Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
File:                     FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json)
Hash identifier:          Ph6rkQAvQHgIyVtPT/ufbR+oWYFrPChnMAzqG1U7daI=
Subject key identifier:   CB:D5:0C:F1:87:E7:50:EC:AD:59:1C:06:5C:FD:19:DC:52:57:30:2A
Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0
Certificate issuer:       /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
Certificate serial:       019D3909FEEDBE5944848ABA59A46A9E8593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
Manifest number:          082E
Signing time:             Sun 29 Mar 2026 10:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:49 +0000
Files and hashes:         1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: ikMzXVIf/sQJ+B4lQotQMk/kmojiZ9mi6XAMOVr8kPY=)
                          2: gZ7MTQFKv9ESgTgqTjYn_BrscQA.roa (hash: EHrl7z2+nheD4vZqxVwj5nQcr00mwqbj/IDfE3H4a9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:09:fe:ed:be:59:44:84:8a:ba:59:a4:6a:9e:85:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0
        Validity
            Not Before: Mar 29 10:00:49 2026 GMT
            Not After : Mar 30 10:00:49 2026 GMT
        Subject: CN=cbd50cf187e750ecad591c065cfd19dc5257302a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:63:2d:ab:9f:ed:1a:2f:df:5d:70:82:74:
                    13:cf:77:2f:0b:01:03:c4:ac:8d:e9:9f:95:80:83:
                    da:49:ad:65:94:ba:ef:3b:7c:c1:6e:e0:10:6e:00:
                    12:9d:12:0b:a9:cb:80:90:e3:bf:7b:d8:bd:7c:df:
                    72:ce:6c:4f:81:57:cb:f5:a3:c3:00:76:2b:8f:73:
                    1f:02:2f:93:d6:1a:71:16:58:ea:b4:00:0b:0c:b8:
                    01:d1:13:e8:32:6c:2f:0c:47:67:85:cd:f7:d9:4f:
                    52:cd:e9:51:0c:91:10:85:ee:81:88:77:eb:09:41:
                    4b:88:37:7a:63:c7:77:9c:0a:0f:7d:a1:f4:ec:3a:
                    ff:c9:5c:ff:d3:a6:28:62:28:e6:0a:96:25:79:7b:
                    d1:3e:06:1d:70:ee:4b:dd:84:87:94:4a:6d:6d:0b:
                    26:48:79:e9:12:08:b1:5c:5e:ce:ed:44:8c:fa:fb:
                    52:5d:d3:cb:56:12:31:eb:0e:c0:0a:6b:ea:20:0f:
                    9c:f6:46:07:35:13:4a:f9:f7:78:91:36:3b:39:1b:
                    0c:a7:85:2c:b3:db:51:0e:2b:3d:b3:c0:a3:b1:89:
                    24:05:2c:f0:c8:3a:12:cc:ae:b1:f2:43:58:10:68:
                    9f:a1:98:bc:11:9f:d4:cc:22:df:f2:de:d3:e3:d0:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:0C:F1:87:E7:50:EC:AD:59:1C:06:5C:FD:19:DC:52:57:30:2A
            X509v3 Authority Key Identifier:
                keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:1f:45:44:9c:49:30:58:6c:e1:43:4b:0c:d3:46:9c:19:
         c2:e9:cb:89:24:52:bd:ff:62:21:26:79:9f:66:4f:5c:31:7d:
         0d:e0:ae:9e:1d:cb:c2:08:45:65:88:f9:89:8a:2f:3e:92:9a:
         d2:b5:62:64:ae:22:f6:60:ee:b3:b1:9a:a3:d6:e0:ad:15:a8:
         a9:d8:29:b4:59:c1:ac:66:98:56:e7:42:d2:6c:67:36:d5:4e:
         50:1f:1f:96:1d:1c:c7:08:9d:f3:01:ad:09:65:81:37:ed:3d:
         5d:3d:19:09:7d:14:a8:1a:34:a0:c4:3a:c5:cc:d8:65:f9:90:
         39:d8:64:d2:93:28:22:41:d1:90:59:9a:9b:35:39:95:f0:53:
         7e:69:00:b4:75:72:df:36:11:96:e8:7c:2f:e5:80:7f:06:96:
         5b:84:d2:98:b7:6a:82:61:84:b9:0f:b7:0b:57:8b:ba:c6:50:
         c5:3b:5f:ce:1d:86:b3:54:27:4e:11:20:75:8e:88:c1:4b:21:
         b9:fa:6b:40:87:46:9b:01:a0:c9:ef:c7:0e:ec:ca:63:34:2d:
         52:a3:9b:c3:3e:e0:87:95:8f:22:f7:15:ea:97:f0:6d:82:93:
         fd:4d:f2:6c:5d:df:ec:d7:ee:12:5f:3a:56:0c:ec:b2:95:39:
         d5:02:c4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:59 2026 by rpki-client