Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
File:                     fpScldDM2ZyF7AchB2RMjMjR4Xg.mft (raw, json)
Hash identifier:          BzZwcDa/NQSy77TJ7mcZJ2vPP/i8+GtGWevoj3E9V+Y=
Subject key identifier:   5A:F2:6F:36:6D:94:D1:40:0B:9C:19:8A:1A:93:E0:AD:82:20:36:12
Authority key identifier: 7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78
Certificate issuer:       /CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
Certificate serial:       019CAC0FDDA80D9CEA4753F88E2ECDC6A41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
Manifest number:          0485
Signing time:             Mon 02 Mar 2026 01:00:46 +0000
Manifest this update:     Mon 02 Mar 2026 01:00:46 +0000
Manifest next update:     Tue 03 Mar 2026 01:00:46 +0000
Files and hashes:         1: fpScldDM2ZyF7AchB2RMjMjR4Xg.crl (hash: NG4QMPsfMpdahd281AqdAQjL4XUA+PhrWfr4jII0VtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:0f:dd:a8:0d:9c:ea:47:53:f8:8e:2e:cd:c6:a4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e949c95d0ccd99c85ec072107644c8cc8d1e178
        Validity
            Not Before: Mar  2 01:00:46 2026 GMT
            Not After : Mar  3 01:00:46 2026 GMT
        Subject: CN=5af26f366d94d1400b9c198a1a93e0ad82203612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:e0:b4:b1:1a:9d:1e:77:d1:05:75:39:98:
                    1d:4b:cf:0b:8e:69:eb:b4:62:e2:03:22:f2:86:b2:
                    43:51:26:c2:4a:8b:f1:31:dc:35:55:31:f3:e8:d8:
                    bf:f8:40:2c:dc:b1:8e:54:fb:03:1f:26:f5:9e:1b:
                    a6:0c:70:37:d2:f2:6e:be:16:d5:65:cd:13:f6:b5:
                    72:db:fd:95:e1:69:4f:81:e7:49:03:2d:3a:1b:61:
                    6a:2e:48:08:fe:9b:a5:24:ce:b8:d4:93:27:63:ff:
                    a1:bc:e7:06:7b:71:2d:af:4c:cd:57:20:95:fa:07:
                    d2:1a:f5:ae:51:d6:ad:1b:20:9a:4c:5e:39:a0:b4:
                    b7:1c:fa:2e:84:81:5f:de:06:6e:21:62:1a:94:77:
                    75:ec:37:3c:a8:e0:2e:ea:e4:c0:16:e1:45:a8:f1:
                    dd:a4:0f:cb:5d:fe:4b:e3:ab:c8:eb:17:36:71:80:
                    44:ba:9f:4c:e7:0c:1b:0c:5e:30:b8:8c:a3:0a:5c:
                    52:ec:e0:83:51:15:fb:17:64:47:4f:49:b8:84:79:
                    9a:6e:3d:4d:e7:8a:e5:6b:59:99:b5:e7:20:a6:1a:
                    c9:ba:88:ce:ac:ee:0c:8a:70:61:65:88:34:a6:f2:
                    ed:93:ac:80:f1:46:e6:df:01:2f:98:9e:ef:fe:d2:
                    86:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F2:6F:36:6D:94:D1:40:0B:9C:19:8A:1A:93:E0:AD:82:20:36:12
            X509v3 Authority Key Identifier:
                keyid:7E:94:9C:95:D0:CC:D9:9C:85:EC:07:21:07:64:4C:8C:C8:D1:E1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpScldDM2ZyF7AchB2RMjMjR4Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/988ce5-84ac-42b7-b612-dd8f6528ec11/1/fpScldDM2ZyF7AchB2RMjMjR4Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:92:08:96:22:1d:81:34:b5:b0:41:1a:e3:f0:6f:b9:13:95:
         bf:06:13:6e:78:32:d4:da:e4:00:40:71:5d:0e:62:9f:23:4e:
         bc:40:6e:9b:c4:fb:17:65:66:b2:c4:ce:23:b1:4d:33:0c:59:
         67:8c:21:e6:60:57:36:84:77:77:a6:cb:64:80:be:7c:70:98:
         36:60:58:e2:a0:a4:6b:58:1c:52:83:17:b3:91:00:ea:06:02:
         04:10:68:2f:f5:a0:94:e5:64:73:b0:2d:b0:f7:84:f6:c2:45:
         53:14:a1:62:9c:c6:d9:34:b1:d5:6b:fc:2d:27:e1:4b:d6:59:
         7f:c8:dd:e1:5f:58:53:be:b3:41:c7:a6:0f:fe:35:49:a5:b2:
         db:cb:42:6b:45:fc:92:34:89:75:71:5f:8b:75:6b:43:00:59:
         17:bf:cb:ce:f1:da:f4:43:e7:97:94:7f:12:2c:73:20:80:f5:
         c7:8c:af:ca:5a:ec:93:67:69:8f:9b:79:22:7b:9f:4e:19:8b:
         03:cb:18:fb:85:50:8a:23:3a:17:15:c5:5c:f6:29:41:63:10:
         fe:04:e2:25:f2:bb:9f:c0:d0:f3:48:22:2e:14:48:e1:d4:ff:
         ef:29:42:b0:4e:02:4a:8e:b7:08:43:21:35:57:37:94:89:00:
         06:f2:c2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:41:45 2026 by rpki-client