Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
File:                     FDze4UaxO5Zn3v8_ezDpoaozTIM.mft (raw, json)
Hash identifier:          rWbVgdCSoeq+7ap5e3UFCXtlBXvVii5Git0bbQZ7z2w=
Subject key identifier:   55:E9:E6:D9:A8:47:EC:B3:A6:6F:61:72:4F:F9:B1:97:FB:D0:00:2B
Authority key identifier: 14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83
Certificate issuer:       /CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
Certificate serial:       019D3940FB56F2CA7D46EE0D946CAEBD0C52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
Manifest number:          1592
Signing time:             Sun 29 Mar 2026 11:00:52 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:52 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:52 +0000
Files and hashes:         1: FDze4UaxO5Zn3v8_ezDpoaozTIM.crl (hash: ylibB7ZkOaVO7MNVU6NF2ITA1eDpnqFZlfIw2S9FGec=)
                          2: oQtEQsDloQjn_yHhdWK48mAuP_0.roa (hash: IBQycGDwnrvsxVfFQ3rFUHD2uAasJQXEOZ891wf4Qks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:fb:56:f2:ca:7d:46:ee:0d:94:6c:ae:bd:0c:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143cdee146b13b9667deff3f7b30e9a1aa334c83
        Validity
            Not Before: Mar 29 11:00:52 2026 GMT
            Not After : Mar 30 11:00:52 2026 GMT
        Subject: CN=55e9e6d9a847ecb3a66f61724ff9b197fbd0002b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:48:d7:80:06:6e:cd:97:48:5f:68:25:24:
                    f5:59:64:80:ef:be:ad:aa:eb:21:b7:bd:f8:66:45:
                    7e:6b:89:b8:5e:03:ee:31:e4:6a:c1:7e:f6:fc:f9:
                    9a:e1:1a:dd:f2:5c:f0:2c:ef:02:c9:ae:40:65:b4:
                    84:a8:3a:ac:5f:35:db:22:80:1c:58:36:89:96:4d:
                    a2:39:8c:df:20:92:3f:f1:f0:5b:ca:6c:ec:0f:de:
                    46:c4:65:7a:7a:de:71:d7:8e:ab:47:d7:5b:5f:f1:
                    76:69:c2:d7:10:c0:b4:4c:be:5a:e3:c2:3f:fa:90:
                    1e:54:65:80:b9:b8:93:93:43:05:74:c0:a3:eb:cd:
                    be:2c:46:58:64:f7:44:de:40:be:3e:bc:f1:8f:10:
                    75:80:00:e4:d9:bd:a4:bf:e2:3c:98:e7:5f:6c:61:
                    46:9f:9c:eb:76:69:57:0a:1f:a6:8b:17:7e:a6:5f:
                    28:f8:01:36:da:8b:6d:10:77:d7:c1:95:f3:55:57:
                    33:bb:5e:cc:c4:87:73:71:8e:82:9f:bc:6c:01:13:
                    b9:af:2d:b0:54:8a:81:d6:0a:79:34:99:29:a6:a8:
                    92:d1:b7:f3:1e:a5:2e:f2:dc:f0:f9:35:40:2b:e9:
                    b4:80:6b:d3:d5:54:2d:80:d7:19:e0:bc:89:b9:a7:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E9:E6:D9:A8:47:EC:B3:A6:6F:61:72:4F:F9:B1:97:FB:D0:00:2B
            X509v3 Authority Key Identifier:
                keyid:14:3C:DE:E1:46:B1:3B:96:67:DE:FF:3F:7B:30:E9:A1:AA:33:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDze4UaxO5Zn3v8_ezDpoaozTIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/1ca39c-201c-41fd-9cb0-8236e57264bf/1/FDze4UaxO5Zn3v8_ezDpoaozTIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:16:59:21:34:a9:20:e6:35:80:2f:af:4e:43:4e:cf:dc:64:
         6a:85:41:38:5d:71:1b:67:04:76:d1:9b:70:de:d9:71:08:3d:
         d8:f0:e8:f1:36:df:3d:58:e5:4d:cd:51:8d:d5:31:4e:61:a8:
         d9:94:ad:ac:8d:64:48:45:56:92:b1:f7:a5:c3:01:ba:6e:f9:
         4c:94:e1:5b:c4:cc:da:52:74:09:02:bb:c9:47:f9:1d:79:a3:
         de:78:82:cd:90:32:b9:68:8a:aa:68:0a:c3:68:4c:00:c1:a7:
         1c:66:56:99:36:e5:6a:b6:7d:93:71:9f:96:50:8a:6c:f7:a7:
         1f:50:c4:89:64:24:13:2d:94:a1:5d:63:e5:63:61:41:17:78:
         4e:6b:71:8f:31:2b:df:9f:1c:29:8e:17:36:ac:d6:df:57:33:
         02:3e:91:84:a1:8b:19:6f:75:e5:c3:62:fd:15:80:59:42:a8:
         d4:cc:f1:ec:ae:5a:cf:a7:db:df:b3:2e:5c:0e:2b:4d:c4:7b:
         5c:a1:d9:26:f1:c8:34:0e:f5:a1:be:af:86:fb:56:bd:09:b1:
         dc:2c:6d:da:7b:94:d9:2f:c3:8e:2c:61:c3:39:48:0e:62:5d:
         14:88:21:ff:ac:61:02:b5:1c:3d:37:c8:d7:6f:a8:ba:70:e3:
         4e:57:f7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:34 2026 by rpki-client