9G-AT2d7DPEubs.mft (raw, json)
Hash identifier:          zRUISX1qXvZbOvLMj0MMINOdmRUkChhJGDibuJC7o5Q=
Subject key identifier:   7F:37:7D:FC:B1:60:9E:51:F4:F6:13:9D:47:87:50:13:57:57:4C:55
Authority key identifier: 15:20:E1:E2:54:A0:40:3D:06:83:D1:BE:01:3D:9D:EC:33:C4:B9:BB
Certificate issuer:       /CN=1520e1e254a0403d0683d1be013d9dec33c4b9bb
Certificate serial:       019D3909AC743BA34443A3DBA28F3D9E0D19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSDh4lSgQD0Gg9G-AT2d7DPEubs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.mft
Manifest number:          06
Signing time:             Sun 29 Mar 2026 10:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:28 +0000
Files and hashes:         1: FSDh4lSgQD0Gg9G-AT2d7DPEubs.crl (hash: /ZdvqPLLLTneGnvsH3I61awoyHl7NFx4UbJkI43fJKg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSDh4lSgQD0Gg9G-AT2d7DPEubs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:ac:74:3b:a3:44:43:a3:db:a2:8f:3d:9e:0d:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1520e1e254a0403d0683d1be013d9dec33c4b9bb
        Validity
            Not Before: Mar 29 10:00:28 2026 GMT
            Not After : Mar 30 10:00:28 2026 GMT
        Subject: CN=7f377dfcb1609e51f4f6139d4787501357574c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b3:d9:4a:51:b8:ae:51:29:d6:7f:1f:8f:d9:
                    9e:7d:ee:3d:aa:90:65:b4:63:67:29:4d:4a:93:5c:
                    38:cc:bc:59:e8:e9:a3:66:b0:4a:46:2d:32:0f:d6:
                    63:6f:c4:df:3a:61:3f:11:3d:58:c8:87:23:78:73:
                    72:c3:98:6c:e8:e7:32:68:a8:40:72:03:ca:bc:33:
                    a0:4a:cd:cf:8a:0d:9e:e1:3f:64:01:e9:f0:55:7f:
                    c0:d3:31:50:af:83:df:e9:49:9b:a3:30:9f:2b:a5:
                    91:81:47:11:8b:89:2e:a1:c6:67:76:e3:8b:ac:52:
                    d3:53:d1:72:01:6b:52:09:8b:56:a6:39:a9:d4:16:
                    63:26:69:9a:9d:b6:2f:a2:89:63:7b:3e:f4:db:02:
                    95:b9:2b:83:99:d8:6b:66:2a:eb:20:f5:c2:9e:cb:
                    ff:c2:6b:4a:ab:77:d8:4f:9f:fc:b5:d7:2a:b1:c7:
                    e5:b6:b7:0e:51:fd:9c:2b:26:6c:a5:2b:eb:3b:8f:
                    cc:c4:17:68:e1:d5:94:08:39:26:3c:6c:a0:bb:5f:
                    6d:93:c2:e8:e8:e5:55:0c:d3:15:77:5d:2f:94:cb:
                    26:88:44:56:eb:ad:b4:c4:8a:11:a2:0f:cd:63:96:
                    ab:af:94:ac:14:43:8d:66:c2:21:71:87:44:c6:74:
                    70:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:7D:FC:B1:60:9E:51:F4:F6:13:9D:47:87:50:13:57:57:4C:55
            X509v3 Authority Key Identifier:
                keyid:15:20:E1:E2:54:A0:40:3D:06:83:D1:BE:01:3D:9D:EC:33:C4:B9:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSDh4lSgQD0Gg9G-AT2d7DPEubs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c4639f-33fd-439b-a905-a5f87c5c207e/1/FSDh4lSgQD0Gg9G-AT2d7DPEubs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:34:e6:8f:5b:72:ec:88:4a:19:39:45:a3:70:a8:1d:4a:04:
         f7:1b:82:f3:df:c3:32:77:91:fc:0d:e1:d3:0a:13:2a:11:1a:
         9d:c8:06:06:82:d3:53:6c:64:cb:ab:60:b4:ae:f1:69:08:1a:
         e4:91:70:e8:49:f7:65:d9:c7:72:9d:44:a6:b5:23:d2:9e:ea:
         51:01:a0:83:c3:80:64:54:0c:fe:22:f5:d8:b0:67:07:9c:2f:
         c5:ee:68:e2:71:ea:a4:ce:48:b2:f6:2b:c0:cd:f3:0a:44:04:
         07:9f:93:2f:1d:67:e8:10:e8:08:05:9a:b4:3d:9a:ef:e8:d3:
         9e:66:86:18:ae:f0:b0:14:07:9b:11:f5:e3:1d:ac:84:e6:1e:
         b2:e9:98:43:de:cf:e4:1c:73:9c:08:f0:e9:a4:2f:e3:d6:6d:
         4e:a4:a2:89:10:dc:75:9c:7c:95:5e:68:c9:c3:de:6f:bc:2c:
         43:0e:cc:f8:c8:07:c3:d7:3b:91:23:19:90:6f:52:e6:f6:fe:
         f1:39:a5:23:6d:aa:79:5a:bc:02:6d:a5:1a:e0:78:38:3e:15:
         41:28:80:74:84:cb:f6:f6:2c:61:81:3b:9b:9c:c4:d7:e3:4c:
         98:ec:cc:69:da:f2:b3:68:57:b8:51:3c:7d:0b:c4:bd:46:ff:
         4b:db:4c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:35 2026 by rpki-client