Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
File:                     fujoTNwPSdrCk637XgSkkQjO1kY.mft (raw, json)
Hash identifier:          NlgXizxfhNlfU4eiutI4wjWPz1oX36Xzs2WYv/A/px0=
Subject key identifier:   EC:3F:BE:70:82:CF:7B:E3:11:87:88:F2:71:AF:29:73:3E:16:AF:08
Authority key identifier: 7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46
Certificate issuer:       /CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
Certificate serial:       019D390A0DBB34B701049FF604A031BD984D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
Manifest number:          086E
Signing time:             Sun 29 Mar 2026 10:00:53 +0000
Manifest this update:     Sun 29 Mar 2026 10:00:53 +0000
Manifest next update:     Mon 30 Mar 2026 10:00:53 +0000
Files and hashes:         1: 3ZnlgSbrf049eCIYO73iNtM8JCQ.roa (hash: GJC/RuNNoXXcqKNwZALbvh45eCMDOfy7Dcd3Npgg0qc=)
                          2: fujoTNwPSdrCk637XgSkkQjO1kY.crl (hash: Aok6K/Q7Tt+6HU4hB47yA36t91n2Z0bryEjD/SJVG+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:0d:bb:34:b7:01:04:9f:f6:04:a0:31:bd:98:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee8e84cdc0f49dac293adfb5e04a49108ced646
        Validity
            Not Before: Mar 29 10:00:53 2026 GMT
            Not After : Mar 30 10:00:53 2026 GMT
        Subject: CN=ec3fbe7082cf7be3118788f271af29733e16af08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:d1:47:27:9f:c6:e8:0b:a9:8f:6e:2e:fa:23:
                    b7:d2:49:27:95:b7:f7:be:9c:0b:cb:81:90:e0:7f:
                    00:e7:10:6f:8f:57:02:58:47:25:46:94:c0:b5:15:
                    e6:13:0a:bc:0d:bc:58:c3:27:42:4c:69:9c:27:91:
                    f7:ec:89:ac:1c:9f:60:28:bb:8d:3b:3e:94:87:cb:
                    be:db:0f:d0:0f:90:fa:1a:31:97:08:fd:a1:6e:36:
                    d0:49:32:af:68:13:dc:70:9a:21:de:bf:cb:80:4f:
                    90:b7:78:3c:a8:98:c3:da:c2:1e:ec:f5:47:17:3c:
                    cf:f6:17:05:af:08:db:d7:69:de:8e:9e:37:55:0e:
                    d0:79:3d:39:2a:42:a6:d8:de:63:67:dc:e1:c1:6a:
                    ca:2f:8c:cb:4e:0a:6d:51:47:71:0c:e1:77:e2:87:
                    ca:77:61:f2:3a:c0:cc:4e:5b:90:9b:7f:c1:c3:e8:
                    f8:b4:e2:81:a1:e4:0e:d8:fd:ee:99:2d:8a:de:18:
                    04:35:a8:bd:e0:24:8a:38:70:e4:d7:d8:3f:b2:b0:
                    ee:2d:98:f7:c1:f2:45:5d:c6:2c:89:ee:72:d8:ab:
                    d4:ca:d2:9c:59:55:8a:ae:ea:18:48:0a:f8:8c:5b:
                    30:9c:d0:46:e9:da:62:cc:49:8f:5c:05:ed:52:50:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3F:BE:70:82:CF:7B:E3:11:87:88:F2:71:AF:29:73:3E:16:AF:08
            X509v3 Authority Key Identifier:
                keyid:7E:E8:E8:4C:DC:0F:49:DA:C2:93:AD:FB:5E:04:A4:91:08:CE:D6:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fujoTNwPSdrCk637XgSkkQjO1kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/ad807d-f984-4f1b-b847-0e762e06f21c/1/fujoTNwPSdrCk637XgSkkQjO1kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7c:e3:4b:bb:f7:db:ff:85:6a:a9:05:cb:89:f0:6e:88:bf:
         96:03:ba:e3:58:81:da:96:90:32:00:4e:ee:27:51:20:0e:81:
         5f:13:f7:f4:d9:bf:87:6d:92:e8:a3:fb:63:00:13:cf:cd:92:
         4c:d4:81:13:11:3e:a3:cf:5a:ac:6d:17:9c:28:db:a2:eb:d8:
         6b:2a:a1:af:d3:7a:74:36:e4:94:60:cb:98:ee:d5:37:4d:03:
         c5:25:b5:1d:fa:43:8e:f3:a8:f9:ac:c1:34:8b:87:d1:78:9e:
         d0:53:a3:25:05:c6:21:cb:e8:27:4d:46:6c:5b:28:21:9c:cf:
         d8:56:e4:14:a1:ce:7f:6e:7c:2d:5c:60:96:84:78:73:0d:18:
         e1:a8:1b:ac:62:01:55:dd:30:4d:2d:a0:dc:cb:43:62:a5:b7:
         ec:92:16:96:56:37:20:55:13:a3:be:e1:b9:22:07:85:67:fd:
         2a:3c:7c:65:26:71:bb:68:07:22:11:92:19:4c:cd:89:e3:4d:
         c6:bb:a1:11:92:03:a9:ff:9e:81:e4:80:33:00:1c:ad:69:35:
         ab:c9:8c:74:cb:08:23:db:ad:e5:5f:a7:3e:8d:05:39:e4:cb:
         03:d1:5f:c1:12:f2:88:7e:44:b9:0d:a1:0e:b0:35:8b:f6:6c:
         51:17:63:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:37 2026 by rpki-client