Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
File:                     fcVVNSMj28woe4fg1qSBSmOrvUY.mft (raw, json)
Hash identifier:          cD7Dn9stty6M32c7LekQtvYPAXkh3xyT4QkJLnY8VQg=
Subject key identifier:   36:18:12:F4:03:E6:72:02:1E:AD:B4:88:ED:1B:0C:F2:F3:F8:D7:2D
Authority key identifier: 7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46
Certificate issuer:       /CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
Certificate serial:       019EBBEB4661D22AAAF74F978E1FBA57E1BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
Manifest number:          0636
Signing time:             Fri 12 Jun 2026 13:00:18 +0000
Manifest this update:     Fri 12 Jun 2026 13:00:18 +0000
Manifest next update:     Sat 13 Jun 2026 13:00:18 +0000
Files and hashes:         1: d3XCpcyn0uAgmWptpHQjYP7UPLA.roa (hash: ou/aEB+Ce2n+pbDK9cilwO6M3zpwbvFU2gW96y63Kxw=)
                          2: fcVVNSMj28woe4fg1qSBSmOrvUY.crl (hash: Gbphgws6wkGiHV+ZZ0c5d/b/99aD5RRNP0FTIaZdLMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 07:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bb:eb:46:61:d2:2a:aa:f7:4f:97:8e:1f:ba:57:e1:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc555352323dbcc287b87e0d6a4814a63abbd46
        Validity
            Not Before: Jun 12 13:00:18 2026 GMT
            Not After : Jun 13 13:00:18 2026 GMT
        Subject: CN=361812f403e672021eadb488ed1b0cf2f3f8d72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d9:8a:e0:f6:4a:e4:45:40:0d:bb:7c:f2:1a:
                    a9:aa:9f:54:78:41:be:4b:c4:50:07:d0:bd:f4:0b:
                    0f:31:10:22:57:fd:f7:86:f8:00:c0:f6:ec:90:d7:
                    e6:7b:f4:66:54:54:48:5a:6f:fa:65:78:f1:98:12:
                    e8:54:d7:30:ae:3e:40:3a:15:e6:9d:da:52:21:54:
                    95:a7:32:c1:ef:fc:9b:75:e3:33:16:f3:a7:77:7c:
                    5e:3e:61:16:b7:5d:7d:26:9e:82:27:ab:dc:23:c8:
                    89:22:2a:e9:6b:b4:7a:3c:a8:54:9d:0f:3f:f5:14:
                    5c:a7:02:f9:27:f3:dc:b9:a3:be:e4:cb:37:8c:e5:
                    f5:85:dd:33:23:d1:75:91:0b:d2:8f:f7:03:7d:a0:
                    8d:94:a8:e2:86:da:33:e4:02:42:94:f1:19:67:5c:
                    92:de:8d:fd:e8:c0:a5:92:21:62:5d:46:af:d2:38:
                    1e:dc:38:30:3d:3d:91:85:63:f0:e0:d3:8b:58:95:
                    1c:5d:77:c2:18:38:d5:53:d8:d6:c2:63:27:ac:51:
                    bb:d8:ea:24:e8:20:f7:e2:42:e0:c6:38:02:94:e5:
                    39:0d:82:a1:69:cf:06:0d:92:19:b0:54:f6:89:c4:
                    cd:49:33:b4:91:32:1a:fa:68:6e:43:ae:05:71:23:
                    df:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:18:12:F4:03:E6:72:02:1E:AD:B4:88:ED:1B:0C:F2:F3:F8:D7:2D
            X509v3 Authority Key Identifier:
                keyid:7D:C5:55:35:23:23:DB:CC:28:7B:87:E0:D6:A4:81:4A:63:AB:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVVNSMj28woe4fg1qSBSmOrvUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/7a1aee-671b-4f39-b4dd-212a9f310622/1/fcVVNSMj28woe4fg1qSBSmOrvUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:5b:54:d5:46:a6:cd:1a:f9:b6:0b:4c:a4:18:91:51:3d:
         04:8f:6c:ef:fd:ac:81:d9:f3:04:9e:c9:cc:03:59:fa:a6:c4:
         ba:7c:33:60:ca:76:12:cf:0a:e7:d4:1f:bc:ef:72:ea:fd:b4:
         bc:75:27:76:fb:33:f7:82:b7:f9:82:c9:9b:6b:ca:d3:67:35:
         ad:eb:6f:90:d0:20:cc:5f:51:d2:9b:ee:c3:bd:a6:c4:09:b8:
         6a:ac:ac:ed:d9:72:16:dc:19:01:90:a7:22:49:03:41:09:94:
         4a:3d:a6:b9:bc:11:fa:f9:90:4a:39:f0:12:14:80:0c:82:0f:
         18:87:05:0d:15:03:bb:25:dc:ac:8c:88:81:f9:f2:c0:0f:c3:
         30:ab:cd:67:77:1d:91:e9:d1:8d:78:8b:13:db:5b:c5:3a:eb:
         aa:6a:af:fe:a3:f1:2b:a8:00:45:a9:6d:d5:c8:35:a2:5b:5f:
         61:ef:24:55:44:9c:d9:e0:5f:b6:ad:ef:d3:87:94:d2:51:e7:
         b2:d5:d6:3e:a8:37:20:4b:70:fc:dc:25:d3:dc:d3:78:6c:67:
         e1:7b:ef:2e:05:a0:f1:52:40:ac:c3:ef:cd:a3:ce:a8:44:5e:
         0e:21:b6:7e:c7:1a:9d:06:ff:5d:48:ce:0c:bc:25:b3:80:ec:
         4d:56:67:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:09:28 2026 by rpki-client