Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          X6Kvc1VTJ2yja0i5AieQsp09IX8TDMYG528ko2QwB2I=
Subject key identifier:   93:1C:DB:31:26:DF:F0:D0:F6:49:D1:47:E7:68:84:C9:F4:76:43:6E
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       019F92B5D1E25C2178F005319338BD64B456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          047C
Signing time:             Fri 24 Jul 2026 06:00:17 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:17 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:17 +0000
Files and hashes:         1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: HH1EvX8+Iu/0pGLx9Snc7BIOznlIOgQKJzjTdVERif4=)
                          2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:d1:e2:5c:21:78:f0:05:31:93:38:bd:64:b4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Jul 24 06:00:17 2026 GMT
            Not After : Jul 25 06:00:17 2026 GMT
        Subject: CN=931cdb3126dff0d0f649d147e76884c9f476436e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:9b:c7:f3:cb:60:39:14:67:84:d7:1e:3b:
                    f1:7e:f2:f0:00:8d:ec:1e:bd:91:5d:64:33:ee:ee:
                    d5:19:00:f3:93:1d:2b:eb:5b:26:fc:04:3e:a0:33:
                    23:58:20:cc:74:a7:bc:a8:c6:e7:4d:b0:c2:32:a3:
                    5a:bc:dd:e3:10:87:b5:29:c9:f3:94:bb:2c:9a:56:
                    d1:71:ae:0f:5c:09:4d:84:33:ee:f3:12:e7:01:3a:
                    3c:e3:77:e2:c5:23:38:ad:52:52:ba:3c:4b:24:60:
                    01:27:c3:1b:bf:c3:74:49:78:f7:54:dd:69:08:c9:
                    50:a3:50:89:82:d2:0d:fa:87:14:49:aa:36:3c:ea:
                    d5:69:c3:c8:6d:39:6f:48:c0:f3:90:d0:22:5f:b2:
                    05:10:e9:b6:f6:5e:b8:ad:35:9e:20:48:f6:15:5a:
                    19:c2:6c:2c:bb:a4:8f:d5:2b:03:0a:19:41:dc:40:
                    74:ba:e1:b5:b5:53:a3:44:9a:b6:df:af:75:cf:34:
                    96:0a:f8:7a:00:58:7b:d5:f2:21:b9:26:63:7b:d1:
                    48:cd:19:87:ff:c8:01:1d:c0:b0:e9:ca:dd:e5:1a:
                    17:10:14:88:e9:31:5f:87:2e:4d:46:27:74:db:25:
                    40:b5:27:4d:ec:77:aa:4e:38:4c:01:90:c0:65:ca:
                    0e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:DB:31:26:DF:F0:D0:F6:49:D1:47:E7:68:84:C9:F4:76:43:6E
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:88:77:c5:ce:6d:0b:c0:40:2a:d4:9b:b0:73:8f:e3:e0:26:
         5b:b5:33:a2:d9:41:37:03:56:5e:6a:91:a6:53:7c:44:ae:55:
         e0:22:2e:2a:96:27:83:80:8d:75:1d:ec:f8:16:b1:ee:de:f3:
         d8:a7:51:04:09:f5:ed:ab:ef:6e:f9:17:4a:6c:9e:06:8c:a4:
         44:b7:4b:0d:dd:d9:1a:f1:31:42:49:80:cf:ad:56:84:1e:8a:
         02:34:5e:d8:70:c0:71:65:11:5a:3a:46:11:51:f8:2e:b7:c6:
         d8:97:69:c0:a4:7b:28:a8:86:55:df:36:b6:fb:cf:e1:8f:ec:
         0d:8f:c9:11:b7:bc:08:3f:06:cb:4d:57:a1:68:e8:ff:24:42:
         bb:20:80:91:f7:b4:61:b4:66:c5:69:68:11:6e:22:74:2f:40:
         ae:93:d0:20:b9:75:ca:7d:64:c8:f2:1c:7a:45:08:86:c0:bb:
         61:2f:b7:68:00:29:6b:df:cf:1f:99:f0:ca:80:c1:30:d4:cc:
         2a:c9:a7:a6:00:96:35:b1:53:39:54:94:c9:b3:95:9c:a8:60:
         27:6e:0f:bd:6a:40:3c:1b:f6:04:b9:8b:91:a7:ec:f1:4b:37:
         15:99:a6:62:1d:28:4f:7a:ac:b7:80:50:9c:a1:0c:db:47:16:
         ad:7e:ab:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:58 2026 by rpki-client