Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          leQEbie+nZ2RkRCX0xhHQxt1afQjNz5qzW0Tv9rtanQ=
Subject key identifier:   76:B5:28:6D:B3:EE:40:58:44:6A:E7:F6:68:D9:B7:D5:07:77:A4:6F
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       019F93C8E5C305D63F852B67A6DD95F1D2E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          0AC3
Signing time:             Fri 24 Jul 2026 11:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:44 +0000
Files and hashes:         1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: L1bZs/UCMaJ7Um4rk3o6m6bCiMv/ZvGhzxju8HU4npc=)
                          2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:e5:c3:05:d6:3f:85:2b:67:a6:dd:95:f1:d2:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Jul 24 11:00:44 2026 GMT
            Not After : Jul 25 11:00:44 2026 GMT
        Subject: CN=76b5286db3ee4058446ae7f668d9b7d50777a46f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:92:aa:c8:bf:1a:af:83:4d:1a:31:05:93:
                    d8:44:fa:33:c5:65:14:99:e4:9b:57:03:00:b6:d2:
                    53:aa:89:9b:55:e7:24:aa:c5:9b:ca:63:67:59:8e:
                    ef:b6:fc:de:6f:36:37:d1:27:d1:01:43:7a:29:21:
                    30:85:00:36:cc:12:f6:f1:42:1e:96:fc:62:3b:70:
                    74:16:bc:09:84:c1:38:9d:95:d0:59:4f:76:94:d8:
                    e5:02:8d:cc:29:a1:f8:78:05:d8:2a:fc:89:b5:19:
                    d4:7a:12:a3:d3:fb:40:e5:ee:0d:cd:4e:da:57:43:
                    f6:99:c5:3e:09:c3:b6:85:f7:72:4f:15:9f:ad:9f:
                    87:39:dc:5c:6e:59:fe:a8:5c:d5:04:3f:1c:27:1f:
                    5f:df:35:ae:36:f4:14:83:ec:2a:b3:6b:41:09:46:
                    84:f3:54:1b:03:4e:8d:78:f7:a3:28:10:f7:97:08:
                    8b:b2:cd:22:1c:d9:63:12:66:25:e8:e1:49:f7:ed:
                    e7:fe:aa:19:75:80:e0:33:94:d9:da:f0:d4:c0:e2:
                    c9:28:29:9e:b0:f6:45:d9:38:28:73:f9:db:d7:fb:
                    cb:f7:45:b0:6f:e4:e6:41:08:65:10:ff:b1:33:cb:
                    e3:5c:63:f5:f5:ed:87:a8:c8:e7:7e:f0:2d:6b:95:
                    bb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B5:28:6D:B3:EE:40:58:44:6A:E7:F6:68:D9:B7:D5:07:77:A4:6F
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9a:b3:54:4f:fa:f0:40:fa:63:e0:e8:29:1c:d9:6f:d2:60:
         cb:51:49:5d:23:2b:33:9f:74:d9:50:40:69:8a:3b:cb:cf:77:
         77:80:f6:d5:db:ad:f7:a4:73:7c:ac:3b:e4:87:41:56:8a:bc:
         f2:23:95:a8:47:aa:53:7c:87:20:9d:38:4f:a9:a7:b1:39:bc:
         10:68:b1:69:a1:ee:31:74:3f:eb:96:09:53:ed:83:51:99:f6:
         e4:79:ab:e6:9d:db:ba:47:86:95:b8:be:72:fe:26:c8:9a:d9:
         7c:96:6c:40:12:d8:a8:67:88:6a:fa:ca:d0:7c:ed:6f:67:47:
         f2:71:c7:b9:a1:2d:68:39:2f:9a:79:3d:c9:01:74:f9:8b:e8:
         d3:53:f1:23:ad:1c:66:1b:91:fc:9b:2f:ef:30:00:32:3e:6b:
         ad:4c:47:bd:35:a1:01:82:97:e3:f5:fb:b9:ea:8e:63:d4:71:
         4a:30:32:41:52:77:78:bd:f4:9d:7a:84:80:18:07:33:3a:db:
         ed:63:b2:7f:46:d6:bb:ee:99:b5:68:da:6d:6e:8d:16:44:08:
         bd:ec:b3:32:15:1e:e4:0f:22:77:3a:45:a0:86:ac:e9:28:ab:
         e9:5b:4f:77:56:08:5a:58:82:dd:ec:d0:05:67:06:0f:d8:f6:
         c7:b6:16:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:07 2026 by rpki-client