Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File:                     fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier:          0q66/n2PPAUpygEUkTIy1e8WYU8QOslhL8ztZ/pB6v8=
Subject key identifier:   0E:CE:3E:DD:23:D6:DD:BB:4E:CE:7D:94:D9:0B:39:71:9F:75:52:D4
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer:       /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial:       019EFB3ACB0CB8CF80AF71B3D54F097784EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number:          0411
Signing time:             Wed 24 Jun 2026 20:03:14 +0000
Manifest this update:     Wed 24 Jun 2026 20:03:14 +0000
Manifest next update:     Thu 25 Jun 2026 20:03:14 +0000
Files and hashes:         1: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (hash: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY=)
                          2: FEiTqIT1cqpRLflYOI_79JGhaks.roa (hash: ifbVEX7UepiZjjPVlo2crki0TP+d7TO8G3eiigYipls=)
                          3: YTidVoJ3o_e_tHyiulhdPBfY7Gk.roa (hash: M3PCGMQDK9b9yJ6Z4+VMcXEpqQGrsEFgiNapFNJuY8o=)
                          4: _vhX2x0MSW_lCM__SUwIoa5cOwM.roa (hash: RJcLvbkKer+dH4YPNNJOTYi3iU1xlbLYxn2gdUfEcwE=)
                          5: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: r+lJJfHeaffRRc48CdCSDF7sflxiC/vrBEWfKCFLSK8=)
                          6: gDbaYpByZHpLd0mzqeStmCna8dI.roa (hash: L/kpgIHgWaHwD4n82QRwP3BnE2jifSCZ3GZu/xc06F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 20:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:3a:cb:0c:b8:cf:80:af:71:b3:d5:4f:09:77:84:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
        Validity
            Not Before: Jun 24 20:03:14 2026 GMT
            Not After : Jun 25 20:03:14 2026 GMT
        Subject: CN=0ece3edd23d6ddbb4ece7d94d90b39719f7552d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bf:fc:a2:72:60:e9:8e:d0:1f:a2:ed:c4:3c:
                    fb:ef:b4:cc:53:73:26:3f:31:a6:01:da:cb:df:fd:
                    ff:af:12:92:26:04:6c:6a:f7:76:fb:7c:a3:6d:d1:
                    e1:06:e4:27:2e:7b:a6:65:8c:4e:5b:25:a9:b6:7c:
                    e3:85:06:3f:98:ad:4e:01:4b:ea:e6:db:5c:ae:1d:
                    ab:ae:b7:58:3e:15:3d:4b:83:74:16:d0:9f:84:37:
                    01:e7:a0:50:87:db:90:61:5b:28:2a:15:a6:0c:26:
                    79:3a:56:cc:cb:4d:48:6d:44:b9:86:20:d2:bc:52:
                    f1:45:3d:24:56:98:95:5b:70:00:a1:9e:36:fa:08:
                    93:af:d2:59:88:fa:38:0c:5e:69:0c:b1:5d:c8:4d:
                    fa:13:df:a4:07:d0:a3:89:3a:fb:37:47:dd:b8:d0:
                    cd:49:59:ff:a5:35:a9:59:ab:89:b3:e1:58:d5:b9:
                    a4:81:ec:9c:48:3e:f4:2e:ac:27:bc:bc:ae:48:24:
                    b7:34:5c:71:72:d6:dd:22:68:dd:94:5c:23:3e:06:
                    01:46:06:95:6b:36:58:46:0c:6f:da:a6:4b:87:44:
                    11:bf:ae:dd:07:6d:40:d6:67:0a:a2:04:90:63:7f:
                    be:e0:af:8c:e4:de:8a:81:e1:2b:75:d1:08:23:16:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:3E:DD:23:D6:DD:BB:4E:CE:7D:94:D9:0B:39:71:9F:75:52:D4
            X509v3 Authority Key Identifier:
                keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:de:e1:2e:5c:de:93:80:e1:fc:0c:b9:1d:0c:94:bb:84:40:
         d5:4a:f8:e5:70:15:1d:7e:50:e8:25:10:f5:a0:f3:38:08:c7:
         01:a0:e8:51:66:52:67:ec:d1:a7:35:01:e0:94:70:b1:7a:0f:
         b0:0a:23:4b:35:8b:c6:d9:40:9e:c4:86:8a:0f:f5:eb:10:39:
         5c:d6:12:5e:e0:a2:63:93:ab:a4:58:7f:3c:77:df:eb:e8:fe:
         fe:fe:6d:d4:c7:ab:6c:0e:c9:90:9f:f5:7a:ac:7f:8f:b6:05:
         ac:a5:61:2d:04:ec:5a:2b:24:e5:31:89:16:77:93:a0:6d:6f:
         95:2a:6d:93:33:ed:e7:9e:95:61:12:b6:94:14:3c:ac:78:bb:
         c7:a1:71:92:b7:73:f7:28:9e:5b:99:e3:28:41:d8:28:74:22:
         a8:fb:f9:48:3a:f4:2e:9d:4b:48:fd:e9:da:d1:0b:c4:40:e7:
         f5:69:a6:48:28:61:4a:90:3e:77:b5:35:c0:28:8d:0e:0b:2c:
         52:fd:de:f6:6d:df:4d:09:38:e8:d7:b7:8d:f5:d0:b1:c4:93:
         13:b3:f1:ab:31:33:ae:df:b1:62:11:89:cb:6e:06:eb:fb:d7:
         e3:69:e3:49:cf:b0:be:f5:83:e9:1a:37:55:d0:bc:b8:11:7c:
         a8:52:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 07:15:31 2026 by rpki-client