Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          uFRp2vmmCYRKv2NdkRXEqpog9uX14umFrxImCNGEH78=
Subject key identifier:   1D:52:BE:AD:40:31:B5:E3:D2:46:F6:D2:34:CC:B8:B7:4A:B9:83:54
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019E1D59A491CE850F0824801F744F0DCCD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          1367
Signing time:             Tue 12 May 2026 18:01:14 +0000
Manifest this update:     Tue 12 May 2026 18:01:14 +0000
Manifest next update:     Wed 13 May 2026 18:01:14 +0000
Files and hashes:         1: FcqAiF3EThDIPDgHYMKF7h827Ak.roa (hash: hj1WPPiWdc5Pq1vcNkWnuae//TLNXB25Q0RnmkCQN6M=)
                          2: cLDYz_9Zwwk3zoYCWc3vL36p2Vo.roa (hash: uPEOYCvzSynMBRgZqpFSHcFo4Rr8aojoGV6YDin4A8w=)
                          3: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: 9HdvQgFqxeYJ0LqcUjziIFDKIBaQKfQz6eDSTga0dn4=)
                          4: ojjTeCwITpsroHdqRJmBTDsfojU.roa (hash: VpFG7gODq/AE1339wVlEzI/S3bsYFlFzAzKyeo7uKPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:a4:91:ce:85:0f:08:24:80:1f:74:4f:0d:cc:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: May 12 18:01:14 2026 GMT
            Not After : May 13 18:01:14 2026 GMT
        Subject: CN=1d52bead4031b5e3d246f6d234ccb8b74ab98354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b1:90:61:03:c4:8a:29:61:65:31:86:36:5e:
                    65:5d:5c:23:e5:e8:d2:33:26:d5:e6:49:1a:6c:2d:
                    17:42:7a:d7:df:f2:fd:2f:2a:54:34:30:9c:8d:a5:
                    3f:03:58:ae:0e:42:56:4c:81:6b:17:c3:d6:3f:07:
                    43:fe:d7:50:12:52:32:3c:54:63:3b:e8:0f:0a:84:
                    28:14:b6:02:7a:dc:d6:ef:d4:3f:eb:f5:e6:29:2d:
                    50:49:e5:7d:9a:cc:28:ff:91:cb:ad:db:2f:25:f4:
                    38:19:a4:cc:f1:46:03:c5:5b:c4:c4:bd:c1:4f:91:
                    32:06:96:49:c0:72:06:2d:d4:a3:41:ce:ce:af:2b:
                    cb:7c:06:e9:99:fb:06:ef:fe:bc:45:7e:9f:a8:02:
                    e0:2c:6e:43:25:55:df:45:80:6d:e9:4f:f2:98:4c:
                    58:12:0f:a4:84:cb:db:5e:d9:29:e5:d7:2d:d7:05:
                    1b:b4:b7:b3:37:66:0d:2a:8c:4b:7e:1b:5f:f8:2c:
                    24:1d:a8:2a:d9:c0:e7:d7:94:e7:34:da:00:8e:57:
                    ba:f3:e8:8c:ba:3b:e1:55:7a:50:a6:a4:ea:9d:19:
                    b2:4d:7c:dd:cc:dc:07:d0:fa:97:ba:32:58:53:49:
                    40:9a:c9:06:84:2d:35:0a:25:fd:68:71:21:c1:fa:
                    9f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:52:BE:AD:40:31:B5:E3:D2:46:F6:D2:34:CC:B8:B7:4A:B9:83:54
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:37:e2:42:2c:6f:a5:1f:e0:c1:d0:b4:63:5b:8b:6f:cd:fc:
         b7:b1:3c:0e:0a:28:12:87:13:0d:e2:34:89:7f:ef:47:93:7a:
         22:58:b0:a0:a8:41:61:52:01:8f:bc:bd:36:78:c0:60:f3:f4:
         2b:6a:9f:8f:13:6b:2c:10:20:14:aa:d0:7a:b7:ed:61:93:77:
         07:0a:63:d5:b9:8f:9a:74:b2:23:49:8b:77:14:50:f0:51:5d:
         26:41:8c:5d:73:c7:17:84:f4:62:4c:36:8e:5d:29:8c:d8:97:
         f1:cc:6c:7b:fa:98:c6:14:13:61:e7:ec:77:63:69:c3:75:f0:
         56:7d:22:78:01:ad:36:84:cd:7f:a4:6a:69:ef:01:85:b0:35:
         09:8d:32:42:af:d4:e0:57:67:1d:6b:c1:25:63:9c:f2:a0:e7:
         b1:50:42:9c:35:a0:66:2b:6d:cc:bc:49:74:d6:cd:95:59:94:
         e8:0c:52:8b:96:0d:14:f9:71:e9:44:ad:62:0c:35:52:d9:dd:
         fa:46:9f:8e:7e:2d:13:11:63:eb:e9:11:21:78:83:25:37:be:
         c7:62:44:2c:54:20:ea:a9:f2:c3:6b:56:8f:09:98:08:f1:ad:
         95:de:1b:75:07:97:d0:36:f4:82:3b:4f:51:75:a8:39:5a:e3:
         12:67:17:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:04:35 2026 by rpki-client