Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
File:                     ftjlhnV1ut-0FwacbZAaCR2EvzE.mft (raw, json)
Hash identifier:          nQuSu6B2Wh0F3Fi7TVRJN2j7ujTPhYdRt95hqYK/suQ=
Subject key identifier:   24:15:31:CD:00:A9:C9:67:DA:B2:15:80:ED:E6:25:9F:28:1F:58:F6
Authority key identifier: 7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31
Certificate issuer:       /CN=7ed8e5867575badfb417069c6d901a091d84bf31
Certificate serial:       019F8AC562909B51C3C1DF3F4802AA2F3433
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
Manifest number:          04B9
Signing time:             Wed 22 Jul 2026 17:00:19 +0000
Manifest this update:     Wed 22 Jul 2026 17:00:19 +0000
Manifest next update:     Thu 23 Jul 2026 17:00:19 +0000
Files and hashes:         1: eHftEtrVJeK48pS78ZHucZUehcs.asa (hash: ijuGTjfu0G7KPysUosHsMD3fkqH2j9Y0uGe3akSkoZs=)
                          2: ftjlhnV1ut-0FwacbZAaCR2EvzE.crl (hash: TKU6FvNvcwzI7sJVyDzl84TNKgc8nJO0Vc1v56ZHW9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 14:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8a:c5:62:90:9b:51:c3:c1:df:3f:48:02:aa:2f:34:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed8e5867575badfb417069c6d901a091d84bf31
        Validity
            Not Before: Jul 22 17:00:19 2026 GMT
            Not After : Jul 23 17:00:19 2026 GMT
        Subject: CN=241531cd00a9c967dab21580ede6259f281f58f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:5f:72:d1:19:00:be:f0:11:d6:1a:e3:34:
                    b3:96:cc:76:86:b4:f4:86:c4:0a:6c:64:98:fd:89:
                    ca:7a:57:de:1a:17:04:3f:fb:ea:82:b7:94:bc:37:
                    09:8e:18:5c:a5:12:51:f6:38:9d:8c:1c:81:8c:ec:
                    4d:57:7e:2f:21:6c:12:18:2f:42:1b:49:46:2e:7a:
                    93:45:6e:4a:b6:1f:0f:ce:e3:60:a1:43:60:61:83:
                    3c:15:eb:a9:5b:f1:77:8c:5a:db:0e:f1:a9:cb:c2:
                    ae:96:32:d3:05:f1:b8:0a:6a:f2:89:81:ed:54:f2:
                    02:9f:44:2d:fa:ec:b4:cd:2d:cd:fa:d4:75:6c:e6:
                    d0:47:46:b1:f6:c5:84:87:83:51:4e:03:54:79:42:
                    ca:20:a5:36:3c:9b:4f:79:13:f0:78:91:0b:9d:44:
                    4b:fd:8f:5e:fc:46:d5:8b:5c:1f:c8:eb:cb:b1:aa:
                    27:d3:0f:bd:1a:69:46:f9:da:08:02:e9:3a:6b:ee:
                    63:73:54:e3:4c:d4:f4:b6:25:2f:22:fc:4e:7b:97:
                    a0:9d:a7:48:28:49:33:8c:27:4a:b8:a3:7d:03:43:
                    4e:06:4d:54:0a:14:42:73:97:98:50:7e:6b:42:fd:
                    c9:29:97:2e:ae:27:f6:ca:79:b4:84:b0:7b:16:9e:
                    f2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:15:31:CD:00:A9:C9:67:DA:B2:15:80:ED:E6:25:9F:28:1F:58:F6
            X509v3 Authority Key Identifier:
                keyid:7E:D8:E5:86:75:75:BA:DF:B4:17:06:9C:6D:90:1A:09:1D:84:BF:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftjlhnV1ut-0FwacbZAaCR2EvzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6de618-6730-4d29-bd87-6de9355edb3a/1/ftjlhnV1ut-0FwacbZAaCR2EvzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:24:dd:79:cb:c1:c6:0a:0b:6e:a0:e0:b0:bb:24:d6:e0:76:
         7e:e9:fa:a7:fc:90:6c:21:c0:40:a5:a9:60:c4:57:ab:c9:69:
         4c:a4:9a:62:6e:0f:32:e3:88:d1:da:06:fa:00:79:1a:d5:c3:
         2c:8a:34:53:17:fd:3f:1b:c7:cf:cf:58:73:bd:97:c5:a1:be:
         fb:93:24:91:bc:2f:28:ba:ee:85:dc:d4:74:1e:86:bd:05:e4:
         d1:c2:9f:c9:47:a6:e2:65:3e:71:40:65:64:b1:14:72:0b:89:
         27:ca:ff:5d:0d:a9:9e:e8:c3:46:c4:73:40:35:e9:ad:77:35:
         c4:8d:34:32:6a:8c:f3:ea:2c:c5:98:03:53:9f:d9:18:9b:28:
         88:2b:28:65:4d:6d:50:ef:8c:04:58:55:4c:93:81:95:b1:9f:
         d9:79:8b:e1:21:99:8c:86:8a:6c:99:1c:f7:29:16:7c:ae:de:
         bb:7f:ef:5f:d9:27:ea:cf:ed:7a:e0:1d:b2:44:5c:08:89:9f:
         35:95:5c:f8:31:b1:a7:00:97:81:c5:01:b8:a9:0d:39:dc:6f:
         11:ab:cb:c3:0b:87:3e:7d:85:04:6c:af:3a:02:76:0f:3a:35:
         5f:66:f3:01:46:7c:7a:48:f7:03:5c:6f:4e:1f:7a:b2:25:70:
         53:6c:6c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:05:44 2026 by rpki-client