Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
File:                     FbpmvA_Dsmut1y-1u4OHttvDP3c.mft (raw, json)
Hash identifier:          +86gxszxy9KWks0nrKqk/aQnECPxTEHdDxqgESSME68=
Subject key identifier:   03:26:9A:0D:C7:0C:90:A4:DA:61:DE:46:C5:5A:C2:FF:DF:F3:A2:4C
Authority key identifier: 15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77
Certificate issuer:       /CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
Certificate serial:       01A0C58DF571A30A6080036F825F59EDD067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
Manifest number:          1A63
Signing time:             Mon 21 Sep 2026 20:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:09 +0000
Files and hashes:         1: 6g11HCWih6xhf9SlvMLJyhLpoE0.roa (hash: FIcTMSvlxxnAdPTeSGaqwR2LwE13J2mTc4piMqjBVTU=)
                          2: FbpmvA_Dsmut1y-1u4OHttvDP3c.crl (hash: ioG37ny+BQNaAk48i/R5OgbZWc8Wue9anYtEVJaC9Iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8d:f5:71:a3:0a:60:80:03:6f:82:5f:59:ed:d0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ba66bc0fc3b26badd72fb5bb8387b6dbc33f77
        Validity
            Not Before: Sep 21 20:00:09 2026 GMT
            Not After : Sep 22 20:00:09 2026 GMT
        Subject: CN=03269a0dc70c90a4da61de46c55ac2ffdff3a24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:71:21:4b:3c:95:5f:db:d9:0c:ef:35:05:
                    9a:c4:68:b5:0d:95:54:ab:a8:f7:6c:6f:f6:b4:51:
                    df:34:f1:e2:68:4d:56:73:37:2f:89:36:86:21:f7:
                    99:d7:82:fb:b2:4c:ff:8f:86:ef:4d:6f:52:7e:77:
                    14:e3:34:2d:96:6e:ec:6a:fa:bd:30:5c:15:e0:c0:
                    12:da:e9:5c:62:3d:6a:91:5b:4d:e8:6f:34:1e:03:
                    06:b6:0d:df:72:c4:6f:f2:87:71:ee:5a:a4:2c:1d:
                    20:05:d8:58:fd:e0:77:09:b3:59:74:50:d6:cf:53:
                    90:eb:40:62:73:88:b2:cb:b1:76:c9:ac:30:b1:1a:
                    61:90:70:ae:44:2c:08:b4:1d:9b:9e:e5:75:77:2f:
                    03:13:59:68:d5:20:1c:96:2c:0d:36:d9:07:ad:3a:
                    06:65:14:5a:bb:69:ba:92:1b:b5:82:98:55:14:44:
                    43:36:e8:f8:a0:23:f6:ab:93:ff:f5:e0:4d:8e:3a:
                    fd:b0:88:28:4c:97:eb:41:95:13:cb:5c:29:14:03:
                    84:69:70:7d:ab:2c:b5:a2:69:4c:64:88:2f:a4:67:
                    3c:59:05:2a:9a:97:22:44:3b:7a:72:e4:b7:b4:84:
                    fd:aa:06:8b:5d:d1:d8:50:58:76:9a:10:a7:cd:c1:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:26:9A:0D:C7:0C:90:A4:DA:61:DE:46:C5:5A:C2:FF:DF:F3:A2:4C
            X509v3 Authority Key Identifier:
                keyid:15:BA:66:BC:0F:C3:B2:6B:AD:D7:2F:B5:BB:83:87:B6:DB:C3:3F:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbpmvA_Dsmut1y-1u4OHttvDP3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2e267e-8949-4318-8333-c1784dfd6f79/1/FbpmvA_Dsmut1y-1u4OHttvDP3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:32:2c:af:54:c6:fa:1b:66:9f:09:36:8c:63:8a:07:53:
         51:67:a2:a2:aa:c4:ef:6f:f5:b8:3c:df:1b:66:6a:4f:72:55:
         8b:40:51:39:1b:39:c8:d7:a6:f4:ab:df:bc:43:bd:14:fc:c1:
         02:f8:9f:e4:d6:e7:49:86:32:80:81:05:c6:f7:da:b0:87:8f:
         ae:41:e1:8c:5e:c9:19:aa:80:b8:cc:01:e1:f9:b2:53:fe:df:
         40:f0:3b:f6:61:f9:8d:0e:44:73:63:34:cb:25:d0:50:7d:cf:
         d3:76:7d:2f:05:76:bc:d2:d1:07:4f:79:c3:cf:69:f4:7b:0e:
         18:5d:98:e4:d4:7b:ad:28:69:0d:e4:96:1c:e9:33:4d:a9:60:
         64:32:9b:c4:f6:18:f7:f1:5b:72:3b:d7:a2:51:71:b8:93:1a:
         38:f2:c1:87:cd:e9:e4:03:92:e3:fa:e7:79:a8:f9:70:07:35:
         66:6a:48:8a:e2:c3:ec:6c:23:db:ab:b6:5a:7b:d5:95:83:75:
         10:66:9c:a9:1a:6b:ed:47:97:51:45:6e:5e:0e:d4:0f:b2:62:
         6d:c3:0d:96:1c:d1:0f:6d:85:53:ce:a7:77:75:63:95:75:a7:
         85:fd:61:ed:ea:c9:fe:a3:d4:2c:b4:b7:73:d2:9d:e8:9f:9f:
         9a:f3:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:24:57 2026 by rpki-client