Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
File:                     Fo_q-FM_haWBITrWyAHjn0pCC1k.mft (raw, json)
Hash identifier:          Gt6qAdNMKG+E5kN7D4OrOg8Td8YMZKhmB+197QvWNAo=
Subject key identifier:   9D:1A:45:DA:8D:39:E0:67:4C:EE:81:C0:6F:4B:69:2F:5A:08:70:6A
Authority key identifier: 16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59
Certificate issuer:       /CN=168feaf8533f85a581213ad6c801e39f4a420b59
Certificate serial:       019D39AF7C52E0404F5AA6072DC3723C346F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
Manifest number:          010E
Signing time:             Sun 29 Mar 2026 13:01:35 +0000
Manifest this update:     Sun 29 Mar 2026 13:01:35 +0000
Manifest next update:     Mon 30 Mar 2026 13:01:35 +0000
Files and hashes:         1: Fo_q-FM_haWBITrWyAHjn0pCC1k.crl (hash: r43ZHeMM1X0i9gg0z/ezCWm3zFrHyknoxGSym9gZeN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:af:7c:52:e0:40:4f:5a:a6:07:2d:c3:72:3c:34:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=168feaf8533f85a581213ad6c801e39f4a420b59
        Validity
            Not Before: Mar 29 13:01:35 2026 GMT
            Not After : Mar 30 13:01:35 2026 GMT
        Subject: CN=9d1a45da8d39e0674cee81c06f4b692f5a08706a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:e6:fe:40:9a:31:c0:4d:c8:43:8f:1b:ff:
                    48:eb:db:77:5e:9f:7c:47:1c:d9:66:fb:4e:54:56:
                    5b:be:6f:06:60:c0:9f:b7:f1:4c:e8:88:d5:15:09:
                    6a:f4:18:3a:0f:19:df:d2:0e:28:d6:f7:2d:84:14:
                    6f:16:7c:d0:a9:67:42:53:69:da:77:07:b7:ee:d7:
                    c8:cc:22:5e:0c:84:96:d6:fa:1f:df:3e:3f:a1:5c:
                    a3:3c:59:7f:49:88:a9:40:6d:0a:db:57:67:e8:a6:
                    af:ba:7d:ee:29:38:56:58:b2:0b:d6:c0:f8:f8:ec:
                    06:33:b8:5a:a0:3d:65:2a:ae:6f:ae:4c:57:2f:0d:
                    6b:33:48:1a:16:5b:71:39:0e:ee:6e:d6:d9:dc:a0:
                    ea:04:cc:75:98:a3:38:98:da:51:82:ed:24:ac:1e:
                    b4:ac:18:58:46:02:52:fd:c5:93:cc:69:81:45:7b:
                    da:10:5b:56:d7:85:e3:0e:a0:f9:8c:dd:a0:6c:ac:
                    89:a5:c7:bd:6d:78:2f:e8:08:77:00:19:5e:a3:ac:
                    a9:c2:40:a4:5b:bc:70:01:61:20:8c:07:45:14:43:
                    4d:8c:0d:a5:ad:25:95:cf:44:d9:ad:a8:d5:b7:a9:
                    24:0a:69:fc:ee:72:f1:78:61:34:ad:32:3f:cc:f4:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:45:DA:8D:39:E0:67:4C:EE:81:C0:6F:4B:69:2F:5A:08:70:6A
            X509v3 Authority Key Identifier:
                keyid:16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:69:61:eb:b8:b9:0f:57:e0:8a:4b:b6:6c:6c:b8:a1:88:f0:
         21:76:68:a6:03:18:3e:20:6c:d9:1b:38:4c:51:7f:30:8a:67:
         df:2d:1e:92:62:5c:b0:35:30:b2:81:b5:80:eb:3b:d5:42:8d:
         54:7d:19:cd:60:db:6d:99:71:db:32:6a:b7:dc:54:3f:45:5a:
         8e:a6:14:e9:23:c8:e4:a8:51:6a:ce:c1:70:03:88:7d:7f:28:
         97:41:74:be:c2:9a:12:35:4a:c7:a7:9f:47:74:95:78:15:61:
         d9:cf:7a:77:cf:d2:c5:42:00:c2:b7:94:90:df:b4:06:21:70:
         68:16:5d:89:c3:ab:00:57:31:dc:dd:e9:7c:49:dc:3f:bc:6a:
         2d:fa:07:c2:81:64:20:98:c1:18:79:07:d6:2c:8a:6c:bb:b4:
         60:16:b2:8d:14:a0:5f:70:7c:08:1a:9c:31:99:b6:39:84:99:
         21:23:cb:59:1a:f1:58:80:86:1c:98:10:93:9b:6e:c1:10:8e:
         cc:cd:ba:79:16:ac:b3:19:42:74:56:99:fc:74:5a:0e:3d:85:
         9c:5b:90:94:38:c0:c3:62:50:2a:17:e6:b4:69:57:23:cf:00:
         f2:65:63:14:87:e7:f3:75:2d:2f:26:ae:ca:e2:4e:2c:e3:f0:
         92:e4:26:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05r3xS4EBPWqYHLcNyPDRvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OGZlYWY4NTMzZjg1YTU4MTIxM2FkNmM4MDFlMzlmNGE0
MjBiNTkwHhcNMjYwMzI5MTMwMTM1WhcNMjYwMzMwMTMwMTM1WjAzMTEwLwYDVQQD
Eyg5ZDFhNDVkYThkMzllMDY3NGNlZTgxYzA2ZjRiNjkyZjVhMDg3MDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp/m/kCaMcBNyEOPG/9I69t3Xp98
RxzZZvtOVFZbvm8GYMCft/FM6IjVFQlq9Bg6Dxnf0g4o1vcthBRvFnzQqWdCU2na
dwe37tfIzCJeDISW1vof3z4/oVyjPFl/SYipQG0K21dn6Kavun3uKThWWLIL1sD4
+OwGM7haoD1lKq5vrkxXLw1rM0gaFltxOQ7ubtbZ3KDqBMx1mKM4mNpRgu0krB60
rBhYRgJS/cWTzGmBRXvaEFtW14XjDqD5jN2gbKyJpce9bXgv6Ah3ABleo6ypwkCk
W7xwAWEgjAdFFENNjA2lrSWVz0TZrajVt6kkCmn87nLxeGE0rTI/zPSEPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0aRdqNOeBnTO6BwG9LaS9aCHBqMB8GA1UdIwQY
MBaAFBaP6vhTP4WlgSE61sgB459KQgtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNzI2OTQtMjJiMy00ODI3LThiMmEt
MTNkYTM4NTEzNGYwLzEvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8yNzI2OTQtMjJiMy00ODI3LThiMmEtMTNkYTM4NTEzNGYw
LzEvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGlh67i5
D1fgiku2bGy4oYjwIXZopgMYPiBs2Rs4TFF/MIpn3y0ekmJcsDUwsoG1gOs71UKN
VH0ZzWDbbZlx2zJqt9xUP0VajqYU6SPI5KhRas7BcAOIfX8ol0F0vsKaEjVKx6ef
R3SVeBVh2c96d8/SxUIAwreUkN+0BiFwaBZdicOrAFcx3N3pfEncP7xqLfoHwoFk
IJjBGHkH1iyKbLu0YBayjRSgX3B8CBqcMZm2OYSZISPLWRrxWICGHJgQk5tuwRCO
zM26eRassxlCdFaZ/HRaDj2FnFuQlDjAw2JQKhfmtGlXI88A8mVjFIfn83UtLyau
yuJOLOPwkuQmNw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:22 2026 by rpki-client