Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
File:                     FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft (raw, json)
Hash identifier:          No5iISY5pKSTicgU5lJpR+uoarZavKMfnaiY0A7yiew=
Subject key identifier:   CF:4C:6D:13:FC:B4:6A:B7:62:E9:EB:36:0D:51:35:73:24:2E:1D:EF
Authority key identifier: 14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56
Certificate issuer:       /CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
Certificate serial:       019FA1F2A89C17012F9EC73E4E0450CA8ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
Manifest number:          19D7
Signing time:             Mon 27 Jul 2026 05:01:02 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:02 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:02 +0000
Files and hashes:         1: 3XhI2AnxE9Iob8Z4cu24L14fqh0.roa (hash: FrYruNBfkjSi7B2g8ZPV7E7JbrqIhIIg8LFhYWGl7/4=)
                          2: FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl (hash: 3eEwIgo1m0gNxHQHylQ441rNTsXf9r9V+v20IlAkLnU=)
                          3: FftuvVwHax9rBycvM4DRr28X-6o.roa (hash: bwaRbSjhdz4y7KT7CJ7m6+1M8w/NqaRjSm1en4rz3ZU=)
                          4: JQnCfY6YafPRsaYc7zKPwbPOWDw.roa (hash: GmdykJDu2x9EESYje5rdUV18QI0AESFSpmuLu31e0OA=)
                          5: YInBR7bsYgDdM9URzfND8cE-528.roa (hash: QGeVQC9vpESzvL8GZfpI0KdzNZQJgFqjrA2fAYIfxE0=)
                          6: gQ7St51r5tRsr1STgJZSpb51fy0.roa (hash: 2Qh2IkkpDn5a2bQBxP6BJ08eMuKLDD2wyJNu9l57aaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:a8:9c:17:01:2f:9e:c7:3e:4e:04:50:ca:8e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1474b6fc67b6b90db311c61fc0e3a9c752833c56
        Validity
            Not Before: Jul 27 05:01:02 2026 GMT
            Not After : Jul 28 05:01:02 2026 GMT
        Subject: CN=cf4c6d13fcb46ab762e9eb360d513573242e1def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:eb:ba:0d:e9:28:29:94:34:4a:f3:e9:b8:cb:
                    7d:5e:f4:bc:5a:07:64:21:ab:f0:95:bf:b2:b2:7c:
                    39:be:2f:ae:f8:ef:b0:0d:97:da:52:f1:1e:97:75:
                    64:7e:61:82:8c:3f:c7:d9:50:f2:89:6a:b4:d7:9d:
                    11:f7:b1:7c:ca:7f:10:59:91:26:eb:f5:86:b6:0f:
                    a8:9f:ce:22:12:a0:29:8a:65:95:6d:39:ff:50:05:
                    9e:c7:44:f5:02:05:02:68:f8:bf:94:fe:10:d3:2e:
                    fa:f2:35:b3:9d:29:45:47:10:1d:eb:ab:3a:48:5d:
                    1a:41:4e:71:41:3e:d5:09:61:b3:8c:75:44:f1:d9:
                    88:a1:84:fd:5c:d8:d5:be:4e:99:62:be:50:cd:13:
                    cf:e9:7f:06:12:4e:5c:48:d1:8a:ea:04:b5:45:bb:
                    bd:2c:c6:0f:37:dd:e3:8f:78:79:3a:f0:a4:5e:80:
                    a9:ee:7d:4c:64:f4:56:e7:0b:88:5e:42:bf:fa:2a:
                    29:ce:95:75:86:85:15:47:fb:b2:cc:d4:f0:aa:c0:
                    9d:82:ad:3b:bc:9b:01:5a:6f:4c:a3:1a:e2:13:5a:
                    34:4b:f7:99:22:d2:a1:c9:ac:fa:43:e6:8e:3e:e5:
                    da:f6:a8:a2:3c:3b:58:be:bb:19:61:6a:e1:fa:24:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:6D:13:FC:B4:6A:B7:62:E9:EB:36:0D:51:35:73:24:2E:1D:EF
            X509v3 Authority Key Identifier:
                keyid:14:74:B6:FC:67:B6:B9:0D:B3:11:C6:1F:C0:E3:A9:C7:52:83:3C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b1b41d-d886-442a-9524-8c56d8fe17b5/1/FHS2_Ge2uQ2zEcYfwOOpx1KDPFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:9b:b5:95:69:66:a0:dd:89:70:b4:58:54:b7:bf:33:bd:33:
         7d:75:6b:e4:4c:50:91:24:31:89:45:7a:b1:eb:5a:37:8d:2d:
         9c:14:b2:d2:c6:28:0e:5c:bd:54:ea:c7:29:f6:f1:eb:fb:33:
         2c:31:71:2b:a3:3d:1a:eb:a6:fe:4c:c1:d9:0a:bc:ff:2d:5a:
         e4:6d:d0:ef:1b:e9:15:b3:45:be:e0:a5:73:b7:e4:30:d9:ee:
         6c:1e:1d:b1:06:08:6f:eb:21:aa:2d:c7:91:8f:8d:75:72:90:
         fc:02:b4:f2:86:b2:29:3a:f3:c4:ad:f8:1d:fa:b5:d8:d8:71:
         86:79:bc:a5:94:27:07:4d:5e:94:47:91:db:9f:ae:ca:7f:2b:
         37:a2:b7:75:83:de:df:d0:6e:c3:ee:26:fc:9f:a2:a9:ed:81:
         2c:ea:c3:0f:40:e9:e3:be:62:75:46:8e:03:fa:49:be:ad:37:
         86:2f:40:b5:75:c4:db:01:11:d3:c8:81:52:b9:d8:56:c9:ec:
         25:ed:20:58:0b:20:3b:88:5e:3a:e5:a1:b5:c7:69:ff:43:48:
         8f:aa:f9:ff:f6:50:2a:29:6e:02:a1:de:34:b2:29:c0:84:d2:
         1e:0f:3a:01:eb:03:b3:de:ff:e0:8b:c4:20:0d:47:31:e5:63:
         d8:3b:a1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8qicFwEvnsc+TgRQyo7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NzRiNmZjNjdiNmI5MGRiMzExYzYxZmMwZTNhOWM3NTI4
MzNjNTYwHhcNMjYwNzI3MDUwMTAyWhcNMjYwNzI4MDUwMTAyWjAzMTEwLwYDVQQD
EyhjZjRjNmQxM2ZjYjQ2YWI3NjJlOWViMzYwZDUxMzU3MzI0MmUxZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluu6DekoKZQ0SvPpuMt9XvS8Wgdk
Iavwlb+ysnw5vi+u+O+wDZfaUvEel3VkfmGCjD/H2VDyiWq0150R97F8yn8QWZEm
6/WGtg+on84iEqApimWVbTn/UAWex0T1AgUCaPi/lP4Q0y768jWznSlFRxAd66s6
SF0aQU5xQT7VCWGzjHVE8dmIoYT9XNjVvk6ZYr5QzRPP6X8GEk5cSNGK6gS1Rbu9
LMYPN93jj3h5OvCkXoCp7n1MZPRW5wuIXkK/+iopzpV1hoUVR/uyzNTwqsCdgq07
vJsBWm9MoxriE1o0S/eZItKhyaz6Q+aOPuXa9qiiPDtYvrsZYWrh+iTZHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9MbRP8tGq3YunrNg1RNXMkLh3vMB8GA1UdIwQY
MBaAFBR0tvxntrkNsxHGH8DjqcdSgzxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQt
OGM1NmQ4ZmUxN2I1LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMWI0MWQtZDg4Ni00NDJhLTk1MjQtOGM1NmQ4ZmUxN2I1
LzEvRkhTMl9HZTJ1UTJ6RWNZZndPT3B4MUtEUEZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpu1lWlm
oN2JcLRYVLe/M70zfXVr5ExQkSQxiUV6setaN40tnBSy0sYoDly9VOrHKfbx6/sz
LDFxK6M9Guum/kzB2Qq8/y1a5G3Q7xvpFbNFvuClc7fkMNnubB4dsQYIb+shqi3H
kY+NdXKQ/AK08oayKTrzxK34Hfq12Nhxhnm8pZQnB01elEeR25+uyn8rN6K3dYPe
39Buw+4m/J+iqe2BLOrDD0Dp475idUaOA/pJvq03hi9AtXXE2wER08iBUrnYVsns
Je0gWAsgO4heOuWhtcdp/0NIj6r5//ZQKiluAqHeNLIpwITSHg86AesDs97/4IvE
IA1HMeVj2Duh2Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:28:31 2026 by rpki-client