Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
File:                     FT8kGD1slRhZGTSebpJTNzZDe5Q.mft (raw, json)
Hash identifier:          UQ42L4xMoFdJOzKZ6NKEW6RlZB157Jy6VL8Yy3VnPHM=
Subject key identifier:   75:B1:8C:F9:C5:A6:D0:AE:56:A2:3D:2A:F4:D6:BC:0D:AD:47:C7:C4
Authority key identifier: 15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94
Certificate issuer:       /CN=153f24183d6c95185919349e6e92533736437b94
Certificate serial:       019F864456A839A8829F5E9DFC38D30CE0B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
Manifest number:          0ABC
Signing time:             Tue 21 Jul 2026 20:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:53 +0000
Files and hashes:         1: FT8kGD1slRhZGTSebpJTNzZDe5Q.crl (hash: 8eUU1cUVL06KOhxYuAnkmyW2vohP8NLiew22RmeSlJA=)
                          2: dmlQS2Sd9qDd919b9z3NpsKBzf4.roa (hash: cTIEAwkFVrrLFFu6MkzuxguAlzRRpHYYKaiTprN0Urw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 15:27:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:56:a8:39:a8:82:9f:5e:9d:fc:38:d3:0c:e0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153f24183d6c95185919349e6e92533736437b94
        Validity
            Not Before: Jul 21 20:00:53 2026 GMT
            Not After : Jul 22 20:00:53 2026 GMT
        Subject: CN=75b18cf9c5a6d0ae56a23d2af4d6bc0dad47c7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:0c:3e:ed:73:c6:6c:41:50:44:cd:56:3d:
                    56:8f:12:92:75:99:fb:d1:49:f4:ac:5f:c9:21:8f:
                    f7:0c:98:a4:92:0c:02:d7:0f:13:f4:14:87:43:2f:
                    49:8a:ec:cb:49:14:6c:41:9f:9a:87:f0:dc:4f:a1:
                    81:32:aa:f9:c5:31:7f:d1:51:2c:5b:a6:29:66:6d:
                    71:8a:ad:f8:9e:90:05:ec:79:7c:cb:9c:65:eb:83:
                    bc:39:62:43:49:09:96:01:4c:39:5a:50:0e:c3:0e:
                    6b:48:eb:42:97:d0:c9:ed:0b:58:9e:4b:f0:cd:c4:
                    3d:02:28:d6:6e:c1:9b:6d:c6:cf:bd:1e:8e:8f:3c:
                    81:7b:41:92:8f:a4:b0:5c:66:79:af:02:d7:8b:ef:
                    b6:63:47:e6:a3:9f:e1:44:71:94:43:99:49:ac:3b:
                    64:d3:48:70:75:30:1c:7e:c0:6e:99:57:f2:f8:b3:
                    bd:3f:da:3d:59:ee:a9:83:b2:78:6a:76:9d:96:ed:
                    c4:33:7f:ab:3d:04:68:f2:4f:72:5f:77:6d:24:3c:
                    7e:00:fe:88:21:6a:62:3f:29:1d:69:3f:83:60:b0:
                    32:07:39:64:97:0d:40:61:65:82:94:13:d2:12:80:
                    8f:a5:7d:ff:2e:af:74:d6:45:84:28:90:9c:a3:48:
                    77:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:B1:8C:F9:C5:A6:D0:AE:56:A2:3D:2A:F4:D6:BC:0D:AD:47:C7:C4
            X509v3 Authority Key Identifier:
                keyid:15:3F:24:18:3D:6C:95:18:59:19:34:9E:6E:92:53:37:36:43:7B:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT8kGD1slRhZGTSebpJTNzZDe5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b05e08-0762-4dc7-a4b0-5805d3f3dbb2/1/FT8kGD1slRhZGTSebpJTNzZDe5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:91:74:19:8c:cd:6f:9f:dd:86:64:f1:52:4d:71:10:4f:80:
         7c:dd:52:7c:6e:91:bb:4d:d7:e2:95:05:df:ed:c1:ab:30:e4:
         5f:12:c2:52:c2:49:98:dd:b9:48:60:18:40:e4:cd:e2:12:de:
         85:62:e8:dc:74:2a:e9:5c:77:6d:1d:d9:8a:b0:d8:1c:5d:b1:
         4d:9f:98:23:1b:fa:26:f6:1e:f4:f9:e7:2f:fe:17:97:0a:f0:
         f6:1c:67:53:7e:08:55:b1:ee:eb:5c:13:bf:8a:c7:ad:43:42:
         56:5c:5b:86:b3:6d:9e:35:ed:d7:14:1a:ca:36:f5:8f:43:50:
         68:f7:95:3a:88:14:60:07:20:c6:63:70:82:35:f8:1b:d2:e9:
         12:f8:f1:fe:2a:04:ee:6c:be:79:9e:9e:2a:a2:0a:0f:6f:7f:
         8d:ad:16:13:41:24:8d:09:df:d3:83:d1:08:e6:68:af:c8:a9:
         50:6b:ee:8b:72:84:3f:e6:de:ac:86:e7:c8:e4:30:12:e6:2c:
         49:ee:c3:60:a1:88:89:5a:25:c0:c8:44:24:94:68:04:56:96:
         3a:98:fd:6e:a3:12:f0:5d:4c:49:f3:12:da:5b:2c:55:35:56:
         a1:83:9f:b1:55:b7:e0:9b:95:21:e7:c5:fa:3d:70:7f:0b:16:
         c4:e1:47:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:40:20 2026 by rpki-client