Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          URAjci9yrmgEIyNyXlEnDBA8C8zJngI97NdCkbSYIgA=
Subject key identifier:   51:23:05:DE:F5:5F:41:0B:D0:68:FA:54:70:42:DA:8A:AE:6F:05:E6
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       01A18AC026601D698BA6445FB8F8E654AD6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          0581
Signing time:             Fri 30 Oct 2026 03:00:10 +0000
Manifest this update:     Fri 30 Oct 2026 03:00:10 +0000
Manifest next update:     Sat 31 Oct 2026 03:00:10 +0000
Files and hashes:         1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: +47RhXAXRxV98Gvemqy5X0ehDC+eW0Ejk1GX89Dp5H4=)
                          2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8a:c0:26:60:1d:69:8b:a6:44:5f:b8:f8:e6:54:ad:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Oct 30 03:00:10 2026 GMT
            Not After : Oct 31 03:00:10 2026 GMT
        Subject: CN=512305def55f410bd068fa547042da8aae6f05e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:01:86:68:30:c6:f9:16:39:67:c4:3c:f3:
                    b9:b5:f1:d1:e5:4e:6a:94:c5:81:7e:a9:57:f9:d9:
                    e9:00:53:05:65:f3:4b:07:2a:30:b9:cf:bc:33:f7:
                    23:fc:bb:c6:48:39:f9:37:65:bb:fb:ae:b7:fc:16:
                    4f:71:5b:c7:53:29:da:a6:4c:32:4b:02:1b:95:6b:
                    1e:4f:04:9f:93:26:7f:cb:33:65:7e:88:37:26:be:
                    33:54:08:e6:ff:f0:78:cb:9a:f4:3c:0d:ce:70:f4:
                    18:54:30:ca:72:ad:f9:21:dc:fa:d1:80:78:85:0e:
                    74:30:1b:ab:86:fa:9d:2b:ee:34:44:3b:cf:9b:81:
                    55:90:e2:be:29:66:b2:54:b9:0b:5f:93:b8:94:04:
                    35:05:d7:4e:27:4c:25:79:94:52:65:af:27:c2:f4:
                    f5:18:80:3f:fb:4a:f2:a2:03:86:65:24:bd:54:0f:
                    16:6b:34:00:f5:c1:d4:aa:c0:4f:f9:5f:38:c9:62:
                    2f:2b:da:46:f4:25:29:5b:57:30:52:ca:0d:d1:2c:
                    75:d2:8d:5b:91:8c:30:ea:96:11:35:7a:ec:68:8f:
                    01:45:6a:64:d8:8b:37:a3:df:5d:c2:bc:a4:3e:4a:
                    e0:82:7b:02:43:c2:b3:8d:02:21:61:97:04:1e:e4:
                    58:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:05:DE:F5:5F:41:0B:D0:68:FA:54:70:42:DA:8A:AE:6F:05:E6
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bb:4a:d5:70:4d:9f:5f:a7:b5:15:d8:01:c3:f3:45:b3:88:
         10:5b:c9:b0:04:59:79:08:93:ca:24:a1:79:0a:53:c7:a6:f7:
         58:f0:10:28:25:e6:8b:e9:60:81:a2:21:83:66:4a:50:e5:7e:
         08:cb:e2:39:98:22:ee:e8:e7:9b:50:db:05:52:23:b2:81:8b:
         17:ec:82:48:7f:06:11:79:11:94:26:5f:4e:e8:50:64:2c:08:
         be:cf:3c:bf:a3:80:29:e1:33:d4:30:04:c9:f9:9f:91:fb:07:
         d2:d1:7b:08:ac:8c:60:7d:31:da:34:50:88:1d:1c:f9:97:e6:
         98:58:99:aa:52:37:89:d8:de:69:b9:3e:6f:58:97:41:b7:ab:
         7d:2d:78:bf:ad:b3:1f:ed:52:fc:86:12:f2:1c:ca:f7:b6:07:
         12:f4:66:39:d8:4e:1e:c0:3a:ca:f6:9f:85:8b:9c:46:b4:7b:
         cc:bc:e7:25:47:c9:65:35:54:b8:9d:8f:ef:cd:03:36:a9:c1:
         4e:f8:16:b5:8f:88:24:68:17:0d:b8:af:fb:6c:31:4e:12:29:
         dd:69:33:18:1e:48:c0:b5:de:56:58:1f:84:cc:f8:e8:a3:7c:
         b6:87:2e:6e:c0:25:9e:11:fa:ee:27:49:fd:6a:16:8a:db:80:
         0a:a6:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 12:47:36 2026 by rpki-client