Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          KF8kimvyX5mZFKWl1RmUIh6glorfToCmLC5zsok70wY=
Subject key identifier:   4A:9D:F2:E6:36:E3:BF:13:6E:75:E0:B8:9F:99:80:07:7D:C8:84:C2
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       019D98BD9ADF11E3929241B0EF8E397865EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          0376
Signing time:             Fri 17 Apr 2026 00:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:55 +0000
Files and hashes:         1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: 7l/a0I61qEJ2jSxVtJ2BIgOJKk/9vcxGszS+O6039a0=)
                          2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:9a:df:11:e3:92:92:41:b0:ef:8e:39:78:65:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Apr 17 00:00:55 2026 GMT
            Not After : Apr 18 00:00:55 2026 GMT
        Subject: CN=4a9df2e636e3bf136e75e0b89f9980077dc884c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:01:74:1e:ed:60:fc:7b:54:c4:e0:1f:2b:9d:
                    b7:d3:e8:47:da:dd:c3:f5:d7:12:82:97:26:5a:c1:
                    48:10:0a:ec:c1:84:df:3f:f2:6e:49:0d:b9:83:d5:
                    ba:fe:01:c3:ea:34:a0:4a:bf:4d:48:ab:30:6e:96:
                    ed:c0:7f:98:b2:c3:3c:b5:c1:d1:25:0f:0e:b2:6b:
                    8a:a3:11:04:a3:2a:5d:75:4d:1f:06:42:be:ee:4c:
                    2f:6a:6f:e4:23:ef:c6:19:17:ee:0f:eb:60:87:0f:
                    7f:cf:6a:f5:f0:00:77:8d:93:e2:73:96:28:a0:3a:
                    a4:cd:a5:21:60:29:d2:52:96:35:00:dd:81:bb:61:
                    57:82:73:bc:3a:48:24:7b:01:9f:a0:a6:7c:49:52:
                    64:a1:e4:23:7d:04:c5:51:3f:0f:a7:69:21:9b:5e:
                    f3:c2:0e:01:55:e2:0c:7e:33:b9:db:81:9f:42:25:
                    54:17:81:e8:50:6e:60:d1:88:19:ab:4c:c3:38:90:
                    7a:2d:89:e3:62:22:68:f9:14:35:1a:4a:89:3a:97:
                    d9:8c:e0:a7:25:51:a2:2b:a9:90:c0:b3:6a:5d:a2:
                    d1:b1:52:6e:3b:98:b6:fd:f2:ae:af:81:d7:43:cb:
                    bc:ca:16:05:1c:23:25:95:19:51:a1:4f:2f:9e:af:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:F2:E6:36:E3:BF:13:6E:75:E0:B8:9F:99:80:07:7D:C8:84:C2
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:98:ea:c9:15:79:6e:7c:5f:98:72:17:b1:a9:97:6a:f0:d2:
         9a:ed:57:bd:00:4b:cf:69:a9:7a:56:d9:71:51:0b:8e:be:27:
         b9:3c:1a:ee:ab:84:5f:c3:64:22:dc:fc:04:d5:62:a1:87:8c:
         80:92:73:35:66:de:70:ae:4b:34:17:86:cc:ca:6b:33:65:67:
         f8:41:b9:5f:aa:a2:5e:b2:a5:20:5a:e3:59:63:36:d6:e0:be:
         e7:1c:19:35:c2:5a:81:91:f5:c8:d3:a4:74:ad:f8:6d:bc:62:
         ea:56:01:14:95:7a:9f:b9:7b:10:52:e9:f9:f8:6a:cb:f0:8e:
         f5:ac:f8:33:2b:aa:b6:1e:76:7c:1c:10:2c:b7:71:08:24:11:
         37:0b:6c:b9:cc:90:92:ae:1d:8c:d0:0c:54:b0:e2:c5:0d:cd:
         ed:83:fd:64:f0:c7:bd:36:67:0d:58:ec:b4:6e:f2:e0:96:db:
         a0:f8:50:5d:ea:4a:e3:d4:42:d2:3c:44:e3:42:30:e0:b4:bc:
         f8:e9:72:1a:50:b1:a3:f6:18:fb:09:c3:32:ed:8b:09:c5:57:
         63:c5:c9:60:95:65:81:0e:bb:80:2c:d9:09:e1:85:a8:74:58:
         7b:7d:7a:c8:ae:3b:b0:94:cc:fc:ff:35:50:65:79:f0:7f:62:
         58:b4:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:11:36 2026 by rpki-client