Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          bIPLYhe7mDHqBgUSsA9N7hNcD5IwB0ugcj52ngXuwLw=
Subject key identifier:   3B:F5:20:98:58:B6:D1:B3:34:95:10:FB:53:48:61:61:1B:E6:50:24
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       019FA41755C365D0A2F07124B60BE357EE85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 15:00:20 +0000
Manifest this update:     Mon 27 Jul 2026 15:00:20 +0000
Manifest next update:     Tue 28 Jul 2026 15:00:20 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: 0QC2RSwRg/+PzrhqdwWoDDxo8eTDXqCxskc60d5bMQE=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:17:55:c3:65:d0:a2:f0:71:24:b6:0b:e3:57:ee:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Jul 27 15:00:20 2026 GMT
            Not After : Jul 28 15:00:20 2026 GMT
        Subject: CN=3bf5209858b6d1b3349510fb534861611be65024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:23:3a:ef:a5:4d:cc:6d:6a:12:f3:e1:57:
                    2f:60:e9:ee:c0:d4:d1:55:26:8b:53:64:18:da:f8:
                    11:3a:2e:01:54:99:c3:b8:a1:1d:a9:5d:47:84:06:
                    85:7a:06:44:9d:4f:5b:f5:06:93:7a:e8:4c:8e:08:
                    98:56:72:4e:36:2e:2a:c7:61:eb:af:be:f7:d7:e6:
                    c7:c3:1f:27:51:85:9a:c5:de:fc:d0:7b:d5:7e:ff:
                    41:94:ed:bb:b8:6e:18:12:7d:4a:41:51:d2:6a:38:
                    5f:ed:74:0a:31:c9:ea:d8:09:8a:21:e5:4f:f0:ab:
                    c1:e8:eb:ae:0d:3b:74:e6:2a:2a:9c:c6:90:70:d8:
                    0e:86:22:2b:cd:59:cc:a4:9b:9f:e3:f4:82:76:ba:
                    7f:64:71:44:26:b0:b2:d4:9a:73:18:91:d8:26:04:
                    07:ad:b9:cc:57:17:fd:e9:22:b5:ef:7c:0c:2a:b8:
                    88:64:3a:06:c7:ce:3d:d6:82:2a:4d:a6:58:06:9b:
                    73:a2:aa:23:92:20:a5:f5:20:0a:a7:90:68:38:20:
                    91:69:10:2c:90:b8:f3:5c:db:01:01:c1:80:7b:84:
                    fa:2c:fb:44:37:fe:fc:75:8d:a7:be:01:81:94:ef:
                    3f:fa:0a:0e:b2:78:9e:be:da:34:73:49:cb:f7:bc:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F5:20:98:58:B6:D1:B3:34:95:10:FB:53:48:61:61:1B:E6:50:24
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:12:16:fa:0d:04:e7:2b:03:1a:32:91:51:24:75:2d:05:f4:
         f4:c3:24:1c:6a:25:f9:ce:f4:e4:ff:7d:2f:9e:13:0c:0f:83:
         17:58:16:ff:f9:b5:4b:50:75:a4:e3:8d:b0:75:23:db:cd:b0:
         de:56:25:08:40:dc:f8:03:97:4f:df:b8:91:da:67:1a:6e:00:
         a0:0e:f4:be:fe:3a:cc:81:e3:8c:4c:3d:e0:7a:52:5b:02:77:
         86:78:2e:af:80:cf:27:3b:de:56:32:80:e6:7a:b0:bf:ce:fa:
         b9:14:fa:3b:d2:a7:65:03:72:67:9b:c8:bc:4d:63:ce:c8:66:
         1b:c9:ff:2e:4b:d4:3b:bf:e6:2c:fd:8a:f2:0f:54:74:8b:38:
         8b:00:be:f0:b7:ec:a4:9d:52:0e:ef:bb:ad:22:37:4a:28:57:
         55:c3:4d:7c:15:aa:8a:aa:77:bf:71:58:13:10:f6:ff:02:50:
         4e:08:76:a1:a8:0d:58:a0:3c:75:95:87:73:a6:47:b3:fc:c6:
         a5:ce:10:0a:0b:37:17:5f:b0:35:00:cd:bd:c4:de:4e:7d:69:
         a4:9f:ed:ab:f8:1e:c3:3e:ea:9a:fa:21:3d:65:1d:49:d2:b3:
         6b:e0:0a:16:ea:4b:c8:51:af:72:f7:4c:df:24:83:95:f6:6d:
         d3:d0:54:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 21:03:52 2026 by rpki-client