Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          BY+ETNfN7zZSNc0OHoru3J4L9kzN2dA+TAdInhWm6Eo=
Subject key identifier:   5C:F3:B0:64:30:87:A1:DD:D3:64:BC:D3:40:29:83:DB:98:17:2C:4F
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       019F927F9D43C0B3F2CA5F78448E72F91528
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 05:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:04 +0000
Files and hashes:         1: 3XhI2AnxE9Iob8Z4cu24L14fqh0.roa (hash: FrYruNBfkjSi7B2g8ZPV7E7JbrqIhIIg8LFhYWGl7/4=)
                          2: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: 8qvTIFZApI0oJrgncjfLKGxGAF/68UE9gT6AewUSM7I=)
                          3: FftuvVwHax9rBycvM4DRr28X-6o.roa (hash: bwaRbSjhdz4y7KT7CJ7m6+1M8w/NqaRjSm1en4rz3ZU=)
                          4: JQnCfY6YafPRsaYc7zKPwbPOWDw.roa (hash: GmdykJDu2x9EESYje5rdUV18QI0AESFSpmuLu31e0OA=)
                          5: YInBR7bsYgDdM9URzfND8cE-528.roa (hash: QGeVQC9vpESzvL8GZfpI0KdzNZQJgFqjrA2fAYIfxE0=)
                          6: gQ7St51r5tRsr1STgJZSpb51fy0.roa (hash: 2Qh2IkkpDn5a2bQBxP6BJ08eMuKLDD2wyJNu9l57aaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:9d:43:c0:b3:f2:ca:5f:78:44:8e:72:f9:15:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Jul 24 05:01:04 2026 GMT
            Not After : Jul 25 05:01:04 2026 GMT
        Subject: CN=5cf3b0643087a1ddd364bcd3402983db98172c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:af:b5:60:ee:b1:cb:18:1a:bd:e7:e0:4b:
                    03:11:62:e5:a5:08:71:ba:b3:19:e0:34:0f:84:d6:
                    4a:3d:1e:2a:50:0d:58:c7:0a:cb:43:06:70:ca:99:
                    9a:28:42:4c:e7:a1:1f:42:51:44:01:11:7f:3e:1d:
                    53:76:6c:6c:e7:8e:f9:4f:f8:15:f5:5e:d7:2a:ad:
                    ae:a9:c6:76:63:d9:bf:13:87:a9:b4:52:df:6c:a4:
                    f0:8c:8f:5d:a6:eb:e9:d0:24:a3:ab:1d:a5:47:61:
                    c1:3a:bd:7f:89:df:c5:5b:e3:df:77:32:ff:e3:d5:
                    f2:26:39:b2:40:33:df:16:38:09:cf:66:fe:f0:e5:
                    1f:03:67:09:99:c6:cb:2c:9e:7e:41:d6:01:89:50:
                    b8:04:9a:65:51:3b:62:33:c2:d3:35:7f:14:3a:94:
                    b7:b8:9b:d9:6d:c6:37:bb:6e:a9:14:67:b2:4c:9f:
                    c3:5e:36:c3:96:82:4d:d6:5d:68:74:96:4e:65:1c:
                    4b:9a:e1:19:b7:98:d9:00:06:9a:94:7c:59:35:d1:
                    41:e7:8f:9d:3b:f8:91:6b:8c:30:f2:12:d0:42:eb:
                    e8:cc:b9:e8:2b:c6:02:0e:71:d7:6f:2c:04:cb:8b:
                    84:c1:d5:21:a8:5f:58:ec:c4:25:6d:f6:16:5d:24:
                    7f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F3:B0:64:30:87:A1:DD:D3:64:BC:D3:40:29:83:DB:98:17:2C:4F
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d3:8f:ec:68:ca:33:c7:50:11:de:f6:c7:43:b4:ab:8d:06:
         0d:b7:54:1c:06:30:fe:f4:6c:9a:a6:d2:76:3e:c4:ff:b2:d1:
         a7:b1:81:96:da:f5:5c:b0:c1:ca:0c:aa:3d:2b:e2:c1:1d:d9:
         d3:aa:d0:cd:f5:8f:9f:a0:9c:72:8d:f9:a6:a1:aa:c3:1e:44:
         66:0d:c4:b9:7d:40:9c:23:99:a4:ed:97:6a:57:49:3c:13:57:
         85:c9:1d:51:04:08:25:d2:f1:71:d4:48:e8:f3:61:cd:93:33:
         2e:01:7e:8c:56:35:02:60:5b:c6:75:3c:d8:f6:85:9c:e0:76:
         30:60:39:21:8a:1b:78:64:98:82:d5:8a:c1:5e:33:d8:af:e4:
         fb:f4:d7:5a:6a:c4:c6:ba:d3:2f:d7:68:20:66:7c:19:88:94:
         b0:53:6a:74:5a:c2:64:d2:7f:38:49:e8:df:84:ad:f3:7d:c7:
         b9:4e:37:d0:b6:34:28:9f:10:91:02:cb:2e:56:8c:a9:36:5a:
         a0:0d:fd:ca:03:49:ef:52:10:10:b4:fc:92:a7:69:5a:b6:75:
         68:e3:bd:82:af:f1:d3:ad:4f:68:82:c4:33:cb:59:64:57:52:
         b7:97:9f:92:fd:2d:8c:12:fd:dd:29:71:7c:40:57:ba:1d:0c:
         f3:7b:9a:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf51DwLPyyl94RI5y+RUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4
MzNjNTYwHhcNMjYwNzI0MDUwMTA0WhcNMjYwNzI1MDUwMTA0WjAzMTEwLwYDVQQD
Eyg1Y2YzYjA2NDMwODdhMWRkZDM2NGJjZDM0MDI5ODNkYjk4MTcyYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD2vtWDuscsYGr3n4EsDEWLlpQhx
urMZ4DQPhNZKPR4qUA1YxwrLQwZwypmaKEJM56EfQlFEARF/Ph1Tdmxs5475T/gV
9V7XKq2uqcZ2Y9m/E4eptFLfbKTwjI9dpuvp0CSjqx2lR2HBOr1/id/FW+PfdzL/
49XyJjmyQDPfFjgJz2b+8OUfA2cJmcbLLJ5+QdYBiVC4BJplUTtiM8LTNX8UOpS3
uJvZbcY3u26pFGeyTJ/DXjbDloJN1l1odJZOZRxLmuEZt5jZAAaalHxZNdFB54+d
O/iRa4ww8hLQQuvozLnoK8YCDnHXbywEy4uEwdUhqF9Y7MQlbfYWXSR/dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzzsGQwh6Hd02S800Apg9uYFyxPMB8GA1UdIwQY
MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt
OGM1NmQ4ZmUxN2I1LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1
LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNOP7GjK
M8dQEd72x0O0q40GDbdUHAYw/vRsmqbSdj7E/7LRp7GBltr1XLDBygyqPSviwR3Z
06rQzfWPn6Ccco35pqGqwx5EZg3EuX1AnCOZpO2XaldJPBNXhckdUQQIJdLxcdRI
6PNhzZMzLgF+jFY1AmBbxnU82PaFnOB2MGA5IYobeGSYgtWKwV4z2K/k+/TXWmrE
xrrTL9doIGZ8GYiUsFNqdFrCZNJ/OEno34St833HuU430LY0KJ8QkQLLLlaMqTZa
oA39ygNJ71IQELT8kqdpWrZ1aOO9gq/x061PaILEM8tZZFdSt5efkv0tjBL93Slx
fEBXuh0M83uagA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:00 2026 by rpki-client