Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File:                     fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier:          UdsSHbBOKYLm1HKc2F4/E/u9RsGF6C/IX6u7h5thDgk=
Subject key identifier:   E2:D1:54:7C:F6:F9:B8:E0:A9:31:A7:FB:71:24:2B:A8:83:B4:C2:30
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer:       /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial:       019D389C49356970BEF4E41A312B429584AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number:          1665
Signing time:             Sun 29 Mar 2026 08:00:59 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:59 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:59 +0000
Files and hashes:         1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=)
                          2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: YOUZFPwj0o0QiJI6nmYZqJcPWF8dyvQhFAGN+m5feG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:49:35:69:70:be:f4:e4:1a:31:2b:42:95:84:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
        Validity
            Not Before: Mar 29 08:00:59 2026 GMT
            Not After : Mar 30 08:00:59 2026 GMT
        Subject: CN=e2d1547cf6f9b8e0a931a7fb71242ba883b4c230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:f5:46:4d:13:43:e9:51:19:fe:e7:3d:a4:
                    77:ab:54:66:bb:a4:ec:8d:ae:a2:e0:c1:ff:33:c4:
                    51:a7:5b:c6:e5:20:a0:0e:e0:e4:c6:a0:53:77:00:
                    d3:fb:40:c0:6e:94:c0:5f:cd:eb:24:2e:83:8d:9c:
                    29:88:3c:d7:03:57:9a:26:df:a1:96:4e:43:f0:7e:
                    8f:d7:ee:43:ad:0d:1f:a1:00:aa:5a:16:b2:e9:52:
                    81:5c:2c:51:e4:7b:a7:f4:4f:51:ab:71:a1:71:9b:
                    0a:54:01:3d:48:e0:50:77:84:3f:b3:d9:ee:84:bc:
                    6b:fe:f6:34:63:33:c1:64:3d:e7:6d:09:e1:bd:8f:
                    14:87:cb:95:78:79:57:02:2e:88:49:d8:e3:77:e9:
                    a8:bf:b4:25:b1:a1:e5:04:3c:a0:3e:1d:a7:86:95:
                    48:be:fb:e9:10:5a:c1:e9:b5:40:6f:2f:85:65:f2:
                    76:15:af:66:02:ca:a4:f7:36:4f:77:b9:ff:4f:30:
                    1a:9f:12:8f:df:44:71:8e:ce:d7:d6:f1:b4:3d:3a:
                    e5:04:a4:c3:58:c4:0a:29:c0:01:59:90:0e:d3:09:
                    5a:aa:12:26:b8:3d:07:4a:c1:aa:33:f1:d8:7f:13:
                    6f:cf:26:05:c3:ff:46:69:42:04:b3:51:c0:35:49:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D1:54:7C:F6:F9:B8:E0:A9:31:A7:FB:71:24:2B:A8:83:B4:C2:30
            X509v3 Authority Key Identifier:
                keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:e9:83:6c:0f:b0:09:a6:ab:6e:9a:9d:07:a0:4c:93:04:f5:
         f0:12:00:76:60:8a:3e:3b:ad:64:20:89:f3:a8:0f:90:1d:35:
         67:81:64:20:90:02:2a:e8:67:9c:07:60:e5:44:f6:93:e5:c2:
         b6:c0:f7:2d:b6:69:a7:89:73:59:09:bb:d8:21:82:bd:98:6b:
         f4:07:dc:81:97:30:a4:eb:e9:4a:c6:b2:4e:76:63:ad:77:c6:
         05:da:1f:d2:20:2a:59:62:b6:43:f6:0b:36:9b:ab:9e:c7:e6:
         ec:d5:7c:fa:6a:50:90:c3:76:f8:4e:e0:95:34:58:fe:b7:a3:
         e4:90:6c:a4:f2:62:ad:00:d5:9f:01:65:78:93:29:ee:f4:91:
         2e:59:cd:2d:bf:05:1b:7b:f0:34:27:4d:94:4e:07:15:49:23:
         fc:66:8b:b0:0a:28:e9:e5:5e:27:78:8d:fe:1f:1e:96:72:b0:
         7c:62:b3:82:89:96:34:59:67:e0:0c:bd:81:c4:f1:55:33:74:
         1f:4b:12:22:b0:90:d8:35:42:0e:0c:2c:5a:e3:74:36:4f:5a:
         8b:cd:ea:87:fa:7a:c4:a4:34:08:63:85:66:bc:8c:64:8d:dc:
         bc:73:26:6b:39:f3:ae:d5:b5:18:01:dd:4c:a9:66:2c:b4:64:
         a5:ec:58:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:50 2026 by rpki-client