Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File:                     4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier:          +FOGHqjWdnWbhJfO9VMLuMcp4Cf2oPT0HtughRtooe0=
Subject key identifier:   FA:DE:23:48:D0:DD:FC:16:70:18:8F:52:C9:BE:70:8D:5E:C9:89:DB
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer:       /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial:       019CACB4F71DFEEDB798A834C12315CCF336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number:          07A6
Signing time:             Mon 02 Mar 2026 04:01:06 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:06 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:06 +0000
Files and hashes:         1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: RLNdAn1MDceajmvCXuAbFOqJ62S8iZX1g6PBKnwTtWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b4:f7:1d:fe:ed:b7:98:a8:34:c1:23:15:cc:f3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
        Validity
            Not Before: Mar  2 04:01:06 2026 GMT
            Not After : Mar  3 04:01:06 2026 GMT
        Subject: CN=fade2348d0ddfc1670188f52c9be708d5ec989db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b0:a6:a9:61:55:a9:87:91:9a:6b:06:41:38:
                    1b:0a:e4:d3:1d:6b:a9:43:9c:29:dc:cf:c4:5f:5a:
                    5a:22:f2:43:a2:1d:64:e5:4f:a7:80:10:0d:6a:0d:
                    2f:47:e8:5d:27:96:ab:30:af:2c:f5:25:6a:8a:6e:
                    38:db:d1:61:d0:48:76:3a:2d:ff:ce:99:55:3f:28:
                    fb:cd:c8:7e:10:9c:74:19:69:39:89:53:8b:87:aa:
                    22:29:f9:52:c4:4c:99:ac:b7:47:9f:04:86:d0:0a:
                    ff:af:26:ff:89:03:7e:b8:89:e0:23:9d:6d:44:9b:
                    15:d4:73:e5:01:79:b7:16:1b:32:8d:22:07:d4:55:
                    d3:00:6b:7e:51:8a:08:9e:d6:89:af:85:48:04:f8:
                    8d:32:74:fe:da:89:60:ed:3d:8a:a1:17:33:3e:e8:
                    53:c7:1f:49:52:6c:d6:10:d7:0b:0d:32:12:4a:8d:
                    9e:3b:76:f5:a0:d8:af:6e:0f:a4:9b:83:2a:3d:57:
                    0d:a5:0c:c8:7f:05:db:d1:de:45:f5:db:f1:59:00:
                    7a:95:7d:06:2a:e9:67:e4:00:00:91:e8:84:1a:3a:
                    17:5b:dd:e5:4b:18:ae:0f:a2:77:48:21:71:97:6d:
                    1f:f2:41:ba:1c:1d:b7:31:f7:e2:d7:e3:ae:88:7d:
                    f8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DE:23:48:D0:DD:FC:16:70:18:8F:52:C9:BE:70:8D:5E:C9:89:DB
            X509v3 Authority Key Identifier:
                keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7a:02:f9:cf:57:1d:3a:40:d8:05:dc:f4:28:43:1f:83:5c:
         79:cb:89:bf:b6:cd:47:35:0a:73:bb:0f:b3:7e:38:38:a9:a0:
         39:77:4d:05:fb:fa:a2:02:c4:36:fd:ae:99:7e:88:18:bb:54:
         3d:1f:55:65:d9:55:26:db:db:6f:51:62:d7:b1:3c:8c:63:a8:
         d4:b5:35:16:09:57:d9:14:f8:95:13:fb:32:b2:de:58:9f:b9:
         6b:ca:b4:4c:ee:3d:67:60:f0:19:5d:17:61:97:52:27:71:c3:
         cc:aa:b1:09:57:86:7b:fe:85:24:68:64:99:23:ca:93:1f:3b:
         dc:c1:e6:f3:65:2a:7f:b2:59:2e:f6:12:34:5a:28:9f:ed:77:
         f7:46:03:27:5a:2d:d2:09:75:6b:0c:61:eb:2a:af:3f:6b:6c:
         54:25:ce:ca:44:1e:54:f2:20:f4:08:64:60:fc:29:48:5c:88:
         a0:be:8f:4c:8f:84:f8:31:00:d0:40:81:11:e3:46:50:6b:7b:
         cb:00:08:4d:f9:d1:3f:10:45:1e:4c:44:23:25:b1:c9:f2:b9:
         f2:fc:7a:45:d4:36:53:d4:98:f1:76:3d:ef:6c:cc:4f:bc:e2:
         dc:f9:c0:14:df:5e:dc:b2:a5:17:2a:7f:40:97:67:8a:23:43:
         b3:9e:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:26 2026 by rpki-client