Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
File:                     Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft (raw, json)
Hash identifier:          dM1ka21fLjqDkpe9u6hZ1WynZEGpMsmCZKdIUfluc7c=
Subject key identifier:   B9:DD:CE:9C:ED:0B:9F:65:D3:51:3F:A0:33:9E:D6:F9:B9:FD:AB:59
Authority key identifier: 17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B
Certificate issuer:       /CN=171bfdd42fa9484f56e189ba683d5188c524083b
Certificate serial:       019D9E1AC467A2DCC6C073E031118BF23022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
Manifest number:          032B
Signing time:             Sat 18 Apr 2026 01:00:47 +0000
Manifest this update:     Sat 18 Apr 2026 01:00:47 +0000
Manifest next update:     Sun 19 Apr 2026 01:00:47 +0000
Files and hashes:         1: Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl (hash: 1PEK80drr7UrVnjnm+BAGpK/6yklbLCR9rP0qZiENVo=)
                          2: Juzj2uWFNNcGNxZgq6Ns5mV8eN0.roa (hash: 43m9udxpd/q88DzOc722p98By6DFIuMj99m1Ii2HfgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1a:c4:67:a2:dc:c6:c0:73:e0:31:11:8b:f2:30:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171bfdd42fa9484f56e189ba683d5188c524083b
        Validity
            Not Before: Apr 18 01:00:47 2026 GMT
            Not After : Apr 19 01:00:47 2026 GMT
        Subject: CN=b9ddce9ced0b9f65d3513fa0339ed6f9b9fdab59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3d:2b:66:cc:4f:09:be:dd:67:0e:ac:6d:54:
                    ec:fd:15:1d:f6:ee:67:fd:ee:f4:23:2a:32:34:ea:
                    6f:bf:2f:29:af:5b:dc:2e:c9:f6:a0:ec:b6:41:1b:
                    17:68:5b:ad:4c:ca:13:ed:88:e9:6f:16:1f:ac:b8:
                    eb:65:9e:56:0a:3a:50:c5:91:e7:d1:51:ba:ce:6a:
                    c9:49:7d:e8:3c:c2:ba:ad:f2:a2:38:61:be:5a:c1:
                    a1:f5:14:91:2f:70:d3:c6:1e:7d:8e:42:33:0c:7e:
                    96:43:6c:4f:eb:7e:85:ad:f6:a1:47:7e:87:46:f4:
                    ac:43:81:1d:c5:53:0c:e9:c8:62:d7:5b:ea:5b:e5:
                    a2:e1:e1:91:03:b5:c7:22:d1:b9:1c:c6:25:c8:58:
                    48:2c:14:51:fc:6b:8a:9e:07:39:ec:d9:de:94:27:
                    25:19:db:91:e0:75:f5:38:b9:a1:26:91:88:c8:19:
                    93:42:09:d3:80:5f:92:58:74:96:d6:50:aa:30:cf:
                    65:00:71:b5:f0:95:85:c1:00:7f:53:75:05:ab:44:
                    77:f6:f0:c0:3f:ce:5f:16:44:7a:6b:bd:9e:2d:90:
                    53:0c:ff:4b:d6:22:00:02:ad:24:23:10:85:92:c1:
                    58:95:65:b3:8a:53:bf:48:44:5d:27:44:7a:d7:d7:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DD:CE:9C:ED:0B:9F:65:D3:51:3F:A0:33:9E:D6:F9:B9:FD:AB:59
            X509v3 Authority Key Identifier:
                keyid:17:1B:FD:D4:2F:A9:48:4F:56:E1:89:BA:68:3D:51:88:C5:24:08:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/fe4ed3-036b-4f2a-a9cf-b4d964776c85/1/Fxv91C-pSE9W4Ym6aD1RiMUkCDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:44:b9:78:fd:8c:4c:3c:df:ef:90:f7:a9:30:34:51:9d:62:
         27:d8:e7:fc:98:97:f9:db:19:2b:7d:2e:52:4b:5a:80:11:02:
         5e:e5:49:46:7f:a6:71:c6:18:bb:73:1a:31:d7:3f:13:54:a8:
         bf:2d:78:67:8a:42:c0:4c:4e:44:30:c1:d2:f4:19:5c:7a:c4:
         fa:6e:eb:4f:f1:88:d2:db:e6:30:ca:46:f2:14:63:03:ca:a5:
         aa:44:50:94:39:ff:07:ce:52:99:2f:9f:c3:70:ae:ae:f2:d7:
         f4:7e:03:be:52:1e:ea:a8:21:76:b6:39:a5:c6:c5:32:91:9a:
         0e:4c:96:32:bb:66:a2:e9:6d:26:ff:51:1e:dc:01:30:46:fe:
         1a:6e:55:c0:68:a8:a9:54:5c:57:0b:8f:d4:80:fd:03:be:c0:
         b4:d2:27:e3:ea:63:f5:27:bb:0b:40:f6:91:5a:ea:3e:af:6c:
         2c:9d:47:c0:94:5e:de:c7:3a:51:7f:a9:33:68:06:3b:e1:2e:
         ee:2c:d5:0d:ee:7d:db:fb:ea:7d:78:dd:60:29:cd:a1:68:e2:
         16:1c:32:02:85:6f:f1:82:84:35:bf:7c:77:a3:cb:13:41:9f:
         00:61:c3:ff:2e:a3:ec:e5:d6:77:0d:a7:d9:1a:7e:ff:50:ec:
         6c:38:2e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:11:01 2026 by rpki-client