Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          80GR0dLpm/SDz1inoc+TyB1KHa9g8bigdxCnUS2vjWs=
Subject key identifier:   54:FC:3A:12:06:7C:CC:8E:8F:8D:B3:07:FC:A3:82:4F:4B:DC:D5:64
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019F916C854E3F1C7053DF2AAEDCB2B71DE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 00:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:35 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: TDq2SpiWpNu6MxEuDVbrVJ17V9QVw6/cwdCbTtzHSw0=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 00:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:85:4e:3f:1c:70:53:df:2a:ae:dc:b2:b7:1d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jul 24 00:00:35 2026 GMT
            Not After : Jul 25 00:00:35 2026 GMT
        Subject: CN=54fc3a12067ccc8e8f8db307fca3824f4bdcd564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:38:88:78:90:7e:86:92:52:db:f8:8f:e2:e4:
                    8f:b0:b8:7d:ae:a6:31:db:18:1a:0e:d9:43:f5:b0:
                    f2:8d:b3:7a:3d:5b:63:03:b0:44:1a:06:bb:a2:05:
                    a6:b4:60:67:bc:5a:af:01:94:b8:c5:3c:a1:b9:5e:
                    09:c8:64:4e:83:f7:05:80:20:9e:24:7a:51:78:0a:
                    a6:33:4f:9c:21:8d:e9:9b:c8:ef:f6:a9:f6:a3:3a:
                    f9:d3:da:42:58:69:aa:c2:ed:79:84:44:fa:34:04:
                    4e:db:6f:8d:8b:fe:7c:f0:95:c3:8f:2f:18:e6:ab:
                    6d:99:9e:40:29:2c:cf:6d:cc:12:25:58:49:18:3f:
                    ff:f3:67:3d:46:b3:8b:19:66:63:e2:f3:e9:1e:63:
                    3a:91:ec:e1:7e:9b:09:6f:6f:22:fc:e1:f8:ef:67:
                    65:6a:fe:35:9f:0c:4e:dd:4a:72:a1:16:4e:61:bd:
                    ed:da:24:62:89:86:1a:19:1c:7b:9b:38:85:c4:40:
                    a4:f0:ba:36:67:93:12:4d:f6:06:03:35:2c:de:38:
                    e7:07:1b:5e:b9:82:45:e2:ab:be:4f:32:23:86:c4:
                    44:56:d2:28:e5:34:ab:da:a8:ff:73:ac:fa:16:70:
                    1e:40:07:3d:33:64:17:97:87:9f:0e:87:d4:b6:c4:
                    eb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:FC:3A:12:06:7C:CC:8E:8F:8D:B3:07:FC:A3:82:4F:4B:DC:D5:64
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:5c:3b:fa:ee:d7:8b:f4:7d:8e:a0:b3:af:7e:ec:f0:46:
         50:c9:36:2e:24:7f:38:cb:36:85:11:a3:df:f4:3c:f3:76:c7:
         12:1f:6a:3c:59:52:e7:e4:93:2e:ed:9c:f7:47:02:65:49:69:
         71:fe:b7:a7:f1:cd:bb:d6:68:b8:22:cf:3c:8e:96:8f:5a:1a:
         17:dd:84:7c:58:e3:81:d2:29:93:a7:69:22:0f:56:bf:5d:51:
         e4:a6:44:20:dd:bb:e5:91:4c:f9:39:66:9f:b0:d0:98:c3:bf:
         a8:2f:f2:b5:da:c3:c4:e1:b6:a2:bd:9f:c5:56:da:6e:5e:f4:
         3d:b0:7f:96:c4:93:38:aa:5c:1e:24:44:0a:c0:26:26:e2:b0:
         01:e5:c0:07:c9:7b:87:02:3b:f4:73:52:9c:a9:17:df:c8:3c:
         5b:a4:43:18:3f:3c:96:9d:6d:f3:fa:9c:5b:d5:bc:12:53:79:
         9d:c9:5d:64:f2:58:cb:76:32:3d:2a:8b:7b:27:15:b7:6d:13:
         27:54:db:85:53:bd:21:9e:72:d8:74:2f:d5:f0:8c:6d:8e:d8:
         71:b6:e9:c1:c6:c0:0e:5d:49:30:b3:02:a0:98:60:06:0b:a0:
         68:e8:61:5b:76:0a:9a:da:f8:68:f6:1f:f2:12:ae:d3:3a:90:
         e9:0a:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:15 2026 by rpki-client