Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          Tx1a/CqV2W6UXLc+If7aOuqv9kM3OgKLgsUHGzxxfaw=
Subject key identifier:   EC:83:7A:34:5E:06:01:CE:B6:C4:37:6F:E0:79:F7:78:2E:AE:71:AD
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019E1BD949AEE90C98B69E8A5AC5312EE702
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          03FA
Signing time:             Tue 12 May 2026 11:01:25 +0000
Manifest this update:     Tue 12 May 2026 11:01:25 +0000
Manifest next update:     Wed 13 May 2026 11:01:25 +0000
Files and hashes:         1: 4hhrMDyDfOgGT_xbG8VzvHmhgpA.asa (hash: q2G9D7ouC7pXSONEAvnhW6gftqfvA3ns9EAOQxLV4U8=)
                          2: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: IBSMUHiUExP98pHhBOdQK1FnaeYHOgi5YVzgTXQXPpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d9:49:ae:e9:0c:98:b6:9e:8a:5a:c5:31:2e:e7:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: May 12 11:01:25 2026 GMT
            Not After : May 13 11:01:25 2026 GMT
        Subject: CN=ec837a345e0601ceb6c4376fe079f7782eae71ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:0e:e6:30:02:3c:bf:08:ae:16:63:7f:cc:
                    49:91:99:25:7f:de:40:c1:38:0b:68:45:05:cd:69:
                    3f:90:55:34:a5:ee:3f:ae:98:0f:9b:7d:d3:c1:ca:
                    a4:d1:bd:2c:80:dc:b8:81:82:6b:5e:fa:11:12:e4:
                    18:d8:d4:fd:91:93:c6:57:4f:ba:31:ec:35:a9:56:
                    b3:7b:a5:47:33:b2:07:12:64:d6:f9:06:6f:27:c5:
                    ad:98:ad:5a:92:62:68:ce:a7:e9:d9:b6:38:dc:e3:
                    fa:93:4f:82:08:74:12:97:bd:1f:29:5d:8b:f8:51:
                    b3:ca:89:b8:a2:f9:84:a3:c8:e3:fd:0c:63:f3:85:
                    8d:1a:ab:50:b8:69:a3:55:91:aa:59:03:d1:b4:1f:
                    c2:52:cd:f4:1d:e0:d2:cb:d0:c3:d3:fc:a2:6d:16:
                    8b:41:5d:26:50:cf:ff:79:1b:47:5c:30:ab:66:73:
                    20:43:7b:9b:1f:fd:3c:51:94:c9:21:dc:93:d9:f0:
                    b4:96:6a:ac:bf:7a:11:86:71:52:94:d0:e3:86:fb:
                    38:73:e4:36:ca:d6:2a:5c:d7:f2:ff:08:6d:81:63:
                    1c:64:34:e2:a2:87:40:c7:1b:c9:a3:01:2a:a5:e5:
                    d6:a2:97:80:d1:06:ab:88:96:3c:27:8c:17:97:f1:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:7A:34:5E:06:01:CE:B6:C4:37:6F:E0:79:F7:78:2E:AE:71:AD
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:50:a2:9e:b0:04:8a:2d:f1:ff:4a:6d:04:06:b1:3a:5a:e1:
         b9:0e:0e:6d:a6:75:09:71:98:25:1e:54:a3:1f:19:69:90:0a:
         4d:05:24:e3:a4:f7:a0:a7:4b:89:24:e2:4d:f9:f6:36:09:54:
         c8:10:70:66:3f:5e:12:a3:9b:85:a7:95:4a:73:5a:78:8b:d1:
         79:42:de:7f:7e:87:48:01:12:21:10:02:20:84:dd:d1:d9:e6:
         4a:69:9c:00:ab:38:6e:32:14:33:e9:0d:e5:6c:56:84:54:be:
         9a:11:77:99:dc:63:07:fe:48:23:0b:ac:9e:96:22:08:81:37:
         e5:8c:32:4b:19:83:f2:41:ac:33:b8:e6:c9:88:f0:0b:6a:9b:
         8a:a9:7b:bf:dd:77:50:83:36:ed:8a:78:88:b1:4c:62:14:64:
         c4:36:35:78:e0:1e:f5:03:06:36:fe:d1:3c:35:e2:94:e6:d0:
         79:e9:fa:69:77:50:5c:01:9b:c6:d8:a3:e1:bd:1d:78:d8:ff:
         3e:27:8a:bc:e6:4d:03:ee:0f:87:05:a0:fa:d9:7e:3c:2e:2d:
         3b:94:47:f9:01:60:7f:38:00:69:92:2f:69:c3:18:e8:6f:76:
         05:ac:cd:43:66:ce:74:17:d2:96:13:04:9c:68:4a:03:e7:37:
         d2:8b:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:26 2026 by rpki-client