Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          XZNvyUdOyWX1wUoxceB7JYvhOtXfoJnyx9+TQgK2CV8=
Subject key identifier:   01:2F:76:7D:5A:23:9D:41:2C:8B:54:73:1A:76:E2:3E:88:44:49:1E
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       019F44644FCDEFC5EBF387B6571F4E5A91C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          03C7
Signing time:             Thu 09 Jul 2026 01:00:52 +0000
Manifest this update:     Thu 09 Jul 2026 01:00:52 +0000
Manifest next update:     Fri 10 Jul 2026 01:00:52 +0000
Files and hashes:         1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
                          2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: Or2cUP5ubEVmuaMgTsZ8WLSfAWp4kEbq1mR7PT4MK9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:44:64:4f:cd:ef:c5:eb:f3:87:b6:57:1f:4e:5a:91:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Jul  9 01:00:52 2026 GMT
            Not After : Jul 10 01:00:52 2026 GMT
        Subject: CN=012f767d5a239d412c8b54731a76e23e8844491e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f3:24:b1:3b:40:26:30:1b:09:15:2d:86:c3:
                    5c:f7:a7:8b:15:0c:65:6c:3b:28:69:cf:61:e2:d5:
                    00:64:8d:42:49:44:ef:ef:4d:ae:16:bf:2e:7b:19:
                    5c:5f:70:94:c4:fd:fb:7a:f8:f0:50:fe:7b:52:0a:
                    2d:3e:0b:fe:57:b1:26:90:35:cc:9a:52:fc:68:7c:
                    24:06:b8:a1:a1:cf:b6:0c:37:33:2e:89:0c:76:4b:
                    2b:6f:81:f9:44:fa:15:e1:67:21:a4:b2:c2:1f:f6:
                    11:16:db:95:83:3e:95:80:f8:34:a0:d9:09:38:f9:
                    21:2b:0b:c0:2a:eb:9d:03:c6:46:c1:a8:dd:b6:6d:
                    b2:d1:6d:57:05:35:85:3a:50:78:a3:d3:6b:fd:aa:
                    1f:dd:9d:2d:36:6b:84:08:78:4b:2e:a8:a1:4c:fc:
                    12:a9:02:23:b6:1f:3e:76:14:0f:4b:a6:55:80:54:
                    c6:0e:18:08:8b:db:90:0e:1b:ad:80:71:5a:4a:1e:
                    2d:9a:bc:55:d0:73:38:d5:fb:52:37:17:35:02:0f:
                    52:d3:d2:55:fc:e6:63:aa:e7:0e:47:b1:f7:a2:37:
                    44:6e:db:c6:3e:17:dc:ee:aa:82:4a:23:09:26:11:
                    ab:b1:f2:1e:7b:a4:3a:51:0e:f5:3d:bb:ba:a6:25:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:76:7D:5A:23:9D:41:2C:8B:54:73:1A:76:E2:3E:88:44:49:1E
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:4a:d4:30:60:6a:c0:8b:ce:e0:53:65:d2:0d:d7:93:b9:78:
         43:ef:de:0f:5e:4c:52:73:cc:6c:0b:3c:fe:01:7c:17:64:3f:
         7f:6d:ab:ca:74:d0:f0:70:c2:b8:31:cf:b9:63:0e:f9:e0:79:
         c5:b4:5a:09:a1:af:ce:1f:88:69:5f:f6:73:82:44:3b:dd:9a:
         cd:f4:21:33:d8:56:ee:fa:f9:a9:2c:c9:73:f0:45:9c:54:d1:
         ae:3a:53:2f:76:0d:ac:e5:3f:b6:ff:24:79:01:82:e9:cf:5f:
         c3:a2:f5:d7:7d:32:ca:ad:98:a3:3c:41:18:c4:b7:00:9d:c6:
         c3:f2:56:e3:1e:17:ae:88:31:97:4b:40:cf:5a:03:71:ef:6e:
         b6:45:7f:fb:9d:a2:47:79:9b:c3:df:f2:b6:86:55:53:bc:67:
         9e:21:c7:87:82:f3:5a:57:bf:7f:45:79:c6:d0:8d:3b:39:24:
         d0:42:9d:18:06:49:07:c0:5a:57:41:af:3c:2f:6d:27:6b:4f:
         75:bc:69:de:fc:39:cd:1e:0f:94:81:77:c2:13:1c:54:32:cc:
         c1:73:d9:ba:d1:f0:b4:25:56:22:4f:e6:1a:f8:8e:29:87:db:
         39:64:8f:82:89:36:26:61:aa:cd:14:59:03:d4:82:2b:3d:1e:
         3d:f4:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 07:28:59 2026 by rpki-client