Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
File:                     FcYXfT3cgV334SIF-LaCqvS3GTU.mft (raw, json)
Hash identifier:          NEDECch3y3oQSn/o3CQI9qkesO4LKl29v98XJcFhNlM=
Subject key identifier:   CC:8B:F6:91:1A:22:87:39:64:B1:86:CF:6C:22:9B:DC:F3:BF:65:74
Authority key identifier: 15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35
Certificate issuer:       /CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
Certificate serial:       019FA0E003DD89544859370014565A09F733
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:03 +0000
Files and hashes:         1: 24oyFCZ82CeeIceGWeut2w2WwuM.roa (hash: HrBB+WmjLXbJwhb8253Qsk+ZcaUjm9aaPB5tcu3NZh8=)
                          2: FcYXfT3cgV334SIF-LaCqvS3GTU.crl (hash: 20wtmM6UK4w/l/B67VAmHc9phmGtCvHiTPcZo9ybR5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:03:dd:89:54:48:59:37:00:14:56:5a:09:f7:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c6177d3ddc815df7e12205f8b682aaf4b71935
        Validity
            Not Before: Jul 27 00:01:03 2026 GMT
            Not After : Jul 28 00:01:03 2026 GMT
        Subject: CN=cc8bf6911a22873964b186cf6c229bdcf3bf6574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4e:a3:93:e8:f4:c2:42:ff:4b:78:a9:f3:f8:
                    56:8e:2d:88:ac:d9:0d:74:5a:6b:87:4e:db:06:17:
                    77:96:5a:9b:67:68:e9:ba:e7:6d:da:f2:83:5c:13:
                    23:7c:44:ba:a9:1f:24:ae:49:b0:51:6f:eb:38:b5:
                    b3:41:3f:53:dc:e1:62:f1:51:fc:bb:67:50:f5:87:
                    06:a2:ba:f3:97:b1:ad:31:f1:13:4e:c5:5b:85:e5:
                    59:1f:ef:ed:32:d4:34:cf:47:82:e3:3d:17:51:3f:
                    33:e9:29:bc:29:18:ea:45:83:23:53:9f:74:42:28:
                    dc:4c:6b:49:40:97:c8:77:b3:a5:39:46:47:94:c1:
                    17:7c:70:ff:dd:eb:04:f5:1d:b4:d5:09:45:56:69:
                    bd:ea:44:c9:bc:80:74:81:5e:7d:ad:b3:46:21:43:
                    0c:de:60:20:27:70:f2:5b:84:9c:3b:b9:10:36:6b:
                    24:e4:8f:fb:30:62:86:de:0f:9a:20:ba:2f:21:33:
                    80:0c:18:f2:95:91:1f:67:82:0c:2e:63:41:66:64:
                    ad:a2:3e:00:ee:57:70:02:ad:55:41:0e:9f:38:54:
                    b2:f6:e2:b3:b4:f6:1a:9b:8c:25:53:06:cd:a1:a0:
                    e9:bb:29:8b:6c:d9:a2:87:c2:e4:df:9f:e1:b1:0c:
                    00:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:8B:F6:91:1A:22:87:39:64:B1:86:CF:6C:22:9B:DC:F3:BF:65:74
            X509v3 Authority Key Identifier:
                keyid:15:C6:17:7D:3D:DC:81:5D:F7:E1:22:05:F8:B6:82:AA:F4:B7:19:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcYXfT3cgV334SIF-LaCqvS3GTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/FcYXfT3cgV334SIF-LaCqvS3GTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:4e:4c:16:c2:88:72:29:41:ce:d2:d7:e3:d0:11:6a:46:d0:
         47:29:8d:ef:5e:1e:93:22:09:b5:d6:cf:f0:85:53:b8:5d:f9:
         0f:23:f1:da:55:ce:98:4e:c6:2d:bf:c7:45:3d:05:d5:05:3f:
         14:db:6e:fc:ad:ad:3d:32:14:6f:bc:5d:2b:35:cd:c2:bc:b0:
         d6:63:e3:3b:9b:48:b4:73:28:3d:f9:b6:e7:9f:2f:96:4c:f6:
         b4:b4:da:f7:18:23:74:a6:6a:e1:48:6e:3d:34:7c:6a:97:e6:
         b3:58:85:c6:2c:04:9d:95:ca:9e:fa:cc:1b:64:a3:1e:ec:91:
         f4:9b:fa:60:90:74:29:85:0c:fe:58:a7:3b:c7:f1:cb:ae:22:
         60:f9:10:2c:8d:d3:ce:3c:f6:3b:4f:5c:29:d8:32:d4:e2:dd:
         5b:25:7b:cd:b8:1e:b7:3c:26:74:5f:60:dc:16:27:ce:63:15:
         ea:c4:29:39:c0:43:0b:36:e8:b3:e6:e9:32:90:09:d6:44:20:
         58:44:4a:30:37:1b:f2:80:25:bb:79:2d:6f:ff:a4:7e:19:20:
         a5:2e:d9:14:1e:7c:f7:90:4a:1a:c4:c5:d9:bf:e5:1d:1c:87:
         9e:c9:39:8f:91:5d:51:f2:44:12:ed:c0:1c:e6:0a:3c:f2:c6:
         ef:10:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:06:40 2026 by rpki-client