Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          lceZ1aySY1Bi6H9jlAABemMUWxrVxsaG89/p13yQ3m0=
Subject key identifier:   E2:7C:74:B8:85:EE:17:CC:72:84:CE:B4:E7:1B:CB:31:AD:A1:9F:15
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       019F29244557CB009CBD4AA5E1D8655DFA61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          0AB0
Signing time:             Fri 03 Jul 2026 18:01:10 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:10 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:10 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 8auKAIze5UXfhK8qEDhYZU0+2PRveMlpD9KZrGDE5zc=)
                          2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:45:57:cb:00:9c:bd:4a:a5:e1:d8:65:5d:fa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: Jul  3 18:01:10 2026 GMT
            Not After : Jul  4 18:01:10 2026 GMT
        Subject: CN=e27c74b885ee17cc7284ceb4e71bcb31ada19f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:d0:c1:ed:c8:84:71:66:4b:2e:40:b9:7b:
                    9f:f9:71:82:5b:83:c4:36:c4:73:a5:03:0c:71:ae:
                    30:4a:60:01:3e:24:83:c1:b2:3a:1f:9a:47:58:9e:
                    f2:57:ac:d8:f2:ae:54:f2:4d:98:46:a5:ba:59:74:
                    e3:05:cf:c6:b8:5f:4b:0a:1f:cb:bb:67:b9:6b:cc:
                    00:08:f2:76:10:3d:b1:e2:5d:1c:ce:8d:a7:d3:07:
                    2c:86:02:17:fa:60:72:47:9f:f3:04:39:00:a6:ae:
                    44:62:b9:87:a2:bf:6c:c6:af:a8:53:4c:1c:2a:18:
                    72:3a:36:69:8a:c2:c8:8e:04:9a:52:43:16:a0:50:
                    88:f2:56:db:6a:38:f8:b4:8c:e5:67:81:62:23:b6:
                    d3:46:74:13:12:bf:1c:69:a7:a2:a4:85:a3:9e:48:
                    a8:c7:1c:00:ec:ef:22:fc:25:09:1e:cc:1b:6e:98:
                    ec:3c:9d:43:3c:59:08:88:d6:3c:31:22:c8:e8:31:
                    85:7e:8d:83:32:a8:c7:0c:64:ef:17:ed:1a:ed:79:
                    cf:47:a0:53:57:74:8c:98:36:1e:ab:15:7c:57:3e:
                    c9:04:ea:a3:62:d4:89:7b:8c:cd:96:03:00:6b:0f:
                    6c:39:cf:78:0b:6d:7d:ea:ed:2c:f8:55:96:22:28:
                    cf:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7C:74:B8:85:EE:17:CC:72:84:CE:B4:E7:1B:CB:31:AD:A1:9F:15
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:ff:16:74:16:c1:79:18:0e:79:87:14:f4:02:90:99:23:72:
         f8:74:68:56:37:b2:91:77:b1:d9:0f:2b:73:74:79:64:36:0c:
         aa:ae:20:28:12:30:d0:dc:9f:9c:4e:c4:d3:8b:32:a8:3a:36:
         2d:86:6e:d0:16:5b:69:83:16:f1:25:b1:c6:8f:77:39:e8:59:
         86:ec:9d:9e:87:58:81:53:f7:93:2b:5a:3c:3d:93:86:e0:1d:
         61:67:09:7d:3d:b5:71:48:5e:7e:37:11:f7:6a:27:bc:1c:23:
         1d:d7:29:f9:67:de:3f:15:2e:83:dc:89:a5:a7:5e:47:5b:1c:
         a1:ec:78:c0:09:c4:02:a0:81:72:c6:16:93:f2:73:2d:9a:68:
         72:a2:1d:c0:56:50:eb:3d:21:4f:3c:11:50:7e:b7:5c:b3:82:
         30:f8:cf:bb:3d:66:3f:29:05:33:cf:ee:08:dc:28:ea:9c:21:
         72:76:dd:27:e7:45:51:2c:d2:81:6e:90:44:65:97:b1:96:7d:
         b8:2b:5b:c9:86:7a:49:40:89:d7:46:87:8c:69:3b:60:00:a1:
         8e:73:23:d0:5a:62:a2:b6:a2:1f:11:cd:f0:14:26:f9:e4:22:
         03:05:27:73:7e:40:dc:42:68:5c:b0:73:d3:c3:ca:49:b3:2d:
         22:4f:46:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:18 2026 by rpki-client