Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          uqOzQoHgxv2JOobQxW2M8RUaJW1RQpe2gzmF536gBsE=
Subject key identifier:   2B:0F:AC:62:12:B8:C1:99:F6:94:65:65:9F:77:3A:5E:5E:6A:13:59
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       019EB921136AEBE5A4A184AE67F539934A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          1629
Signing time:             Fri 12 Jun 2026 00:00:12 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:12 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:12 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: qed/xxXdvNRqhqf7lk5Es0MK4/SQvha7Wnsab4AN27w=)
                          2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:13:6a:eb:e5:a4:a1:84:ae:67:f5:39:93:4a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Jun 12 00:00:12 2026 GMT
            Not After : Jun 13 00:00:12 2026 GMT
        Subject: CN=2b0fac6212b8c199f69465659f773a5e5e6a1359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:14:19:1b:3f:b7:d0:65:09:56:df:15:23:6c:
                    10:ad:52:ca:a2:a1:70:de:e7:e6:83:e6:a2:53:18:
                    8c:e4:c0:4c:57:1f:eb:0f:2f:db:f2:88:f1:f8:56:
                    bf:09:fb:18:dc:c6:a8:87:a1:70:ae:f0:2a:2a:8d:
                    45:b8:7d:1a:00:0a:88:20:c1:bf:77:33:93:13:9e:
                    0f:bb:8b:9c:59:ca:39:60:ee:02:9d:52:fb:23:c4:
                    cf:61:a0:15:e0:b4:d1:46:a3:fb:d0:a8:3a:1a:cc:
                    32:ed:a7:46:66:14:fc:de:8d:4c:42:51:4b:04:b4:
                    02:f5:c1:4f:43:7a:7a:7b:89:f2:10:75:63:3c:bf:
                    08:2d:bc:6a:37:99:f8:6e:aa:69:7c:89:1c:60:1d:
                    8a:06:c5:eb:69:42:79:06:b6:d4:20:a0:1d:65:9a:
                    13:e6:f7:7b:c6:06:c8:d7:00:d4:9d:6b:c1:91:56:
                    52:9f:05:92:b1:8d:cf:8a:13:11:ae:e8:e5:fc:e8:
                    68:7b:22:5b:ea:a2:e6:ac:54:f0:95:bb:26:84:f2:
                    a2:98:74:c3:f0:56:4c:96:ff:3d:61:34:74:83:08:
                    fa:6a:c4:52:b5:e5:7b:7e:4d:1b:81:de:b3:98:b3:
                    05:4e:f2:c5:f0:c1:71:09:7c:2c:d8:53:1f:1c:a7:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:AC:62:12:B8:C1:99:F6:94:65:65:9F:77:3A:5E:5E:6A:13:59
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:01:bf:60:80:a1:b6:16:01:1a:16:b5:c7:08:df:d0:35:12:
         6c:f7:54:31:32:21:7d:59:33:c6:1d:a3:33:a7:f5:fa:34:fc:
         52:95:42:1b:36:5e:f6:c6:19:0c:a2:bb:fb:b7:07:e5:e1:30:
         76:8a:e9:1b:05:be:c5:41:04:d5:5a:d7:f5:69:96:fd:08:fd:
         74:2f:4b:ba:a5:88:b0:72:32:96:64:88:46:26:e2:dd:31:f0:
         3b:5a:a6:7e:2c:ba:10:27:22:f7:18:4d:d8:e2:70:09:c8:05:
         e6:15:07:62:eb:74:cb:56:bf:9d:34:30:fa:c3:68:97:a2:b8:
         db:77:fc:34:92:fa:d9:8a:88:11:21:04:66:2c:55:9f:06:3a:
         82:fb:ee:6a:bf:39:82:80:ba:cf:32:da:7d:7e:af:7a:e0:33:
         0e:a8:af:b9:b5:54:40:1f:45:f0:b9:39:0b:c8:bc:15:62:e5:
         6d:27:47:79:5a:4b:fa:87:54:cd:22:e1:0b:62:dd:be:4e:d9:
         9e:06:35:9b:7d:5a:26:6b:d8:f5:80:1f:c1:cf:09:9e:68:c8:
         ec:c5:07:cd:34:79:d3:b8:4f:7b:58:6e:df:43:eb:68:ac:3a:
         64:00:7a:44:fd:3e:a2:52:ed:c2:a0:ea:76:ef:5c:59:46:08:
         d6:69:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:38:32 2026 by rpki-client