Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File:                     Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier:          dPykybEiBWHQ3RuknrUaUlW0jWolmhF4kp8QPb+g7+U=
Subject key identifier:   C8:61:DB:4A:95:98:9B:C7:CA:59:4C:B5:2D:14:24:E7:09:DF:35:2C
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer:       /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial:       019CAAC7159B9D193F62301F16E4344D37AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number:          162C
Signing time:             Sun 01 Mar 2026 19:01:39 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:39 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:39 +0000
Files and hashes:         1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: OyjEOqE0M9ItGnc7WrxMYIW31erhBUVDYYYppZvdG5w=)
                          2: b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa (hash: GBEZ8Y0pqF1M+xMOeRWL/nxMJhb8iYsyNvr/SwhBu1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c7:15:9b:9d:19:3f:62:30:1f:16:e4:34:4d:37:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
        Validity
            Not Before: Mar  1 19:01:39 2026 GMT
            Not After : Mar  2 19:01:39 2026 GMT
        Subject: CN=c861db4a95989bc7ca594cb52d1424e709df352c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:9b:c1:57:7a:8f:b9:cc:f6:ae:e3:64:60:
                    84:39:db:ad:4c:bf:e7:1c:0e:d6:48:6f:a9:51:46:
                    54:01:84:6b:0c:80:b0:7d:56:7a:ab:0a:09:d6:17:
                    71:cd:07:3b:f5:97:c9:92:15:8e:84:f9:fc:73:bb:
                    6c:56:7e:78:e9:9c:dd:67:02:c2:59:81:16:e3:74:
                    97:64:f9:3b:cb:60:68:60:b6:6e:2d:2e:e9:13:e1:
                    c6:1b:82:0e:60:43:3c:6d:54:83:9d:6a:4e:49:9f:
                    56:e3:66:d1:5e:81:96:27:07:42:5e:d7:40:ab:30:
                    ef:02:fc:9b:ad:29:0a:60:4a:8b:d5:ac:85:22:05:
                    02:82:02:fc:a5:af:0e:80:c2:2a:fd:7b:d3:f0:6f:
                    ef:c9:27:36:e2:b2:f2:a7:d1:69:93:34:0c:82:62:
                    36:b9:f9:b4:54:09:ae:c3:45:cf:be:b6:14:37:42:
                    c4:5b:5d:e3:63:62:19:ea:a7:e8:7f:f0:9d:e8:5c:
                    d9:68:b8:80:dc:5a:48:fa:92:23:85:7a:e5:80:95:
                    55:80:24:c6:e3:4f:33:26:0d:00:ec:c4:e1:df:c3:
                    7d:98:0d:d1:7e:a8:e5:7d:be:cf:b2:e3:a5:c6:77:
                    24:67:fa:1e:98:5b:0c:96:59:11:b3:ab:5d:99:5f:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:61:DB:4A:95:98:9B:C7:CA:59:4C:B5:2D:14:24:E7:09:DF:35:2C
            X509v3 Authority Key Identifier:
                keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:83:3b:46:15:6c:5a:0c:6b:29:35:7e:04:89:d2:59:80:f6:
         6b:79:46:1b:bf:8e:a7:f2:e1:85:64:25:54:49:08:dd:e2:1e:
         be:43:72:7f:96:2c:ec:e0:cd:7a:d3:6f:6f:f1:16:52:21:b3:
         44:7c:40:d3:ca:49:5d:f4:51:31:c6:29:46:c7:15:bc:01:dd:
         13:f1:f0:60:b2:df:5d:90:05:24:88:cf:b5:d5:4d:3e:cb:c6:
         5c:c0:b0:b7:91:99:42:7a:97:7c:dc:e7:47:de:98:24:7d:49:
         c3:f6:7f:aa:af:6c:e7:81:c3:80:fe:56:ac:1b:3f:c8:bd:57:
         21:29:30:80:8d:e0:43:61:b9:5f:f3:25:7f:11:49:ca:aa:b0:
         90:57:3a:f6:2b:55:95:07:61:44:19:2d:8e:0d:e7:5e:36:90:
         d7:80:85:24:2d:c7:f8:24:b4:7c:fe:7a:82:1d:8f:ab:84:28:
         63:ed:92:7a:e8:be:9d:f0:80:7c:84:62:aa:a9:6d:2b:5e:06:
         45:d5:a6:91:66:53:a2:14:1a:44:1d:7b:59:18:eb:ab:5c:5d:
         b8:c1:24:79:b4:19:7a:05:cd:fb:29:ba:a6:1c:0c:38:50:38:
         07:bc:ea:ab:86:48:6c:52:ce:51:46:2a:e6:08:7f:ba:e2:6c:
         3c:ef:b1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:53 2026 by rpki-client