Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          bJmcGAvg0AbF5BPlMLfc4NpvcubQLTfb4y2OmagNvUo=
Subject key identifier:   C4:85:AC:E4:60:D4:9C:00:0F:73:B3:3F:6F:B6:77:60:D1:19:85:B0
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       019E1DC78A34B78C251A384E1C959A0E2086
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0EFD
Signing time:             Tue 12 May 2026 20:01:16 +0000
Manifest this update:     Tue 12 May 2026 20:01:16 +0000
Manifest next update:     Wed 13 May 2026 20:01:16 +0000
Files and hashes:         1: 6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (hash: j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=)
                          2: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (hash: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0=)
                          3: M-CNQ4sKZCkmxmSMpP77FW0ZRzE.roa (hash: UdJnYqAMGHmI8rbxklRX18DI3O/ycqsbsTsYHZeAV1g=)
                          4: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (hash: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: SdxdYPnb6crP4rhCCD7fbfVm1KujV+TlvJ8obQ1GxGg=)
                          6: ywfKrP4cRTy2QlVvbLFd6cmyt18.roa (hash: Gmr+SV2YTd76CuhRcbMnXPX7jhYpfpofEYm1FZomnvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:8a:34:b7:8c:25:1a:38:4e:1c:95:9a:0e:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: May 12 20:01:16 2026 GMT
            Not After : May 13 20:01:16 2026 GMT
        Subject: CN=c485ace460d49c000f73b33f6fb67760d11985b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2e:3f:c7:0c:ad:0e:d1:a9:1d:80:77:c0:90:
                    cf:25:fb:c7:3f:0c:06:92:53:41:45:cb:4b:69:f2:
                    5e:c2:56:00:e9:c2:77:ef:b2:7c:18:d0:74:33:97:
                    df:f2:21:df:3d:80:49:c3:d6:be:ec:20:ea:53:fc:
                    dd:ff:6b:43:78:ec:ab:e7:7e:45:9b:13:1b:7b:36:
                    9e:66:95:a6:25:ea:a6:3d:a6:20:40:93:1b:20:65:
                    18:64:2a:5b:9e:01:1a:17:9c:06:9b:3f:35:e5:26:
                    40:3a:05:9e:14:f4:b4:0e:80:e1:85:ab:6c:46:b1:
                    a7:9a:4e:8f:8a:39:d5:cc:30:65:b2:4f:46:ce:16:
                    43:40:7c:4c:2d:8f:97:3e:de:8f:13:8d:c1:2f:90:
                    2a:7e:24:21:f9:48:3e:6d:f5:71:be:79:3c:14:c6:
                    9c:df:d9:e3:ec:46:fc:6e:c4:6c:ca:15:17:f1:d7:
                    20:a6:56:80:ef:60:24:db:37:8c:0b:e7:34:45:2d:
                    a3:6a:4c:87:c7:fe:49:08:14:41:f2:23:61:70:41:
                    82:10:ff:77:a9:59:6f:8d:e3:37:e5:10:23:1c:27:
                    3b:c2:5d:93:3d:74:5b:f7:e3:82:7c:2f:18:21:4e:
                    54:a8:77:a8:63:a1:aa:cb:2b:0c:66:aa:32:64:0e:
                    b4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:85:AC:E4:60:D4:9C:00:0F:73:B3:3F:6F:B6:77:60:D1:19:85:B0
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:d4:2b:90:06:83:bf:73:ed:ba:41:6c:92:7d:78:0f:2e:
         9c:3a:3d:9f:d3:42:af:61:25:d1:e2:6f:ce:cc:70:2c:db:78:
         28:8a:76:a5:76:d0:76:82:f7:92:24:03:ad:e9:c9:41:f5:0b:
         10:3a:42:7c:7e:32:db:fb:a8:42:93:14:bb:46:11:89:10:e5:
         79:28:3d:9c:c9:ee:f0:7a:4a:91:11:d1:7b:9f:61:82:0e:34:
         ce:38:6d:20:f5:d9:22:67:d8:ac:78:77:b2:67:e8:a6:20:69:
         b5:6b:e2:9f:45:59:1e:e4:c2:8f:69:d7:9a:ee:f6:d0:27:dd:
         b3:33:65:02:b9:fe:65:5f:8f:c9:6b:51:2d:80:02:3b:66:64:
         27:c2:a8:32:2c:57:ac:11:17:f5:2b:44:f6:16:e0:f2:de:c3:
         3e:54:25:94:ed:53:c3:bb:f9:91:2e:66:39:a2:2e:1d:32:97:
         f6:2b:18:b4:b2:71:7d:cf:52:fd:d1:b5:c9:cd:4c:74:f1:5c:
         e8:9e:e8:7a:cc:e8:c0:d1:7a:97:81:fc:5f:32:fe:97:93:64:
         58:dc:93:97:72:20:ca:73:1e:5a:ae:1e:3f:dc:87:9c:58:03:
         19:98:42:f6:48:96:6d:27:93:b0:65:9b:d2:be:9d:05:11:f5:
         68:20:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:56 2026 by rpki-client