Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
File:                     FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft (raw, json)
Hash identifier:          r2apsGGDIeK+oHQin9G0Ugr4lvZ1FhpkUFOcF3Mw8Es=
Subject key identifier:   44:1F:CB:59:B2:F5:22:DF:AA:C5:FF:80:FE:67:61:6E:66:6C:B3:63
Authority key identifier: 14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69
Certificate issuer:       /CN=149d1f67a41ca2e405017cbe48bafff1733e3869
Certificate serial:       019F9F5EE830B02D8D42A067E53EC0DC6C56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
Manifest number:          19E1
Signing time:             Sun 26 Jul 2026 17:00:24 +0000
Manifest this update:     Sun 26 Jul 2026 17:00:24 +0000
Manifest next update:     Mon 27 Jul 2026 17:00:24 +0000
Files and hashes:         1: FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl (hash: nixnOTP26M/xM3sC4oxtPVqzxjd4RThyuUHi4dzD+Mg=)
                          2: Hi2coNGbS0SNcLHmaFZqC-JisHw.roa (hash: 726vn6l/gn+j6OaaVF2Ab7Hnoisjkt4zXJbf/U52Rek=)
                          3: szRXwnpRyzklmfhXc-z7cr_xBWA.roa (hash: 6Q00UZKxfktIvpdDNdNKqT6xKPj3vxzFyFYU67dsIlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:5e:e8:30:b0:2d:8d:42:a0:67:e5:3e:c0:dc:6c:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149d1f67a41ca2e405017cbe48bafff1733e3869
        Validity
            Not Before: Jul 26 17:00:24 2026 GMT
            Not After : Jul 27 17:00:24 2026 GMT
        Subject: CN=441fcb59b2f522dfaac5ff80fe67616e666cb363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0d:74:57:d3:33:56:54:be:ba:80:51:4b:67:
                    ce:8c:d2:16:a5:73:1c:ea:e6:58:fc:4a:76:9a:52:
                    99:0c:b0:98:0a:06:98:9d:79:d3:3e:b5:ae:b9:f3:
                    ad:dd:cb:8f:81:37:00:4c:43:13:82:8d:d6:40:c4:
                    94:09:05:1c:89:3f:7c:2f:ec:87:72:8d:2c:d1:38:
                    c8:4a:59:37:15:3a:00:cc:be:24:ea:2c:6f:c4:b4:
                    08:5a:af:90:2e:9c:0f:7a:03:73:3b:f5:04:8b:24:
                    b2:da:a0:28:b2:92:38:04:18:b0:81:9c:a5:83:80:
                    3e:e4:b9:fe:7a:28:98:d5:c6:6b:b6:18:7b:38:75:
                    1e:a4:20:51:41:e6:f3:11:43:1f:92:e3:0e:2b:11:
                    8b:4b:6f:e6:14:e7:c8:29:4c:20:88:4b:42:38:db:
                    69:35:cd:aa:eb:f3:cb:58:74:d2:b5:df:38:52:e0:
                    b5:b2:2c:90:be:a3:40:1b:2a:56:6a:22:43:62:84:
                    9d:65:10:fb:6f:8b:42:f1:c4:08:71:aa:db:6f:55:
                    ba:6f:d6:f7:51:a0:d2:6a:d5:a7:11:b3:7d:41:54:
                    4a:ab:57:94:5c:27:51:3a:64:6d:65:15:09:4b:a2:
                    2d:cf:80:65:6f:9f:d2:1e:7d:d7:af:1a:8e:24:4d:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1F:CB:59:B2:F5:22:DF:AA:C5:FF:80:FE:67:61:6E:66:6C:B3:63
            X509v3 Authority Key Identifier:
                keyid:14:9D:1F:67:A4:1C:A2:E4:05:01:7C:BE:48:BA:FF:F1:73:3E:38:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/b5090a-ec58-46db-9dd9-5485682a05f5/1/FJ0fZ6QcouQFAXy-SLr_8XM-OGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:de:85:62:5c:fe:63:c2:5c:40:8b:9d:cb:7f:a4:c7:c9:c1:
         37:c6:45:1e:8b:c9:eb:d3:04:a0:b5:5b:34:3f:0a:b9:ee:fb:
         c6:b2:91:f0:79:a9:fd:2d:79:48:8f:ff:84:89:77:82:d5:03:
         b5:54:48:38:09:be:b4:3f:0b:0c:5d:de:8c:e7:9d:e6:79:6f:
         0f:bd:79:d4:4d:d7:e1:7f:3a:b8:a7:d1:8f:8c:e1:45:0a:00:
         78:f4:a8:d6:ee:a0:7d:57:41:89:b2:ce:3f:d2:10:f0:1e:a0:
         3a:f7:5e:8e:49:5b:88:f7:2b:f6:19:57:b7:c9:95:85:e1:2a:
         14:d6:c9:c1:0c:ec:50:fc:0f:b6:48:9b:6e:05:e5:f3:5d:2e:
         6c:29:5d:13:7d:6e:f4:ad:95:c5:76:62:78:41:4f:0f:bb:fc:
         25:24:71:68:2a:43:68:44:6b:f2:22:b5:76:ee:76:67:5b:48:
         95:19:79:6a:1d:bb:28:9f:b7:b3:83:31:24:b8:7c:0b:05:19:
         3e:63:81:66:94:28:c1:4c:a5:e5:f0:e7:5c:30:ee:28:69:57:
         ec:c4:03:27:00:39:9e:f4:97:33:4d:7b:ca:0a:4e:0f:40:03:
         c5:0b:5b:48:a0:9c:33:2d:5f:9c:21:2e:06:94:c8:74:94:62:
         81:9f:c8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:22 2026 by rpki-client