Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
File:                     fktU39QWEHdP5_JC1904c6ZYRzs.mft (raw, json)
Hash identifier:          6jlJeD0/TprOvtQj6LnKcLnukReBKud8DvfgbAEjluI=
Subject key identifier:   8C:83:90:67:24:7D:26:4A:94:EE:45:AE:95:64:31:91:7C:DA:78:A9
Authority key identifier: 7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B
Certificate issuer:       /CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
Certificate serial:       019F93C8BA5182D42EE1D8D5F440939BA8FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
Manifest number:          181D
Signing time:             Fri 24 Jul 2026 11:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:33 +0000
Files and hashes:         1: BU53BjTSRZfkrJudCLpcUCdSrRY.roa (hash: T6U3AiyLiPFKo2ciL2yLgXG936+t2tdrzVieAM/VsqM=)
                          2: QX3-zvC0LqDrgfqpcGb-4WbXk-M.roa (hash: mPI+Fb4XV55VM/xg4rejvn4qKGbiuOmJ9YzbxU8HDUU=)
                          3: fktU39QWEHdP5_JC1904c6ZYRzs.crl (hash: CdU9sOcX3REPSZoXAJAUXiSoqiCS18rcabk9gkbC+vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:ba:51:82:d4:2e:e1:d8:d5:f4:40:93:9b:a8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e4b54dfd41610774fe7f242d7dd3873a658473b
        Validity
            Not Before: Jul 24 11:00:33 2026 GMT
            Not After : Jul 25 11:00:33 2026 GMT
        Subject: CN=8c839067247d264a94ee45ae956431917cda78a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:59:be:b5:91:8a:66:cd:17:be:44:bb:87:b7:
                    f0:a6:a5:ac:cf:8d:4d:c0:53:64:2a:5d:ff:06:48:
                    2a:b7:ba:9d:83:7e:5a:c2:3d:23:96:bd:22:da:ff:
                    69:27:43:6d:0f:66:93:6b:bd:d4:e2:7e:0d:63:eb:
                    ca:76:c4:a9:46:14:bf:3b:e1:57:36:c7:1f:5b:17:
                    c8:91:4c:88:7b:4d:b2:fd:b6:63:d9:e6:98:17:7e:
                    d0:d6:7f:f6:4a:21:c2:17:f0:56:aa:60:1d:46:72:
                    c5:f4:72:a6:52:fe:99:f9:6f:0b:31:53:be:b1:45:
                    a1:9f:dc:e6:f7:b2:85:14:a9:ec:fa:e2:f5:2d:20:
                    a8:ab:58:6b:6c:58:fd:4a:96:80:44:5a:1f:74:fa:
                    3e:f8:88:d9:54:f8:20:d1:8b:cf:f8:91:2c:f7:ab:
                    89:53:67:6e:42:e8:3c:1b:28:28:a4:48:da:7d:83:
                    23:96:e4:5e:68:d6:bc:d4:0a:90:e5:36:d8:fd:e5:
                    67:69:1f:ab:0d:cd:8d:97:b8:47:7e:7f:30:f1:af:
                    39:e0:f6:ee:3f:bc:43:85:55:e9:4c:93:a6:16:f1:
                    7f:71:f3:de:a0:aa:31:e2:42:5d:4e:aa:92:01:66:
                    01:90:a2:73:02:d2:07:1c:09:19:db:2f:73:fc:5b:
                    94:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:90:67:24:7D:26:4A:94:EE:45:AE:95:64:31:91:7C:DA:78:A9
            X509v3 Authority Key Identifier:
                keyid:7E:4B:54:DF:D4:16:10:77:4F:E7:F2:42:D7:DD:38:73:A6:58:47:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fktU39QWEHdP5_JC1904c6ZYRzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1b35c5-7ac6-4253-86ea-7744ef3c0b99/1/fktU39QWEHdP5_JC1904c6ZYRzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:52:ae:e9:10:51:57:ac:b4:8c:2d:49:07:fb:4c:7f:67:a7:
         0c:1b:36:1f:c1:1d:09:9a:80:64:88:fc:ec:d0:62:3f:fa:48:
         b3:34:79:fe:6b:25:2f:f6:90:42:6e:1c:6a:87:5f:00:ad:a2:
         32:40:7a:19:b1:59:5d:1a:30:1d:31:38:19:78:67:b7:95:f0:
         bc:e3:ce:fb:c1:51:87:36:5e:33:72:05:8d:e8:e0:4f:45:b0:
         19:ae:f9:d9:15:48:da:ea:c6:1b:6d:de:38:e2:ad:df:92:33:
         78:7d:87:44:7f:9f:60:c8:eb:a2:b6:51:68:ac:04:3d:4b:31:
         e9:9e:a6:60:b3:7f:68:9e:47:2d:b7:cd:10:b6:91:3b:61:c0:
         53:d9:4b:a4:f5:3b:6b:a2:73:5d:e1:2b:60:2d:8d:fe:eb:f0:
         36:1e:31:f4:16:68:60:cb:20:bb:bb:d1:4c:cd:32:13:3c:87:
         92:b7:ff:26:0d:09:9f:7e:e3:4b:22:fa:0f:d9:db:3e:ea:5c:
         0e:b5:6e:9b:67:b6:7e:fc:4a:00:99:60:20:81:64:9e:56:00:
         ec:0b:98:c9:8f:fb:cf:e5:c8:08:e2:c9:1f:12:f4:ec:78:a3:
         45:1f:ba:da:57:cd:80:1d:57:1b:78:49:2e:56:04:ba:f8:a5:
         3a:43:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:05:26 2026 by rpki-client