Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          LdC/v9mTSyT0naETTA6F/Ac4gH755PGEf/TofOsPQjQ=
Subject key identifier:   7C:A4:14:00:F3:EF:2B:F3:0D:D8:93:21:B6:42:79:B5:46:B4:B7:E8
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       019F8267EC70D997A9DDB09ABA7439C738C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0A1B
Signing time:             Tue 21 Jul 2026 02:01:16 +0000
Manifest this update:     Tue 21 Jul 2026 02:01:16 +0000
Manifest next update:     Wed 22 Jul 2026 02:01:16 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: 7umfvVDkU4pr0g1t2uC12HfxX/ljqq/cZ18JcTzo5xY=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:ec:70:d9:97:a9:dd:b0:9a:ba:74:39:c7:38:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jul 21 02:01:16 2026 GMT
            Not After : Jul 22 02:01:16 2026 GMT
        Subject: CN=7ca41400f3ef2bf30dd89321b64279b546b4b7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:4c:8a:1c:ac:7c:1a:13:fc:b6:6c:7c:3d:
                    d5:0c:84:68:1c:8e:c1:3c:eb:58:d6:fd:c4:e6:83:
                    1c:e5:e0:ed:44:ed:59:84:c7:b7:a6:e5:47:e3:4c:
                    cc:65:1a:bb:36:93:84:f2:89:96:65:dc:6d:24:ba:
                    04:72:9f:e3:63:38:3e:e7:20:d1:b5:f0:ad:3c:52:
                    ea:d4:ae:60:ae:45:4f:10:d7:1a:b2:c9:f2:80:68:
                    46:e7:dc:eb:e2:00:d4:d6:fb:9b:78:50:d3:b9:26:
                    bd:a4:c7:e4:d7:24:26:44:fc:97:28:4f:9b:4e:02:
                    1f:b1:b0:85:de:a8:e6:48:cd:91:2f:5b:ea:67:cd:
                    2e:78:12:e9:f9:2a:e7:4a:a1:75:27:96:df:24:72:
                    a6:92:cf:29:a5:f1:82:7e:4b:9e:29:e2:96:7a:c9:
                    83:ee:f7:ef:36:03:7a:6b:6a:97:c8:6a:1e:fc:88:
                    51:34:7c:3e:f8:f5:74:8c:e0:9d:82:42:8b:54:d3:
                    f3:a8:f7:33:bf:e8:4a:53:6f:19:58:8b:a3:e2:65:
                    ca:0a:85:24:fc:fa:34:b0:41:7c:76:5e:3e:49:e3:
                    d7:fb:41:e7:13:54:db:4a:0d:5f:ce:f6:26:4b:90:
                    7e:2b:9c:e0:ac:95:2f:44:8b:0d:49:80:d0:c5:13:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A4:14:00:F3:EF:2B:F3:0D:D8:93:21:B6:42:79:B5:46:B4:B7:E8
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e4:28:cf:47:84:3c:c0:64:db:18:07:52:5c:3c:e6:53:86:
         a4:23:69:d7:8f:c0:e2:8e:29:86:04:5f:a4:0e:1a:cf:e2:30:
         b0:68:ae:5b:a3:48:1e:36:a9:59:3d:70:7a:e2:19:a9:78:40:
         e0:53:33:ba:8f:4f:63:ec:32:ae:c3:d6:39:e5:d0:d9:40:2b:
         fd:c5:30:7f:f4:5b:18:0c:5e:a2:d0:28:38:12:bc:42:5b:a2:
         d5:26:af:54:b2:18:59:8a:d3:99:a9:d4:2a:51:7c:3c:c9:07:
         94:36:e9:d5:6e:04:c2:d6:d1:63:f3:fd:2d:24:1e:00:f3:c3:
         55:71:47:28:c2:a8:6c:1b:d6:35:f7:fc:54:60:d1:f8:c0:48:
         35:ac:4e:e4:6a:9f:c4:a8:90:55:6f:93:69:fc:ad:be:75:30:
         90:10:47:6b:46:52:7e:7d:a5:1e:25:78:f9:7d:dc:b6:87:db:
         93:63:aa:ed:f4:f9:fe:d9:69:f8:13:53:41:be:ea:d4:fb:1f:
         a1:e1:7a:a1:42:e4:c2:2d:09:59:25:6e:cc:12:e6:6b:20:bb:
         89:a0:a6:94:ae:7c:0a:10:ff:be:71:f8:6e:93:aa:9c:39:93:
         9f:f6:0e:d0:64:a7:1d:89:f9:f1:76:d6:03:26:5e:ba:73:00:
         d8:1f:9c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:58:36 2026 by rpki-client