Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File:                     FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier:          YGuDIjq+UMavlGWCmRbgl5ArTXLJ/9MITc9N2HAOsC8=
Subject key identifier:   5E:54:42:9F:59:43:A1:E6:D2:39:B4:A5:25:11:9E:45:62:29:01:8C
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer:       /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial:       019D99624863AECB59A4627B351F3844FC3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number:          0D50
Signing time:             Fri 17 Apr 2026 03:00:48 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:48 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:48 +0000
Files and hashes:         1: DGGg1cwcyckOEj5piFasZLtUpCM.roa (hash: b8NWlcDq3cqXueexrQLS4YXKUPoPYtHevhupgWyi2lA=)
                          2: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: uja+L6Iy2nOkI1AROuAI7ryvPgINwzFLt/v+aS+Akng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:48:63:ae:cb:59:a4:62:7b:35:1f:38:44:fc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
        Validity
            Not Before: Apr 17 03:00:48 2026 GMT
            Not After : Apr 18 03:00:48 2026 GMT
        Subject: CN=5e54429f5943a1e6d239b4a525119e456229018c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:fc:45:1f:a4:8a:ba:fe:6b:0a:f4:7f:0a:
                    0f:51:3d:04:45:d8:f1:24:44:07:c7:66:f2:76:8b:
                    85:ca:4b:76:f5:5c:d3:d8:6d:e1:38:44:1a:fc:ac:
                    3a:1d:89:fc:45:d9:08:3d:24:a9:51:1a:6c:cf:88:
                    0f:83:5a:ec:c8:01:00:2e:b7:84:67:60:7d:73:32:
                    32:2c:0d:02:94:ee:b6:80:51:db:bf:e7:6e:5d:0f:
                    13:af:53:cb:54:d5:86:19:38:c0:80:d3:95:56:ac:
                    3d:52:3a:8d:65:11:ba:95:21:18:95:08:96:4b:cd:
                    22:57:e3:c9:ce:60:71:27:d9:f2:38:ca:8c:68:fb:
                    7d:b9:d8:65:71:56:d7:10:42:40:19:67:c5:dc:60:
                    fb:ff:bb:fb:fa:15:96:69:02:25:84:48:1e:b2:c0:
                    47:b1:32:a0:14:42:ac:f4:2d:f6:ca:c9:3d:e2:69:
                    a6:0d:a3:20:40:de:13:11:fd:2e:17:fc:83:44:74:
                    3f:52:24:76:89:87:65:bb:c5:51:74:22:96:8d:04:
                    43:29:23:03:cf:d6:b5:de:00:37:22:f5:7d:b8:a0:
                    87:83:7d:44:4d:aa:31:05:3b:a1:d2:cf:6b:cb:80:
                    22:c1:15:62:53:c6:cd:9b:1f:93:38:e2:e6:3d:eb:
                    09:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:54:42:9F:59:43:A1:E6:D2:39:B4:A5:25:11:9E:45:62:29:01:8C
            X509v3 Authority Key Identifier:
                keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5e:da:f5:e7:2e:ea:b3:f4:c9:8a:47:1d:de:55:6a:36:1c:
         b7:41:57:9e:a4:aa:53:42:5f:d1:0f:55:33:53:f9:44:cf:3d:
         e7:41:c5:81:0b:a8:03:23:f4:47:da:bd:08:cd:bd:71:2b:96:
         61:61:34:b5:c4:77:46:0b:47:16:8e:e9:ac:c4:d8:02:8a:51:
         4c:6c:24:a1:74:55:7a:01:90:8c:2b:d5:a6:bf:a3:38:7f:df:
         75:4f:4b:f9:78:0f:6d:2e:c8:aa:05:fd:2c:64:b8:88:5c:63:
         53:63:1b:c0:a1:07:5f:e3:a9:02:0f:fc:49:88:a6:ae:55:e7:
         de:6f:59:17:ef:cc:39:26:2d:e5:6f:91:dc:17:4b:b8:fd:1f:
         b5:8c:c6:a6:18:da:38:36:6b:fc:42:f6:fc:0f:f6:cf:5f:42:
         41:37:8d:2e:80:fb:81:27:0f:ca:97:a4:f2:20:a8:07:07:87:
         c1:43:3d:c7:3b:fc:b1:41:1b:19:10:7b:95:32:01:f8:6d:67:
         ed:b2:d3:f0:cc:74:dd:ad:d1:ac:d8:33:9f:35:69:01:b4:ab:
         12:df:27:1a:5b:ea:1f:94:f5:01:98:90:0d:cb:59:fd:be:af:
         da:31:a1:3b:22:8d:49:94:bb:7d:0e:3b:1f:a9:6e:65:82:05:
         16:99:6b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:49 2026 by rpki-client