Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.mft
File:                     FBjM-Z2OLNo7y8MB9q9JTJod8oA.mft (raw, json)
Hash identifier:          YU0BtZ96Vxp9vHkNuOTZQ9DnGHNZEnFM8irhz+/K0lI=
Subject key identifier:   1E:6B:A5:00:52:9A:61:02:DA:E2:80:A4:95:05:29:7F:85:46:0E:82
Authority key identifier: 14:18:CC:F9:9D:8E:2C:DA:3B:CB:C3:01:F6:AF:49:4C:9A:1D:F2:80
Certificate issuer:       /CN=1418ccf99d8e2cda3bcbc301f6af494c9a1df280
Certificate serial:       019D39E5780DEA5AAFC203A98B644FFB43F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FBjM-Z2OLNo7y8MB9q9JTJod8oA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.mft
Manifest number:          7F
Signing time:             Sun 29 Mar 2026 14:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 14:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 14:00:32 +0000
Files and hashes:         1: FBjM-Z2OLNo7y8MB9q9JTJod8oA.crl (hash: 75SegHdT8PaxHooTZXqH7QcOMT1zqzpyvo2tgLViADE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FBjM-Z2OLNo7y8MB9q9JTJod8oA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 08:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:78:0d:ea:5a:af:c2:03:a9:8b:64:4f:fb:43:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1418ccf99d8e2cda3bcbc301f6af494c9a1df280
        Validity
            Not Before: Mar 29 14:00:32 2026 GMT
            Not After : Mar 30 14:00:32 2026 GMT
        Subject: CN=1e6ba500529a6102dae280a49505297f85460e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:58:ad:32:4b:9b:48:6f:39:31:a0:e6:48:
                    4a:75:e3:20:1a:fe:ee:72:2d:03:26:da:17:c9:a1:
                    48:66:3c:d5:a6:ab:ad:ed:8a:95:18:67:72:b9:ca:
                    db:90:42:56:d5:9f:c4:3c:03:43:0d:61:a8:6b:80:
                    9f:f6:d8:7f:ed:87:24:e3:8f:5f:c5:97:26:68:e4:
                    d4:29:49:2b:0f:79:05:a6:de:f9:b5:0c:60:e0:7c:
                    12:70:6f:46:19:d7:63:2b:64:3f:96:44:17:a2:f9:
                    8e:c8:a6:d4:37:4b:30:b6:25:3d:2a:39:09:33:ee:
                    d0:9f:96:cd:3d:bc:7a:08:55:60:ba:55:85:8a:5f:
                    c9:ff:27:ae:84:a9:69:e7:c3:73:4c:0d:f8:ec:9e:
                    5a:fc:07:c4:73:14:a0:3b:ee:5e:e1:bf:66:47:57:
                    e8:3a:d8:35:fa:ac:d2:ea:c7:73:ad:31:d4:bd:56:
                    7e:ba:5e:ad:13:0b:69:0a:dd:d1:32:7d:0f:ca:89:
                    48:f9:34:a4:ed:a3:3f:e1:18:94:a7:da:16:e8:9a:
                    de:1b:93:d6:92:9a:66:1a:7e:15:41:f3:c7:a7:0c:
                    32:e5:dd:f6:79:e3:af:6d:a6:bd:2a:86:9f:99:aa:
                    32:e5:52:8d:9c:41:bf:19:b1:05:cb:3c:1e:d8:7b:
                    1a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6B:A5:00:52:9A:61:02:DA:E2:80:A4:95:05:29:7F:85:46:0E:82
            X509v3 Authority Key Identifier:
                keyid:14:18:CC:F9:9D:8E:2C:DA:3B:CB:C3:01:F6:AF:49:4C:9A:1D:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FBjM-Z2OLNo7y8MB9q9JTJod8oA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/a58114-c12d-4ce6-ac68-556712477982/1/FBjM-Z2OLNo7y8MB9q9JTJod8oA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:e8:c3:ec:3f:c0:13:e3:63:17:81:37:a7:4b:75:e5:35:e7:
         ab:e6:e1:36:97:4e:ee:96:38:1d:f4:46:e2:5f:c2:b9:0e:79:
         79:d6:27:34:93:c1:fe:3a:4e:46:4b:c8:39:14:37:b2:20:68:
         5c:e3:88:9b:4f:c5:7d:92:e1:00:bc:6f:1f:3e:29:8a:72:34:
         0f:be:a2:07:e3:1f:ff:d1:39:67:b8:6c:4d:7c:d2:6e:34:05:
         b7:36:b4:c6:32:17:21:c8:6f:49:cc:d9:fc:d0:5a:d4:3b:cf:
         fc:2c:6a:76:d9:ca:ec:48:37:62:a2:83:6a:af:91:20:25:6d:
         19:a6:d5:63:f9:e2:5f:4f:d8:bf:f4:93:1e:5d:22:4e:12:57:
         77:2e:86:83:ec:a6:d6:86:8d:8d:34:49:8a:b5:25:67:a6:18:
         3e:9b:6c:f8:82:f5:59:2b:b7:5f:bf:e6:14:46:47:a2:69:d1:
         12:14:3b:33:cd:38:f0:b5:63:63:32:36:1b:af:23:94:26:ea:
         5e:44:b7:bb:81:6d:5e:18:b7:12:5c:fc:9d:70:c4:3d:fe:ec:
         35:a2:41:89:9e:af:42:64:9d:db:ab:3f:e8:00:66:49:91:9e:
         6c:2d:56:68:3b:21:c8:85:40:d4:13:a5:32:ed:b6:d9:1f:41:
         20:ce:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:17 2026 by rpki-client