Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File:                     fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier:          EKB/CODOza/v4qrWtnxUKTQVyHL08yFhDASWbHkTZJg=
Subject key identifier:   BE:28:1A:4F:26:EF:83:4E:89:2D:C1:30:B1:47:B3:0F:E1:48:09:46
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer:       /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial:       019F1503D8F72CF8B1429B92CFC0BAAD301A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number:          1984
Signing time:             Mon 29 Jun 2026 20:13:21 +0000
Manifest this update:     Mon 29 Jun 2026 20:13:21 +0000
Manifest next update:     Tue 30 Jun 2026 20:13:21 +0000
Files and hashes:         1: 6EIMxUGXsynPo9rEQzJnVPG98WI.roa (hash: VbFvYrwcCtKMyImGiFiN8H8Az5Dp2KBcZOXOTXrbmhw=)
                          2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: YAXVSXvhHDnnluX+SRvcnHuD69GRFghWyrMXxj2jM/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:03:d8:f7:2c:f8:b1:42:9b:92:cf:c0:ba:ad:30:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
        Validity
            Not Before: Jun 29 20:13:21 2026 GMT
            Not After : Jun 30 20:13:21 2026 GMT
        Subject: CN=be281a4f26ef834e892dc130b147b30fe1480946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f5:6c:7d:75:1d:92:52:62:62:4a:19:1a:38:
                    a8:82:3f:49:88:72:6a:d2:39:75:6b:5b:af:07:de:
                    e5:97:0e:3d:be:92:7b:5d:b8:4a:5b:6f:02:ae:f7:
                    88:c6:ec:76:0d:03:91:67:7a:38:45:b1:af:da:26:
                    3f:74:7e:8a:92:be:ae:99:19:72:ac:8f:14:6e:b0:
                    a1:c9:61:79:54:9a:8a:b0:d0:6f:ba:a1:53:fd:2e:
                    b7:4e:6f:e6:c6:ca:be:38:cc:4c:f0:f2:35:94:0c:
                    e8:62:8b:6b:84:72:c7:5a:9c:85:57:b3:cf:2a:12:
                    a3:8f:ed:b6:0c:ff:bf:f8:cf:4f:fa:ab:c4:ad:6e:
                    1e:ec:86:8d:b5:f1:6a:18:d5:7a:2c:41:81:9c:79:
                    b5:a0:a2:28:ba:d4:3e:6d:c8:85:51:8e:fc:f7:9d:
                    b5:12:4b:90:69:87:3d:91:77:44:62:7e:59:87:6e:
                    e5:06:c4:e8:8f:d4:71:89:d4:4a:19:30:31:1e:77:
                    6b:50:98:d6:0e:07:a7:4e:b4:63:64:12:16:c4:f3:
                    2c:27:8a:ea:f6:9f:7e:4a:b3:d8:6f:78:a2:55:27:
                    21:68:dc:79:49:b9:a9:16:5e:85:c8:de:5d:bc:60:
                    7d:6b:fd:de:43:ae:9f:a8:ce:d3:98:fa:f3:6d:e8:
                    c2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:1A:4F:26:EF:83:4E:89:2D:C1:30:B1:47:B3:0F:E1:48:09:46
            X509v3 Authority Key Identifier:
                keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:6a:5d:36:97:f2:b7:28:47:9d:46:9c:09:ac:cc:02:90:e5:
         69:68:73:5a:b2:5b:f2:25:f3:67:1a:8f:d0:ca:62:7f:d9:cd:
         d1:54:8d:31:b5:21:bf:a2:50:a1:1f:8b:82:54:85:dd:be:b2:
         50:7c:7f:2d:4b:fb:b2:0d:31:49:bd:63:54:82:b3:89:39:4e:
         61:cc:69:9b:7e:58:98:7a:31:43:01:e7:d8:ac:cb:2d:60:00:
         8b:c9:54:d7:d5:42:29:bf:18:c4:0c:b7:0c:2c:b5:d4:a3:c1:
         c0:45:b2:22:7f:f3:01:0e:81:da:21:4d:3d:62:ae:73:f0:66:
         ad:6c:53:b6:1d:6f:2f:1b:28:48:b5:83:1e:5b:69:1e:58:00:
         0d:3e:33:e4:7a:e3:90:ef:ae:ab:69:c0:c9:e9:34:5d:46:fa:
         f2:c8:e6:75:16:5c:c3:4b:76:70:6d:44:70:10:f9:bd:3c:fa:
         ff:63:eb:84:18:13:5e:82:6a:25:df:1c:d4:67:3b:5a:a4:6b:
         b8:55:b3:9b:17:2c:4d:23:f0:57:f1:c5:57:dd:9c:77:10:a8:
         23:15:27:b9:32:4f:35:99:9e:57:b1:6a:9e:02:55:41:24:ca:
         08:d9:2e:91:92:97:5f:56:a9:a1:3f:03:8f:ca:0c:c5:e7:b3:
         1e:9f:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:34:36 2026 by rpki-client