Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File:                     fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier:          f/c4B4XHMtgUK02jKfodFvmjkPCSrJUdGQRsk+E370Y=
Subject key identifier:   76:E8:E4:FD:A2:24:DC:B3:48:AC:8B:B3:4A:C8:59:0E:45:EF:94:E2
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer:       /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial:       01A08A1ECAC16065B227A4CE6089D8881822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number:          1A45
Signing time:             Thu 10 Sep 2026 07:01:08 +0000
Manifest this update:     Thu 10 Sep 2026 07:01:08 +0000
Manifest next update:     Fri 11 Sep 2026 07:01:08 +0000
Files and hashes:         1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: JDVRwhoFcQX6emfUNnIjWLQfpF9j2kR07pidoTpmYEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:ca:c1:60:65:b2:27:a4:ce:60:89:d8:88:18:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
        Validity
            Not Before: Sep 10 07:01:08 2026 GMT
            Not After : Sep 11 07:01:08 2026 GMT
        Subject: CN=76e8e4fda224dcb348ac8bb34ac8590e45ef94e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:d7:6a:8c:e9:31:41:5e:8e:a1:75:ad:02:
                    3e:72:98:31:1b:18:ae:50:d2:e3:dc:84:9a:f3:c2:
                    c7:a9:86:2b:12:4e:cc:2f:7d:13:3d:77:e9:db:60:
                    84:7e:ca:c0:cf:77:1b:88:51:b9:9d:36:7f:71:fe:
                    b4:f2:73:82:1e:94:2e:36:26:37:84:82:48:66:28:
                    62:29:31:e1:f3:49:2d:57:c9:a7:95:8e:17:b7:90:
                    15:4c:99:6e:00:ff:22:10:3a:17:e3:5e:d3:33:bb:
                    15:52:35:1c:6c:72:f1:6d:23:d0:57:c2:b4:ac:a5:
                    f4:ba:29:95:4f:62:8f:61:65:52:6c:76:f0:82:9c:
                    86:46:53:dd:fc:d0:f7:9b:b2:62:4d:35:f5:fd:ad:
                    cb:ed:7b:da:5e:67:32:a5:ab:6a:e0:ef:db:62:44:
                    24:d4:a5:7e:17:d4:1f:89:5c:fb:55:16:9c:2e:88:
                    5e:95:cb:2b:6b:3d:23:07:d4:bc:f4:53:0f:41:2d:
                    a0:6a:91:a8:a6:bc:32:b3:4c:73:ae:89:a6:ad:b7:
                    de:e8:e3:62:39:be:ba:63:6e:2d:bc:4b:a7:56:61:
                    ce:a6:2e:40:cf:92:65:fd:45:7a:c6:8a:7c:bc:a3:
                    d3:73:4d:e6:69:31:69:bb:ae:65:d3:cb:fd:6d:70:
                    c1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:E4:FD:A2:24:DC:B3:48:AC:8B:B3:4A:C8:59:0E:45:EF:94:E2
            X509v3 Authority Key Identifier:
                keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:bd:92:34:83:7e:d5:6c:88:20:3f:d8:29:d0:cb:78:f7:cf:
         f5:e2:ef:03:44:02:32:d8:78:b6:c2:3b:4e:78:42:f9:fb:04:
         43:59:8a:31:18:e4:2a:18:48:d7:45:be:ce:61:ec:38:85:79:
         29:fe:f4:e2:b7:8f:2e:0b:b3:4d:89:e1:37:c6:68:a2:7a:33:
         40:14:96:d5:8a:c8:4f:38:c0:a2:9d:0a:f0:d6:eb:24:77:6f:
         f2:de:38:7a:0c:0b:89:bf:78:91:09:39:dc:2d:9a:9b:39:ad:
         3e:d5:42:06:e6:2e:1a:ec:bb:f6:69:91:2c:cf:45:b0:ce:df:
         07:a5:46:48:9e:86:77:44:00:67:6b:89:f4:40:e1:7b:bb:e5:
         ac:7c:50:b6:f8:c2:24:80:61:3d:63:43:d3:c3:33:cf:bf:a8:
         5b:3f:15:ef:5f:e6:ed:fb:c9:6f:5c:fe:1f:54:91:86:f1:f1:
         de:f7:a2:d9:86:25:ea:c8:96:dc:5e:8a:80:7d:7b:5d:07:42:
         82:fe:9d:05:da:a3:e1:0a:ab:5f:74:8b:8f:e5:75:b7:08:9c:
         3b:d8:f6:19:8b:b2:f4:c2:40:52:57:e2:f8:3b:0c:8f:20:70:
         b9:e2:3b:8c:ec:c9:2b:cf:0f:3f:cd:63:38:22:37:75:cf:a4:
         3d:d2:68:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:41 2026 by rpki-client