Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          ytCt/0DTvSELVNnYahDdVIFv06UOj4KQKaDceZUwwaI=
Subject key identifier:   14:CE:CD:E6:D2:51:4F:BC:00:66:4D:4D:E2:71:D2:BA:32:F9:6C:A2
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019CACB508CB5B306DBF59B28C4AD2C6D814
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0E3E
Signing time:             Mon 02 Mar 2026 04:01:11 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:11 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:11 +0000
Files and hashes:         1: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (hash: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ=)
                          2: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: /4osvbudX0aBPqGwX9zFiP+Tp6oFt6nah6AJFqeg1hY=)
                          3: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          4: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:08:cb:5b:30:6d:bf:59:b2:8c:4a:d2:c6:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Mar  2 04:01:11 2026 GMT
            Not After : Mar  3 04:01:11 2026 GMT
        Subject: CN=14cecde6d2514fbc00664d4de271d2ba32f96ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d3:44:10:03:ab:09:11:16:fd:d6:c3:df:40:
                    5e:0f:dc:02:e6:84:6b:87:4b:ff:1e:3c:f7:c3:bc:
                    f5:4e:73:b4:d7:1c:0b:21:b9:4e:ff:04:be:d4:80:
                    10:fa:40:ce:a3:15:cb:a8:55:93:55:15:54:cf:8c:
                    3b:c8:f9:aa:6b:3d:3e:e6:1d:35:5e:eb:5b:11:d7:
                    0d:83:96:3e:18:11:71:1e:26:db:5c:75:bf:d5:eb:
                    ba:f3:7f:5b:97:52:b0:8b:c5:ff:bf:ac:52:9f:80:
                    26:b7:21:16:8b:dd:5f:9c:22:66:cd:33:5b:26:e8:
                    4d:b8:2e:36:17:8c:c9:a4:0a:32:c6:63:0a:aa:79:
                    53:78:83:5c:65:ff:65:94:36:14:eb:4b:55:7c:67:
                    62:02:d2:cb:e7:a9:14:29:0c:d7:bf:0c:84:36:8d:
                    de:33:b0:61:7b:cb:84:c0:d1:af:e3:c0:eb:41:37:
                    cc:70:60:e1:ba:89:cc:0c:bb:92:8e:ba:e1:b9:fb:
                    65:93:60:d9:d8:09:45:45:cd:76:04:49:cf:80:93:
                    8f:9e:af:6b:fd:34:5a:d5:ce:84:c0:6d:67:b6:c8:
                    cf:95:09:d6:d4:bb:09:5d:48:0c:c5:bc:4a:fb:7c:
                    92:74:24:53:00:0f:cb:04:c8:b1:6a:1d:68:96:69:
                    9a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CE:CD:E6:D2:51:4F:BC:00:66:4D:4D:E2:71:D2:BA:32:F9:6C:A2
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:06:8b:10:f8:3e:94:90:80:6c:5a:fc:33:bc:e9:38:7e:d2:
         27:13:14:30:58:ac:78:90:e1:2c:fb:48:41:46:bd:09:e5:c4:
         ed:c3:5d:d8:59:07:4b:60:c7:2c:69:81:3b:50:b1:09:e5:e4:
         64:a9:9d:a1:1f:dd:70:4c:4c:b8:36:be:11:9e:8d:c8:39:01:
         c3:5c:4f:e0:b7:41:e5:6c:ca:d6:f8:ae:f6:aa:5a:93:8c:f3:
         d3:05:05:ad:79:83:1f:51:9b:5d:78:88:3d:52:fa:fb:36:50:
         55:4d:39:45:a8:49:e7:9d:b3:30:51:fb:76:00:1c:ed:2d:2f:
         f6:47:4a:48:d8:34:00:79:05:5f:8c:6d:c1:ac:64:df:da:44:
         f7:0e:d0:f9:d8:01:cf:39:b3:f2:b6:ef:7c:3b:10:57:f4:48:
         52:86:cc:5b:63:18:27:53:76:9c:59:7b:7b:5b:5f:60:b9:00:
         5e:af:a1:ab:62:1b:32:56:8e:16:b1:e0:83:22:2a:0b:1c:1b:
         44:61:a0:71:38:cf:2b:c3:7e:bc:8d:31:f4:4f:fc:ba:64:ec:
         d7:ca:b9:ee:9d:0b:7e:01:9d:fe:23:b9:e3:a4:0a:8b:e0:da:
         55:31:54:04:2e:39:57:b7:f9:ac:66:d9:a7:45:ce:41:cb:c1:
         68:ca:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:38 2026 by rpki-client