Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
File:                     FClngBLZAqCTDjRcEuCVNWoC4A0.mft (raw, json)
Hash identifier:          cYcfDioGJb+ukFdKCcbv7at652azvoa/9dQg0hhO5Ow=
Subject key identifier:   56:80:65:F9:AE:35:3D:28:FB:30:0D:D9:06:E4:20:B5:F3:9B:CA:AD
Authority key identifier: 14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D
Certificate issuer:       /CN=1429678012d902a0930e345c12e095356a02e00d
Certificate serial:       01A116062C9501C97E6494A95EE5989853A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
Manifest number:          0157
Signing time:             Wed 07 Oct 2026 11:01:05 +0000
Manifest this update:     Wed 07 Oct 2026 11:01:05 +0000
Manifest next update:     Thu 08 Oct 2026 11:01:05 +0000
Files and hashes:         1: B6Z0xcok0iiRihknudVJheKo3Os.asa (hash: bIM6WYFOdNzyb9nsyhBNXD2CIFhvQMqptK0lGeaX93M=)
                          2: FClngBLZAqCTDjRcEuCVNWoC4A0.crl (hash: 428Fs12vHXb2iFHnzMubjAJcQMGvPRILykgTgJcAWuY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 11:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:06:2c:95:01:c9:7e:64:94:a9:5e:e5:98:98:53:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1429678012d902a0930e345c12e095356a02e00d
        Validity
            Not Before: Oct  7 11:01:05 2026 GMT
            Not After : Oct  8 11:01:05 2026 GMT
        Subject: CN=568065f9ae353d28fb300dd906e420b5f39bcaad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:51:29:dc:1c:38:07:c7:17:3b:a7:25:52:7b:
                    c2:de:9d:62:47:ad:a3:84:61:63:3b:6c:e8:60:9a:
                    ea:1a:8d:44:c8:38:a7:4d:85:86:a5:9e:fa:51:46:
                    b5:9f:76:3d:dc:be:c7:87:c3:21:74:ac:8c:35:18:
                    8f:02:b0:86:58:02:d2:f6:b2:05:8f:71:77:7c:f7:
                    61:e9:31:00:c4:14:84:f7:8e:79:57:c2:fb:e8:42:
                    c1:e8:e6:e0:b3:99:fd:79:5f:31:10:2a:03:c6:98:
                    b8:5d:c6:20:ec:59:dc:49:cf:f3:d6:14:c9:8a:9f:
                    10:1d:e8:aa:a3:95:82:bd:ec:92:99:d4:92:8f:fe:
                    eb:bb:a9:14:c4:38:55:bb:e1:1c:ed:5a:7e:32:6d:
                    b0:b5:5c:5f:4e:33:55:44:da:b6:ae:08:fb:e4:af:
                    27:26:e3:df:5b:e3:b4:63:b8:ff:c0:49:04:5a:9b:
                    99:f1:1f:72:88:96:9f:d8:3c:e6:53:49:8f:40:5d:
                    f7:78:8a:75:88:a0:6e:fb:38:3f:d0:1c:9c:20:71:
                    ee:94:d2:b6:07:15:f2:9e:79:b9:89:52:30:cd:d1:
                    01:72:91:4a:9e:3e:9e:a1:d7:65:d5:14:cf:aa:15:
                    4f:72:bf:bd:36:27:45:32:f9:60:d7:9c:27:9e:93:
                    5a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:80:65:F9:AE:35:3D:28:FB:30:0D:D9:06:E4:20:B5:F3:9B:CA:AD
            X509v3 Authority Key Identifier:
                keyid:14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:7d:60:50:71:99:61:71:4b:af:34:f1:f6:78:f4:14:2c:65:
         86:61:75:6d:85:1c:b6:7e:25:33:bc:d2:2b:e4:cd:af:b3:be:
         de:03:5b:ae:95:c1:16:d5:51:d7:f2:7f:9e:2f:41:95:a4:76:
         74:43:ee:8b:f4:70:8c:3b:ee:c6:7d:44:9b:9c:6a:4d:b7:4e:
         b9:9a:c8:15:05:f0:90:71:e1:d2:26:cf:8e:6a:25:ea:e6:65:
         8c:f8:a1:3e:2f:50:ab:dc:52:bf:22:94:b6:4d:da:b7:57:35:
         18:1e:2c:ce:95:31:ad:7a:78:7f:e7:8c:f1:f6:b4:46:ac:cd:
         71:74:6a:f7:86:99:77:3f:ce:9b:ed:d8:a1:45:b0:9c:f7:72:
         06:fd:4d:26:67:61:09:a6:e9:34:7b:0d:6c:ed:03:23:21:27:
         19:30:5a:28:ac:b4:90:e1:b3:f9:f8:47:8e:b1:ec:2f:6c:31:
         71:20:84:fe:c2:50:ed:cc:0d:be:b2:28:13:7b:6f:50:2d:d4:
         5d:ee:09:40:cd:9c:d9:2d:8b:6e:48:5c:24:27:d2:54:2a:fc:
         7a:8b:ab:e4:42:bc:f0:ef:ed:4a:6c:0f:c2:7e:76:d6:87:fc:
         b9:a9:1b:f0:83:b9:ac:0a:7a:d8:64:34:32:63:de:b2:cc:9c:
         3b:61:36:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 16:58:03 2026 by rpki-client