Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
File:                     FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json)
Hash identifier:          8PtFpxnW8wUKdNBgQ4FtWbAlskmYWo2pkLCrAb9Ij8A=
Subject key identifier:   C3:77:FB:47:96:64:4E:0F:EF:EF:53:8C:AF:5B:9A:B8:5A:98:AB:7B
Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B
Certificate issuer:       /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
Certificate serial:       019DA45422D804FAE3FA9294641D61EC09AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
Manifest number:          18C3
Signing time:             Sun 19 Apr 2026 06:01:10 +0000
Manifest this update:     Sun 19 Apr 2026 06:01:10 +0000
Manifest next update:     Mon 20 Apr 2026 06:01:10 +0000
Files and hashes:         1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: RwGQwm/kiEtFIirmbxAmU5ZJnvyVdbMFkpniPvZx/wg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:54:22:d8:04:fa:e3:fa:92:94:64:1d:61:ec:09:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b
        Validity
            Not Before: Apr 19 06:01:10 2026 GMT
            Not After : Apr 20 06:01:10 2026 GMT
        Subject: CN=c377fb4796644e0fefef538caf5b9ab85a98ab7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:0b:9c:63:2e:dc:f8:af:e9:52:fc:09:7a:
                    c9:fe:4b:cf:14:ee:35:b1:e6:1e:d7:9d:3f:95:66:
                    21:43:b1:ff:31:c2:e5:0f:b1:73:b0:cf:52:45:c2:
                    99:f1:ee:3d:f9:c8:12:0d:c4:17:02:eb:bc:d3:34:
                    cc:76:96:d2:d5:85:9b:15:51:32:fc:f6:f9:e3:66:
                    9b:50:89:25:4d:7e:b9:0c:9a:ae:27:45:ce:55:86:
                    15:03:da:10:0a:35:65:ee:b7:ba:35:0a:bf:b9:24:
                    d5:98:fe:14:24:aa:9c:f0:9a:38:72:5d:5c:65:1b:
                    e7:6b:75:74:c6:6c:87:b3:c7:7f:65:89:b3:f4:79:
                    4c:52:e6:b1:87:57:53:1c:8d:21:9e:83:aa:61:11:
                    0e:8b:16:ef:78:2a:16:7b:1c:51:df:5a:d8:6c:55:
                    60:e4:58:56:df:b6:60:bc:9c:f7:fe:10:d5:66:ba:
                    ea:55:8a:a2:58:71:e8:8b:89:e9:8a:77:b0:21:50:
                    c2:de:25:c4:b1:5e:ec:a1:db:77:f9:83:8f:60:d4:
                    54:8e:a0:72:90:d4:45:29:0d:af:21:3e:f7:41:04:
                    0e:de:8c:aa:af:4f:2a:7f:9e:02:3a:f9:6e:8a:bc:
                    7b:39:5b:42:74:d8:8e:8c:c0:de:9e:32:06:ff:9d:
                    ae:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:77:FB:47:96:64:4E:0F:EF:EF:53:8C:AF:5B:9A:B8:5A:98:AB:7B
            X509v3 Authority Key Identifier:
                keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:72:8b:67:56:e0:73:7c:a9:df:02:bc:ae:84:09:ca:2e:a3:
         12:46:5d:15:ca:ad:0f:73:5a:35:39:ba:60:ba:f4:57:c3:9f:
         47:b0:c4:f2:24:80:6b:cb:ce:d1:aa:ba:1e:ff:dd:0f:78:de:
         97:08:4e:d1:f8:57:8c:86:60:50:24:0f:66:e7:4c:f0:69:59:
         5b:ee:0a:08:c2:3a:53:bb:a2:33:41:9c:46:01:56:d3:18:3d:
         e1:db:3f:5e:c8:57:68:18:29:ef:ab:1e:12:32:de:cc:ce:f6:
         fe:ce:cb:5b:54:bc:ca:77:f6:26:85:f0:98:c2:31:09:42:72:
         81:12:9a:5a:f9:4b:32:6f:56:f0:92:06:c0:63:b1:6b:a5:f9:
         0b:91:b1:b4:6c:ab:11:05:c4:88:75:80:99:fd:6a:6f:73:d2:
         88:32:75:7e:38:a9:85:85:27:ad:66:46:02:ee:5d:75:58:57:
         da:10:c1:82:f8:9c:cc:cd:01:96:6b:da:fb:90:68:1e:48:66:
         87:63:ae:7a:60:1d:8e:51:10:7d:2e:19:42:6c:dd:90:3e:6b:
         e6:15:bd:42:c4:e1:49:aa:41:fa:a1:1d:76:0d:30:50:cc:c2:
         14:c4:06:5c:a7:ce:ba:4a:5c:2a:46:60:f0:4d:2c:d6:47:e7:
         b6:bb:c5:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kVCLYBPrj+pKUZB1h7AmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl
NDZlNmIwHhcNMjYwNDE5MDYwMTEwWhcNMjYwNDIwMDYwMTEwWjAzMTEwLwYDVQQD
EyhjMzc3ZmI0Nzk2NjQ0ZTBmZWZlZjUzOGNhZjViOWFiODVhOThhYjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ0LnGMu3Piv6VL8CXrJ/kvPFO41
seYe150/lWYhQ7H/McLlD7FzsM9SRcKZ8e49+cgSDcQXAuu80zTMdpbS1YWbFVEy
/Pb542abUIklTX65DJquJ0XOVYYVA9oQCjVl7re6NQq/uSTVmP4UJKqc8Jo4cl1c
ZRvna3V0xmyHs8d/ZYmz9HlMUuaxh1dTHI0hnoOqYREOixbveCoWexxR31rYbFVg
5FhW37ZgvJz3/hDVZrrqVYqiWHHoi4npinewIVDC3iXEsV7sodt3+YOPYNRUjqBy
kNRFKQ2vIT73QQQO3oyqr08qf54COvluirx7OVtCdNiOjMDenjIG/52uCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMN3+0eWZE4P7+9TjK9bmrhamKt7MB8GA1UdIwQY
MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt
YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5
LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHKLZ1bg
c3yp3wK8roQJyi6jEkZdFcqtD3NaNTm6YLr0V8OfR7DE8iSAa8vO0aq6Hv/dD3je
lwhO0fhXjIZgUCQPZudM8GlZW+4KCMI6U7uiM0GcRgFW0xg94ds/XshXaBgp76se
EjLezM72/s7LW1S8ynf2JoXwmMIxCUJygRKaWvlLMm9W8JIGwGOxa6X5C5GxtGyr
EQXEiHWAmf1qb3PSiDJ1fjiphYUnrWZGAu5ddVhX2hDBgviczM0Blmva+5BoHkhm
h2OuemAdjlEQfS4ZQmzdkD5r5hW9QsThSapB+qEddg0wUMzCFMQGXKfOukpcKkZg
8E0s1kfntrvFSg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:31 2026 by rpki-client