Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier:          m4xKg1UDhEC6uH3GqjxqTmV/K70cgZbsPidzGJTwE0I=
Subject key identifier:   21:D4:F3:D7:49:2D:30:46:DC:6D:E6:A6:77:A1:28:E8:8E:04:B6:2B
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       019CAB6B210BE33281550D1BC5C0A6CE3DFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number:          0F32
Signing time:             Sun 01 Mar 2026 22:00:50 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:50 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:50 +0000
Files and hashes:         1: E-Y_gwpxgwRrl1lIC6Qt5FVODDg.roa (hash: aqMe+D+uy8WqFD3eIJAUxX8y1d5aAQPp+/6GTJIpBpo=)
                          2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: IBtrqtwjwt3mYJM78i36xcn6/yc6cLuBgIiX02JV3jI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:21:0b:e3:32:81:55:0d:1b:c5:c0:a6:ce:3d:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Mar  1 22:00:50 2026 GMT
            Not After : Mar  2 22:00:50 2026 GMT
        Subject: CN=21d4f3d7492d3046dc6de6a677a128e88e04b62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e7:e3:cc:81:59:74:86:c4:87:89:d2:5f:da:
                    9a:bf:c9:ea:1b:77:0f:80:1d:8d:2c:1f:92:83:24:
                    b7:88:a5:99:9c:90:4d:36:85:53:84:42:89:b6:e8:
                    fc:3f:ba:72:4c:35:fa:02:5c:78:fe:48:8d:c7:62:
                    55:c4:2a:1a:76:9d:aa:4e:97:f2:e7:df:21:6f:d6:
                    cc:0e:68:f2:a2:e8:3d:d5:b4:75:89:3b:b9:7f:33:
                    65:a6:b8:df:fc:29:6c:4c:d4:c6:96:a7:24:bd:5c:
                    2b:0b:47:cf:31:8b:a0:88:58:8d:40:02:ab:aa:4c:
                    6f:5d:0c:95:3c:d6:6f:ff:8b:f1:4a:e9:ff:7e:1c:
                    2c:18:c2:41:dc:8d:0e:64:06:72:c5:a6:aa:22:be:
                    d5:24:5b:2c:e3:a4:d2:f9:05:4e:a6:cf:ed:47:ff:
                    25:a6:d1:32:02:81:08:39:d3:a3:21:46:71:ed:ea:
                    3a:40:2e:74:0c:3d:12:aa:8e:7b:d4:3c:fe:2b:f5:
                    e5:24:52:21:e2:d6:2a:7f:37:ba:a8:1d:70:37:cd:
                    95:2e:d3:b3:a5:14:e6:5c:27:93:72:c6:3a:c8:d2:
                    cf:da:10:13:cb:8c:e2:47:0e:77:13:ff:15:c3:38:
                    41:fe:a1:c8:13:9c:78:8d:5e:15:18:82:3f:5a:3f:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D4:F3:D7:49:2D:30:46:DC:6D:E6:A6:77:A1:28:E8:8E:04:B6:2B
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:8d:7d:ea:08:a8:e9:82:b2:ce:f7:e7:e3:61:ee:70:48:86:
         a1:18:ec:3d:e6:40:47:4a:2f:f1:68:72:8c:39:fa:6e:71:14:
         b6:e7:a7:7d:9b:0e:03:2f:a1:0c:18:4a:c9:56:73:25:82:40:
         de:7d:23:10:97:71:36:d4:8e:01:6a:8b:28:88:e4:e5:69:f7:
         79:7b:3e:64:a5:b4:df:4b:dd:4d:5c:c4:6c:48:53:7b:34:0a:
         b4:f8:e0:06:92:a2:3f:f3:0b:12:a2:6d:b2:8c:c5:4a:fe:1d:
         3a:dc:d9:76:38:20:d7:98:3e:c6:24:38:25:fb:0e:cf:a5:d2:
         3d:11:56:26:4d:54:8e:3b:1c:50:e0:22:c4:31:d4:35:00:f7:
         73:83:f0:2d:ba:5a:54:34:23:5e:b9:75:09:e8:5c:e0:87:65:
         ad:93:f4:7d:c2:bd:4f:66:d0:6e:cf:af:7c:56:b1:4c:bb:af:
         aa:fa:28:99:6e:64:bb:86:20:01:da:10:b3:49:85:f4:ae:31:
         bd:78:96:6f:ca:96:6b:2d:30:79:c0:52:d4:34:5a:2b:ab:3f:
         8a:49:f9:93:e1:ca:42:f8:24:43:35:23:3d:d3:b0:fd:7d:d9:
         2f:51:93:7d:b4:9a:3a:b5:49:e9:0f:f4:d8:6b:1b:a2:cb:ae:
         c9:e8:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:35:13 2026 by rpki-client