Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
File:                     FjvL2byThJp__fcpTC3p37Hq8oM.mft (raw, json)
Hash identifier:          dwpFvXbA5a8JyoV/oizh+U7eM9Abz9dIXe4BErZmsw4=
Subject key identifier:   10:DD:C1:7D:C2:43:25:8A:E5:73:E2:48:41:C5:C6:D2:5F:9F:C1:53
Authority key identifier: 16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83
Certificate issuer:       /CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
Certificate serial:       019D98F411417DD7FF6905D010C388DF8225
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
Manifest number:          0A8F
Signing time:             Fri 17 Apr 2026 01:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:25 +0000
Files and hashes:         1: 1Z4EQZv8pw305qtI7QN_PKdHZJE.roa (hash: xOHVIxkvcYwrKOFM5nVGP5q212Wgzb4Q6U3ZxUHbKh0=)
                          2: FjvL2byThJp__fcpTC3p37Hq8oM.crl (hash: X4Qxh+v+K0dxhRx5CrVL6zs0Qg8Xn60x4KpQAS/Hdks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:11:41:7d:d7:ff:69:05:d0:10:c3:88:df:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163bcbd9bc93849a7ffdf7294c2de9dfb1eaf283
        Validity
            Not Before: Apr 17 01:00:25 2026 GMT
            Not After : Apr 18 01:00:25 2026 GMT
        Subject: CN=10ddc17dc243258ae573e24841c5c6d25f9fc153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b7:17:dc:2a:fa:d5:67:df:bf:1a:29:67:15:
                    1e:96:93:2b:c3:13:56:1e:8a:58:9e:76:27:96:eb:
                    6c:c0:c5:84:ba:6d:73:6a:53:05:15:a1:88:f9:d7:
                    f9:b9:e0:b9:da:0c:71:72:4f:56:bf:af:9d:64:56:
                    bb:fb:79:96:8a:12:40:9a:e5:de:e9:8e:d3:f5:cc:
                    e9:96:ba:f6:b9:b2:7b:b5:91:6f:9e:53:cd:94:d5:
                    0f:e4:3c:62:c1:ea:de:35:fb:14:dc:3e:f1:37:b4:
                    3a:e6:31:fc:31:d3:e2:61:a1:54:32:ad:c3:71:b1:
                    66:57:5d:05:59:bb:90:a8:5e:5f:c7:10:7e:b7:98:
                    04:d9:06:68:e6:f7:e1:1e:88:7d:58:f7:0d:7c:70:
                    ca:5b:55:1a:0b:94:66:3e:ed:13:2e:d9:8b:da:55:
                    ab:f4:d0:ea:19:61:98:d1:f5:c7:a4:31:c9:c2:df:
                    8e:e0:b6:67:2f:d9:b6:38:15:44:91:ae:c3:be:0c:
                    7d:a0:f3:55:7c:6e:85:0f:11:4d:6c:3f:32:10:b2:
                    15:e9:de:64:ea:48:98:bd:2d:f5:80:da:b1:4d:a5:
                    bd:1a:3f:58:05:21:27:27:d3:92:a3:85:d2:48:76:
                    b6:69:5d:fb:bb:32:fc:c9:d4:11:ec:6a:7e:e1:04:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DD:C1:7D:C2:43:25:8A:E5:73:E2:48:41:C5:C6:D2:5F:9F:C1:53
            X509v3 Authority Key Identifier:
                keyid:16:3B:CB:D9:BC:93:84:9A:7F:FD:F7:29:4C:2D:E9:DF:B1:EA:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjvL2byThJp__fcpTC3p37Hq8oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/56c782-6e9e-4fc8-bb99-f640ad3b8cf4/1/FjvL2byThJp__fcpTC3p37Hq8oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:d5:fe:f8:15:24:a1:f7:59:49:06:f9:9e:a1:82:7a:2d:
         1a:c0:27:56:28:88:b7:ac:53:13:2d:5f:90:36:f3:fe:75:12:
         13:f0:8d:aa:c3:c2:91:25:54:8a:d7:58:a4:da:b7:5c:59:86:
         2b:e6:72:e8:7b:0d:af:64:c4:f7:5f:06:f6:2f:43:ca:36:a0:
         0d:7e:5f:3b:ae:87:7f:b8:c8:b7:4c:67:6b:77:ea:0a:57:4d:
         cc:a6:31:1b:f0:f1:50:46:70:c7:04:ea:66:f2:c8:c7:9c:d1:
         6a:a1:99:7e:ff:dd:2b:2b:fb:88:61:5b:09:c6:7b:2b:37:6d:
         11:71:db:09:5b:24:f3:f4:64:a3:a1:e6:53:f1:70:fb:13:a2:
         23:1c:34:2a:03:13:91:dc:b7:95:74:0f:93:ba:48:8e:76:de:
         35:20:16:08:20:d2:42:d5:fa:a5:1d:00:24:48:4c:6e:ec:34:
         ce:fb:b7:53:75:12:02:7c:ef:c2:2a:b6:0f:e4:95:3c:82:b9:
         f7:33:f8:ab:16:79:f0:ca:23:18:2d:61:e5:18:d0:b3:99:a0:
         91:92:19:d3:7c:e4:d1:de:25:11:f2:27:c9:0f:e6:32:6f:d0:
         98:71:aa:9f:6d:26:91:8e:47:6a:04:34:9f:e7:81:62:f7:15:
         b0:95:51:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:19:27 2026 by rpki-client