Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          t02iRoOBaNH/ueS8lhRMfAlocWQw6Sd+/ggTV/no49Y=
Subject key identifier:   9A:91:A6:EC:39:72:EA:F4:F6:F7:9B:ED:AF:FB:3B:E8:CF:FB:35:AA
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       019CAAC633346859A9F5EC14EDC917FC4378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          115C
Signing time:             Sun 01 Mar 2026 19:00:41 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:41 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:41 +0000
Files and hashes:         1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: ZYTdplhUQ6CuCk7DM8dRs5k8ez76oUnHOdMVLok1cFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:33:34:68:59:a9:f5:ec:14:ed:c9:17:fc:43:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Mar  1 19:00:41 2026 GMT
            Not After : Mar  2 19:00:41 2026 GMT
        Subject: CN=9a91a6ec3972eaf4f6f79bedaffb3be8cffb35aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:db:f5:02:72:83:a1:24:0a:57:bf:bf:81:
                    d2:72:03:89:1f:e3:26:51:d3:0b:7f:b7:07:f5:39:
                    e6:6f:35:3d:2c:58:9b:a6:9f:f0:8a:08:c9:54:ad:
                    52:88:64:d5:c1:74:7e:bf:f9:a1:8a:c0:59:f2:52:
                    23:6f:5b:72:66:4b:4d:b5:02:b7:77:a2:66:e6:d5:
                    b3:f2:99:99:1d:eb:e5:8a:04:51:ed:22:70:43:ee:
                    65:a3:a5:42:6e:62:9e:59:84:d9:b8:cd:f2:c0:8a:
                    54:f9:8b:7a:2b:12:2f:55:45:9a:e3:77:6f:20:96:
                    4c:d7:11:31:10:2d:16:3a:3a:39:18:ca:a7:b5:9b:
                    20:82:76:f9:cb:e1:dd:08:f3:dd:5a:8f:45:73:06:
                    68:46:10:dc:e6:1b:85:44:f7:31:08:de:02:8f:a5:
                    f3:a0:f6:2a:6c:31:f8:93:1c:21:b9:56:d1:49:1c:
                    54:62:67:d7:a6:67:34:71:5a:26:3e:c1:7f:82:aa:
                    6f:ac:37:2f:78:35:2e:36:5c:4c:da:a6:3a:e5:c9:
                    52:09:d6:d1:50:1c:ac:fd:4f:cd:dc:8a:dd:08:d8:
                    26:b2:ae:53:7a:d8:70:3d:de:8e:f4:1c:86:92:51:
                    ac:ae:17:be:7d:6e:7a:e7:ba:5c:89:33:80:04:28:
                    d8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:A6:EC:39:72:EA:F4:F6:F7:9B:ED:AF:FB:3B:E8:CF:FB:35:AA
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:c7:5d:d2:30:f7:9e:a4:e0:3c:fc:cc:31:30:09:17:51:b9:
         e6:18:a1:0d:90:1a:35:ed:b8:43:ce:38:c6:32:b0:94:c8:48:
         d9:01:54:d7:d0:3b:5e:2f:8c:3c:06:da:ac:8f:5d:78:4e:27:
         9a:fd:b0:29:43:a2:d4:a1:3b:7b:b5:68:44:df:b7:1e:4c:a6:
         5f:23:70:6e:c4:dc:9a:a7:76:d3:f3:7b:ae:df:7a:61:76:0d:
         a7:d4:31:e6:d4:45:37:d4:7b:18:6d:08:35:c0:9c:89:a1:cc:
         24:23:2f:a2:8a:47:4a:54:43:9d:de:f2:5c:d6:c2:61:4c:b0:
         27:29:19:5d:f1:ba:d0:8b:ed:a1:92:17:18:aa:58:a4:50:84:
         38:e8:e6:6a:1b:8f:5d:0c:88:8f:70:96:71:e5:e1:c3:b4:3e:
         4f:49:d0:ae:74:45:fc:f1:81:50:66:4d:1f:cd:d4:8a:49:1b:
         ec:85:96:40:d1:8f:8a:82:95:3f:b0:bc:d9:a4:b6:2a:46:f8:
         dc:11:97:75:d5:64:0c:ed:43:86:8c:fe:d2:34:93:a2:f9:53:
         2d:12:c6:6b:d0:0f:64:50:fc:71:fb:30:a0:96:71:03:b9:80:
         59:67:ec:57:b1:25:59:02:4b:49:e4:78:f3:b7:70:90:ae:3d:
         2d:9b:bf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:22 2026 by rpki-client