Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier:          VKrgesPcK+W/N3ggqHVMpapmbA9RN3tXWTm53fVdCT0=
Subject key identifier:   F9:DC:52:BA:FE:F1:87:55:71:02:50:B5:8B:8F:0A:01:93:3C:B9:26
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       019D3A5426BE206547CA23896856CD9FF34C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number:          0F7C
Signing time:             Sun 29 Mar 2026 16:01:26 +0000
Manifest this update:     Sun 29 Mar 2026 16:01:26 +0000
Manifest next update:     Mon 30 Mar 2026 16:01:26 +0000
Files and hashes:         1: E-Y_gwpxgwRrl1lIC6Qt5FVODDg.roa (hash: aqMe+D+uy8WqFD3eIJAUxX8y1d5aAQPp+/6GTJIpBpo=)
                          2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: pCEdWtuf6G/fOtwzleGtv2d36HnioUPVacCACXP776Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:3a:54:26:be:20:65:47:ca:23:89:68:56:cd:9f:f3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Mar 29 16:01:26 2026 GMT
            Not After : Mar 30 16:01:26 2026 GMT
        Subject: CN=f9dc52bafef18755710250b58b8f0a01933cb926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:50:31:c0:8a:a3:5e:08:68:41:c8:28:fa:
                    f1:e6:94:04:c9:ba:ba:4c:9d:50:f7:20:10:ca:3d:
                    90:c7:6b:63:aa:ca:0c:86:3c:e8:db:1c:a7:68:23:
                    99:c0:96:14:99:d3:ec:6b:00:b0:85:3d:e5:56:8b:
                    7e:11:18:76:5a:4a:4b:2f:c1:a5:1d:34:50:5b:8b:
                    8d:ef:c8:aa:f8:12:81:e3:44:e9:9e:13:77:ad:7d:
                    ee:44:ff:c9:57:bc:16:34:ac:87:fd:8f:a9:6e:cc:
                    aa:2b:c3:81:a2:8c:f7:9f:b2:56:07:89:60:31:d0:
                    04:1d:b4:d8:68:9d:49:e0:90:8d:98:34:2d:48:de:
                    cf:74:4a:43:0c:17:14:33:75:fa:3e:a7:c7:84:20:
                    87:55:96:74:82:54:3c:c9:7f:c5:30:72:7d:e7:40:
                    bd:f1:0d:4c:b0:f3:6e:b2:d6:7b:59:11:2f:ac:69:
                    66:50:4f:70:b6:12:e2:f9:b2:d1:ba:14:a0:e4:da:
                    d9:a9:19:af:f5:78:bb:d9:9e:1c:55:49:fa:7f:ef:
                    24:c6:71:b7:9e:23:9a:08:a0:fe:b4:f8:ee:0e:c6:
                    1a:cb:ea:89:95:27:91:25:5a:3f:e8:be:6f:06:0e:
                    e8:95:e6:a0:12:42:6c:9f:6b:ac:62:ef:57:4a:dd:
                    2d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DC:52:BA:FE:F1:87:55:71:02:50:B5:8B:8F:0A:01:93:3C:B9:26
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:50:9b:8e:71:e1:4b:85:14:8e:80:17:f1:84:64:ac:23:9b:
         9a:d7:cf:22:66:07:cf:0f:73:9d:b5:36:7a:d8:75:ec:be:df:
         9b:8b:f5:c7:e2:2d:6b:41:57:3f:85:8b:c1:96:ce:74:4b:26:
         ab:07:b4:d0:9c:11:cf:5e:37:f1:ba:81:10:9b:a2:e1:83:bb:
         aa:b0:18:b6:0a:af:43:7f:c7:8e:2d:45:d3:a8:aa:17:07:44:
         ec:02:7a:4c:8b:05:e3:0a:ff:25:56:13:62:9f:c7:35:a1:da:
         b4:c8:96:2c:9f:de:12:58:0b:db:25:b6:9d:76:f0:d4:46:33:
         a9:f5:2b:84:21:90:bc:3c:5a:c5:87:22:52:b5:c3:3b:d6:57:
         17:9a:6d:7b:e8:f1:80:24:d9:1d:72:4f:c5:ff:21:e1:9f:19:
         cf:a8:87:91:c1:03:39:c0:21:a6:46:9f:34:c7:b7:d9:e6:61:
         25:ce:97:74:73:ee:ad:95:fb:28:ff:9c:68:4b:f6:6d:b4:92:
         0d:23:89:fc:95:28:65:f8:be:82:ce:19:76:e6:14:36:4b:a8:
         7e:26:1d:70:38:e7:96:00:80:28:32:cc:93:8c:82:3f:bd:0c:
         e8:9d:87:81:48:c3:17:df:c0:0e:3b:02:32:ea:7e:f8:16:7d:
         63:bc:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:09:39 2026 by rpki-client