Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          3cb9faWnrgjn/V+KMJo7pwjuN2AaGU9C6QfHB/1UHPc=
Subject key identifier:   49:3F:FF:A9:E9:6A:87:63:26:2C:78:11:D5:76:F7:E2:A3:40:0C:76
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       019D99CFFB1198DF805A94058B2722EEAD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          0802
Signing time:             Fri 17 Apr 2026 05:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:37 +0000
Files and hashes:         1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: tN45UzAJ1vsFnkIuJ4A+nmyKb7oajNrkkLXSZEuYXog=)
                          2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:fb:11:98:df:80:5a:94:05:8b:27:22:ee:ad:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Apr 17 05:00:37 2026 GMT
            Not After : Apr 18 05:00:37 2026 GMT
        Subject: CN=493fffa9e96a8763262c7811d576f7e2a3400c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6d:68:c1:8f:c7:0f:06:ff:cb:30:08:7e:de:
                    2d:32:b0:56:d9:e2:a9:a0:ff:28:2d:6e:1d:08:23:
                    c9:2c:43:e9:8f:5f:b3:7c:bf:56:de:bd:82:11:a1:
                    52:d0:67:1e:2c:35:70:d2:cd:63:d0:f8:a2:82:a1:
                    9e:1f:f2:a8:f5:76:3a:c2:f7:8a:29:b1:53:30:2f:
                    bb:ed:50:b6:aa:e4:6c:68:bb:a6:f0:d3:0c:3a:c9:
                    2c:42:3c:2a:e3:8d:6f:6b:5c:45:d1:d7:ad:ee:2d:
                    57:33:4a:3c:a3:07:90:cd:87:f7:f1:77:96:71:8e:
                    49:d8:39:f5:a2:13:60:a8:70:e8:0e:98:5a:be:95:
                    55:84:ec:ea:23:9f:e9:1a:e4:bf:50:8e:7c:83:49:
                    27:fb:ec:2e:93:37:42:ac:34:10:7c:7e:c6:a5:8e:
                    9a:ac:47:fd:bd:77:f2:ee:d6:ec:0b:27:61:07:69:
                    34:c6:ec:da:fb:3e:16:76:32:07:39:63:a3:28:7d:
                    97:6b:5b:b4:0a:4f:5a:a0:4e:85:72:7a:3d:d9:cb:
                    21:dc:47:1a:29:9a:cf:53:ad:98:1d:3a:f3:3a:ab:
                    9c:4d:90:25:db:0d:fd:80:da:76:6d:2c:78:22:b9:
                    eb:cb:55:79:d8:f8:c4:ac:bf:06:de:ae:f9:95:dc:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:3F:FF:A9:E9:6A:87:63:26:2C:78:11:D5:76:F7:E2:A3:40:0C:76
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:4f:c2:4a:90:03:50:4e:30:b0:6a:ec:3d:75:0b:cf:8f:
         4f:7b:15:8a:bd:17:30:64:c4:25:c8:fa:2e:38:ee:61:56:3e:
         91:b2:93:ad:8c:f7:51:81:2a:47:f8:d2:22:c2:dc:8c:fd:fd:
         63:55:19:31:d5:a9:44:0c:97:ca:bf:e8:0d:43:ae:2b:1a:21:
         98:2f:bd:99:ab:3c:f6:6d:d2:cc:da:c1:7d:04:cd:61:ac:d8:
         99:a6:60:3d:98:59:c2:bf:34:9d:9f:57:c9:f9:91:8b:5b:55:
         8a:73:b3:0d:b0:77:1d:30:94:39:3b:a3:fd:da:62:d6:e4:c4:
         d4:05:0c:93:52:d4:c8:bf:89:ff:27:9d:7b:0e:6e:d9:bc:52:
         f5:bc:07:37:e7:23:13:4e:94:8c:b2:77:41:b8:28:93:e5:03:
         4f:22:70:f5:23:22:88:45:65:f2:4c:57:21:23:bf:ec:5a:a1:
         a1:74:12:e1:cd:f2:03:ac:27:ca:61:85:19:63:dd:6c:37:4a:
         3e:6e:15:62:d4:bc:0c:85:f1:7b:11:85:be:58:4a:3f:61:5a:
         1e:85:87:a4:47:6c:bd:e2:ff:03:1a:61:b0:23:0a:97:7c:bf:
         85:34:40:ca:7d:28:cf:58:47:28:96:2e:42:62:f3:96:05:b6:
         bc:71:f5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:15 2026 by rpki-client