Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
File:                     FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json)
Hash identifier:          T26unanxyH3GwOb8jVBY2aPuhELkGBz7CJUKYVA25v0=
Subject key identifier:   EB:E9:3E:68:70:F1:8E:31:90:B4:BC:BF:59:7A:2F:94:67:89:8B:01
Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F
Certificate issuer:       /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
Certificate serial:       019D984FF96ECEBA8855E0B2BCFC83540EE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
Manifest number:          0D3E
Signing time:             Thu 16 Apr 2026 22:01:11 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:11 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:11 +0000
Files and hashes:         1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: w3nUvU9uKc0FM6k5c3kaqWlQlUIl4A2UD+S4FRIu2xk=)
                          2: mpJtsbgETmC7dBt4ggwDy82h6R0.roa (hash: E+0fFewOuAbiSOJJdk0VjGz9UYn9lB3tMo/+quCRNnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:4f:f9:6e:ce:ba:88:55:e0:b2:bc:fc:83:54:0e:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f
        Validity
            Not Before: Apr 16 22:01:11 2026 GMT
            Not After : Apr 17 22:01:11 2026 GMT
        Subject: CN=ebe93e6870f18e3190b4bcbf597a2f9467898b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f4:aa:4f:af:82:a1:b1:a0:9f:15:f6:d9:bf:
                    72:87:15:c1:ae:57:c3:f6:c1:ac:bd:5a:96:d2:5f:
                    ce:1d:2b:6a:54:28:3a:6a:73:13:69:ba:78:55:f8:
                    0f:99:c7:b8:a7:34:b7:eb:10:1b:c0:a8:32:d2:a5:
                    e5:1f:d2:d3:80:8f:36:6c:c7:f9:d3:ca:51:95:96:
                    da:cb:4c:d1:f4:ba:78:69:0b:39:e4:8d:73:14:33:
                    b0:61:d8:b7:7d:ed:c7:5b:2d:5b:b4:93:bd:81:5d:
                    b6:32:cf:07:e3:04:d8:94:ce:0a:a4:9a:ff:5e:b2:
                    06:2a:29:cc:3c:dc:34:c0:03:42:37:c4:2c:c5:d0:
                    1a:76:a3:5a:93:9b:0a:65:b9:4d:50:af:8d:77:e0:
                    1e:c2:cf:56:46:41:10:a3:40:97:44:40:92:e6:ec:
                    7f:ec:b6:c7:2a:e3:da:c9:71:26:7c:5d:71:22:20:
                    ff:6e:72:05:11:6d:19:0c:e1:b7:b7:b4:19:d3:73:
                    63:af:7c:f4:64:34:e1:15:0c:42:59:7d:b7:0e:37:
                    ca:b3:92:b5:09:b9:e7:36:f1:0f:02:2e:05:16:f8:
                    24:d3:f3:b4:7c:34:3b:e2:ef:eb:ab:1e:ec:cb:78:
                    ff:b8:29:94:62:62:a4:62:d3:17:a1:aa:24:1f:c7:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E9:3E:68:70:F1:8E:31:90:B4:BC:BF:59:7A:2F:94:67:89:8B:01
            X509v3 Authority Key Identifier:
                keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b9:46:e0:d1:73:4a:84:c1:2c:d4:8a:e9:9a:b5:64:a1:16:
         98:da:93:28:4b:d3:9d:4a:37:45:a7:de:f7:07:f0:21:67:38:
         36:1d:1f:cc:7c:bf:3c:be:88:e7:f2:a4:dc:85:25:7a:89:f0:
         e9:ff:0f:d0:b8:c2:09:84:08:6d:f5:b4:1a:eb:87:3c:fb:82:
         85:ec:2e:47:6c:80:59:49:45:3d:48:2a:38:8b:1b:32:2c:68:
         98:35:cc:65:bc:0e:5d:c0:f7:cf:40:ec:85:61:e0:be:3a:33:
         af:6c:51:6c:5e:07:ba:94:7f:a9:2a:ee:e6:b8:ea:47:45:24:
         51:fc:71:a7:28:94:0e:c3:de:fa:14:02:70:7d:e1:a9:c0:68:
         70:9a:4f:3f:7b:ed:4b:89:9c:eb:c2:c1:ef:9b:6d:8a:e4:37:
         a2:17:1a:de:10:7d:ea:8c:04:b7:6b:73:bd:2d:f2:56:cb:3c:
         e2:1a:f4:f2:0f:86:2e:6c:ba:6a:2d:06:1b:41:85:88:84:2f:
         db:ac:f3:e2:2e:fb:43:ee:72:b2:bb:bb:6c:61:84:a7:0b:cb:
         f5:b0:90:d8:d2:3e:65:40:be:e1:6b:ed:a5:30:5c:b8:e8:0e:
         8c:f6:fb:81:7a:c0:24:f3:8e:b0:eb:e2:68:9b:76:90:b7:c3:
         87:90:87:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:19 2026 by rpki-client