Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          LvnWf4wC0XhBD2d3xFWL0C7kiuwWDLIiEppXLfPF2aI=
Subject key identifier:   3B:D2:64:12:28:B1:AE:AB:92:6C:A0:9F:F7:E5:4B:28:41:76:0E:B5
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019F129C067830E7CD8B2CB8A5FD621B3F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          198C
Signing time:             Mon 29 Jun 2026 09:00:42 +0000
Manifest this update:     Mon 29 Jun 2026 09:00:42 +0000
Manifest next update:     Tue 30 Jun 2026 09:00:42 +0000
Files and hashes:         1: 24wWacTxTKeBWvKFGo-5GNyB8dE.roa (hash: NCrqjTsRyG9h5K6XaUABqOpJegvTm0IyWhFRdr9x/Sk=)
                          2: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          3: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: 3Zn0e9Jvk8s7vyNYIwUKo7TPrWzILBE/UywPJcXy2GI=)
                          4: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          5: NdxMow94TNhxlzIzMI_r48W5M8A.roa (hash: 1nuZTI+erTKNkNC0wnIV7yjz0eGXOFGrHb4Av8qGq00=)
                          6: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:06:78:30:e7:cd:8b:2c:b8:a5:fd:62:1b:3f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jun 29 09:00:42 2026 GMT
            Not After : Jun 30 09:00:42 2026 GMT
        Subject: CN=3bd2641228b1aeab926ca09ff7e54b2841760eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:12:60:a4:8e:5e:0d:2b:a3:a4:b3:a0:22:81:
                    0e:72:b8:da:4c:6a:ed:f8:80:52:00:47:63:aa:f1:
                    5f:3b:4b:3b:f0:13:4b:52:5d:2b:e4:ea:56:97:fb:
                    63:8f:d9:47:5a:60:2c:96:42:66:e9:81:5f:12:1b:
                    b2:ef:33:36:e6:a4:dd:ea:85:d5:92:23:d3:a7:6d:
                    f5:69:67:2b:a3:ea:3c:cc:bd:fc:75:b5:dc:02:a4:
                    4e:97:d0:f1:02:12:55:42:cf:4f:27:90:ee:e4:48:
                    07:7d:ab:50:44:88:35:0e:7b:e2:01:d4:9d:a3:11:
                    1a:a5:de:aa:8a:86:9a:04:39:af:f0:cd:67:86:8c:
                    16:8a:f9:b4:67:f4:43:8d:4d:af:d0:c5:45:57:32:
                    21:9c:1a:07:a9:f5:47:2e:32:a0:1b:9a:73:6c:a8:
                    3e:7b:7c:fd:6a:fa:25:8f:85:c4:57:88:56:9f:03:
                    3c:c1:95:9e:8a:4f:44:e2:94:7e:80:69:53:ef:fc:
                    88:5e:b4:76:af:23:6f:21:59:61:da:16:ef:67:35:
                    c8:c9:68:de:6e:ff:e7:22:d3:57:9b:02:28:dd:6a:
                    1c:81:02:f7:96:46:d1:03:50:2a:7d:cc:68:91:4a:
                    49:53:0d:c0:12:3e:7d:2f:3b:30:98:f9:e0:e3:6d:
                    be:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D2:64:12:28:B1:AE:AB:92:6C:A0:9F:F7:E5:4B:28:41:76:0E:B5
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:68:99:ab:b8:99:d6:40:82:04:fc:b1:cf:9e:ae:41:75:
         1b:5b:f2:72:f3:64:d7:4a:a0:d8:4b:0f:74:0a:53:d4:ec:6a:
         95:33:5b:24:19:12:23:cd:8d:f9:b9:c6:48:5f:45:e1:f8:be:
         52:98:cf:b6:69:f3:0c:cd:e5:ff:84:47:32:4e:06:94:20:90:
         60:3f:f0:a4:a5:a0:0a:42:78:13:20:e1:67:61:5a:9f:6c:a5:
         b9:b4:f4:4a:28:24:c3:0c:43:6b:8d:f7:25:17:3a:99:aa:0b:
         16:14:ef:2f:bc:34:8a:ff:a0:0c:cf:0e:61:8b:22:2c:8a:99:
         fd:8a:c5:1c:17:40:46:ea:5d:11:ee:84:6a:5b:e7:62:ad:cf:
         ea:aa:e2:f3:a5:2e:3a:57:41:ae:58:6b:da:ed:7a:78:66:66:
         81:96:16:a3:27:b5:7f:65:6e:81:b8:ae:fd:69:9c:f2:e3:37:
         8d:ad:aa:b8:de:62:2b:31:65:29:0a:8a:47:5f:89:d7:2f:be:
         40:dc:f2:06:3f:40:7a:20:aa:be:24:ef:72:f7:b7:72:7b:24:
         3b:6f:ad:6d:23:8c:92:76:62:c0:e3:49:f6:ce:ed:e0:4b:c1:
         bd:cc:a1:e9:9b:81:23:26:e0:98:c1:23:a1:bd:47:94:05:60:
         9a:3f:d5:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:04 2026 by rpki-client