Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
File:                     Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft (raw, json)
Hash identifier:          luN+0l1dk6DzLNPq3QZY82nvZrn342WQhnwVHqUzbSg=
Subject key identifier:   3F:89:0D:CD:24:5D:65:5D:3D:7E:B7:CC:60:45:7E:F7:D8:E2:C7:71
Authority key identifier: 17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4
Certificate issuer:       /CN=1716ebd40a744a0c84f2535457047808ad2f17c4
Certificate serial:       019F8FB4DE2CEF91B62BDC3AD68A815B3087
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
Manifest number:          1295
Signing time:             Thu 23 Jul 2026 16:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:22 +0000
Files and hashes:         1: Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl (hash: 2+r/YMGYAmvAdkP20LAB7zfcXoH8CB8NwaKTaWKoDCQ=)
                          2: ThEbdNyMjZlPcirKDdAqyJZ_IQw.roa (hash: CGthBA4HArt69dssvy/GYBuP0JxNG1Tkx2gronzpD3M=)
                          3: Y8VofECg6XDRc7kBDxvZBE-ydHI.roa (hash: 5sI62v5HRBdxoauH9VhzHWAJkQqiRWMnuYGerEaV4nw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:de:2c:ef:91:b6:2b:dc:3a:d6:8a:81:5b:30:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1716ebd40a744a0c84f2535457047808ad2f17c4
        Validity
            Not Before: Jul 23 16:00:22 2026 GMT
            Not After : Jul 24 16:00:22 2026 GMT
        Subject: CN=3f890dcd245d655d3d7eb7cc60457ef7d8e2c771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:82:ce:e8:3f:4c:30:ab:4c:f3:1c:1b:0f:d7:
                    70:d0:a6:e3:b2:5b:6b:aa:bc:b7:c9:29:c3:09:ed:
                    4f:74:e0:90:d2:71:f9:39:b1:8f:ac:44:8f:19:3a:
                    8a:0d:a6:06:b4:8d:70:65:43:b6:d9:29:d7:a0:79:
                    56:05:07:7f:49:b1:93:52:55:0f:f0:0b:5f:26:8d:
                    31:a5:bd:05:df:33:39:84:87:ed:75:74:74:44:5f:
                    f5:16:39:d2:cd:0e:d7:59:e9:89:d1:ba:d8:b2:b7:
                    36:d1:f1:90:f5:39:1d:3f:03:de:8d:ae:b8:0b:de:
                    29:91:c0:84:2d:7f:be:6b:3f:a3:06:e0:4b:96:d6:
                    20:fa:4f:bc:e2:05:2e:bf:ec:4e:e2:a7:62:d6:de:
                    dd:05:11:ee:63:0c:bb:2f:53:0e:69:56:23:af:89:
                    fd:0e:28:59:62:06:8f:b0:ee:e4:4c:90:9e:23:bb:
                    65:97:29:ab:7b:33:4a:7c:87:e3:96:8a:15:48:14:
                    cc:8e:b4:65:c9:e4:3e:9e:aa:e2:db:2f:56:6c:0b:
                    5c:9e:c9:08:54:01:a4:d3:bb:c6:60:0f:83:97:f9:
                    56:fa:86:fd:40:ab:86:da:b6:78:16:71:8c:56:49:
                    fe:91:75:b5:47:65:b3:b7:23:f6:57:45:3d:98:53:
                    2d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:89:0D:CD:24:5D:65:5D:3D:7E:B7:CC:60:45:7E:F7:D8:E2:C7:71
            X509v3 Authority Key Identifier:
                keyid:17:16:EB:D4:0A:74:4A:0C:84:F2:53:54:57:04:78:08:AD:2F:17:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5f5589-4c32-493f-924e-bae7aa0a18a0/1/Fxbr1Ap0SgyE8lNUVwR4CK0vF8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:21:dd:37:1a:98:05:33:0b:ca:62:91:c8:98:1f:0f:f8:fa:
         a2:fa:ce:6f:5f:67:33:0a:b1:1b:39:5a:22:0a:76:d5:43:2a:
         d0:13:94:19:66:67:08:8e:91:e0:a5:26:00:ae:32:4e:a9:3e:
         4e:17:85:b7:bf:75:c6:a0:5f:43:e6:14:3a:dc:5c:ad:28:d0:
         5b:98:50:7e:a3:52:36:33:d9:6e:46:a4:d2:33:d2:d8:dd:27:
         64:a2:41:96:cb:ba:f4:58:12:93:bb:98:7a:25:6e:0c:42:30:
         7a:2e:bf:f5:d6:9c:74:dd:08:5f:35:84:94:0c:01:9d:14:49:
         62:63:79:ef:ca:b8:09:e2:5d:a3:e7:10:1f:6f:13:4b:30:2d:
         e7:0d:23:79:a8:d5:a2:95:3f:7d:f3:e2:1c:f1:db:bc:07:fe:
         c2:3e:1a:ef:1c:b2:a3:7e:03:e2:a5:ce:79:39:eb:43:0f:c1:
         8d:40:fb:b1:7c:73:83:63:1e:8d:3a:e9:2e:98:6b:87:4e:31:
         24:65:c5:e6:57:84:57:1c:9f:05:ba:93:07:ce:fe:fc:9e:4a:
         cb:01:05:85:a8:9a:13:2f:d6:08:f7:ca:51:e2:f3:f5:4a:ea:
         8b:90:c5:45:72:b8:6e:b1:2e:8e:44:b6:7b:97:13:36:4f:9f:
         1a:ce:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:46:54 2026 by rpki-client