Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          UhDugulbTl2bXrL1tAAnOLkrWILgz/CBNBBDPE3mv5M=
Subject key identifier:   41:95:10:C2:AD:0E:4C:99:75:46:00:ED:99:9F:45:33:C1:EA:25:98
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019CAB6B78FE3E17E3525C0B163B9254828D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          0A14
Signing time:             Sun 01 Mar 2026 22:01:13 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:13 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:13 +0000
Files and hashes:         1: 1Z4EQZv8pw305qtI7QN_PKdHZJE.roa (hash: xOHVIxkvcYwrKOFM5nVGP5q212Wgzb4Q6U3ZxUHbKh0=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: qHZl3A6DO94POwGGksCFI3sNsxJvK7pps5NsUN/PkAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:78:fe:3e:17:e3:52:5c:0b:16:3b:92:54:82:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Mar  1 22:01:13 2026 GMT
            Not After : Mar  2 22:01:13 2026 GMT
        Subject: CN=419510c2ad0e4c99754600ed999f4533c1ea2598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:b0:de:63:c3:42:f1:f8:12:bd:62:8e:07:
                    c7:e0:c7:78:0a:32:dc:bb:61:eb:7f:8b:d8:e4:02:
                    ea:4a:21:fa:75:00:c2:17:fa:49:be:c2:49:ce:59:
                    8c:63:82:96:36:bf:9e:ad:95:71:f2:49:69:f5:4f:
                    71:bb:7a:84:20:74:03:bb:b7:3f:24:c6:28:c2:41:
                    fa:3c:1c:42:4e:89:fb:55:48:70:93:7f:00:f0:52:
                    2e:a6:19:f1:3e:c0:a3:02:5e:9c:8f:2f:d0:36:8f:
                    27:c9:6f:42:63:e4:00:d5:fd:92:18:65:b4:ed:30:
                    d1:26:43:84:55:a0:6f:44:f6:8d:fd:e1:96:aa:d2:
                    57:b2:3a:b4:bf:f4:62:58:db:6a:81:90:bf:56:ea:
                    c7:84:b2:a0:e8:87:d1:56:96:e1:d5:56:e8:84:87:
                    4e:de:cf:7c:68:bb:2d:ae:7a:4d:58:d3:0d:27:b1:
                    a9:8c:8e:d5:6c:46:e5:08:fb:8f:a3:8c:c4:f5:11:
                    4b:10:16:72:35:fd:1b:54:c3:25:63:70:16:53:13:
                    b8:84:0d:69:0c:09:d0:dd:09:29:65:42:bc:04:e1:
                    1d:42:9c:83:5a:3c:a1:48:c2:8d:94:01:84:e9:18:
                    36:43:4f:22:41:79:bc:d5:c2:df:07:53:12:1f:b8:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:95:10:C2:AD:0E:4C:99:75:46:00:ED:99:9F:45:33:C1:EA:25:98
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:11:38:d6:eb:bc:30:4a:e6:f4:d2:8a:d6:0a:2d:30:0d:90:
         cb:25:c0:cf:40:98:b5:3b:07:2d:a5:39:a8:12:b4:ef:f5:27:
         d3:8c:06:7e:d5:c1:bd:6b:d3:3d:eb:0f:13:1f:0a:99:38:ba:
         21:ce:02:3b:6c:af:75:e8:6a:9a:ca:4e:9f:38:bb:5d:f9:f3:
         6f:6c:20:a6:61:77:5d:67:aa:18:93:82:da:71:cf:31:7a:e3:
         e9:68:fd:4f:e0:ca:00:8b:4e:5e:be:35:7f:85:bc:37:7d:f1:
         7c:ba:de:8c:b7:6c:6c:5a:86:72:ee:84:63:ed:18:bc:71:2f:
         1c:19:a5:c2:74:68:5e:b0:c9:0f:93:da:b4:34:ff:fa:d7:38:
         78:25:29:08:1a:92:63:82:bf:31:d6:0b:06:e6:e4:43:4c:f8:
         a5:c8:1a:c6:9f:1b:64:11:ef:7a:94:c8:db:ef:ea:dc:2e:3e:
         45:36:d9:96:71:76:92:9a:d2:b6:fb:c3:f9:f3:61:30:b9:ce:
         55:0d:84:06:b3:b2:5c:55:e5:5b:c4:5c:4c:3b:f2:07:ed:4f:
         72:90:36:11:92:05:4b:01:29:99:5a:c4:ff:21:09:04:28:fe:
         50:f0:2d:95:d1:ae:19:44:5f:7f:1b:37:0f:7a:1a:2e:d2:75:
         ca:77:8f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3j+PhfjUlwLFjuSVIKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2M2JjYmQ5YmM5Mzg0OWE3ZmZkZjcyOTRjMmRlOWRmYjFl
YWYyODMwHhcNMjYwMzAxMjIwMTEzWhcNMjYwMzAyMjIwMTEzWjAzMTEwLwYDVQQD
Eyg0MTk1MTBjMmFkMGU0Yzk5NzU0NjAwZWQ5OTlmNDUzM2MxZWEyNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uuw3mPDQvH4Er1ijgfH4Md4CjLc
u2Hrf4vY5ALqSiH6dQDCF/pJvsJJzlmMY4KWNr+erZVx8klp9U9xu3qEIHQDu7c/
JMYowkH6PBxCTon7VUhwk38A8FIuphnxPsCjAl6cjy/QNo8nyW9CY+QA1f2SGGW0
7TDRJkOEVaBvRPaN/eGWqtJXsjq0v/RiWNtqgZC/VurHhLKg6IfRVpbh1VbohIdO
3s98aLstrnpNWNMNJ7GpjI7VbEblCPuPo4zE9RFLEBZyNf0bVMMlY3AWUxO4hA1p
DAnQ3QkpZUK8BOEdQpyDWjyhSMKNlAGE6Rg2Q08iQXm81cLfB1MSH7g92QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGVEMKtDkyZdUYA7ZmfRTPB6iWYMB8GA1UdIwQY
MBaAFBY7y9m8k4Saf/33KUwt6d+x6vKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC81NmM3ODItNmU5ZS00ZmM4LWJiOTkt
ZjY0MGFkM2I4Y2Y0LzEvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC81NmM3ODItNmU5ZS00ZmM4LWJiOTktZjY0MGFkM2I4Y2Y0
LzEvRmp2TDJieVRoSnBfX2ZjcFRDM3AzN0hxOG9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRE41uu8
MErm9NKK1gotMA2QyyXAz0CYtTsHLaU5qBK07/Un04wGftXBvWvTPesPEx8KmTi6
Ic4CO2yvdehqmspOnzi7Xfnzb2wgpmF3XWeqGJOC2nHPMXrj6Wj9T+DKAItOXr41
f4W8N33xfLrejLdsbFqGcu6EY+0YvHEvHBmlwnRoXrDJD5PatDT/+tc4eCUpCBqS
Y4K/MdYLBubkQ0z4pcgaxp8bZBHvepTI2+/q3C4+RTbZlnF2kprStvvD+fNhMLnO
VQ2EBrOyXFXlW8RcTDvyB+1PcpA2EZIFSwEpmVrE/yEJBCj+UPAtldGuGURffxs3
D3oaLtJ1ynePOg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:49 2026 by rpki-client