Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          SkxVHdtUxoS6QngiQor9eKWEV4EknUIGgJY5YDeeZKc=
Subject key identifier:   84:F0:0B:65:89:08:81:D5:1D:03:91:F0:0A:24:8F:BC:6D:2A:AB:5B
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019E2881D36C4F150E300DDC620F18DF35C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          1911
Signing time:             Thu 14 May 2026 22:00:57 +0000
Manifest this update:     Thu 14 May 2026 22:00:57 +0000
Manifest next update:     Fri 15 May 2026 22:00:57 +0000
Files and hashes:         1: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: q5cOeUh7QR6RPvwwd+0k8FgwlrFNDga1wkVpPpT6TlM=)
                          3: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          4: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
                          5: XdEB96U82mHFGVm_nS4xtciGIkQ.roa (hash: hdzlPow2QIj+p15z7CdLi4KjuG4H8crIwMXk1C1mtMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 22:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:81:d3:6c:4f:15:0e:30:0d:dc:62:0f:18:df:35:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: May 14 22:00:57 2026 GMT
            Not After : May 15 22:00:57 2026 GMT
        Subject: CN=84f00b65890881d51d0391f00a248fbc6d2aab5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8f:a3:08:15:ad:66:2f:9e:53:7e:a2:bb:c4:
                    1c:1e:1c:72:c3:04:1a:3c:c7:67:ed:9a:ca:b4:bc:
                    b6:b8:e2:29:de:ab:08:a3:bb:40:d5:19:0f:91:cd:
                    0f:19:a3:18:4f:ab:98:04:cb:a3:77:3e:fe:9b:8b:
                    fa:8d:0f:6c:17:79:2a:fc:e7:1a:08:b7:92:f7:d1:
                    e4:79:0f:38:7a:2f:83:15:75:d7:55:2a:9f:88:02:
                    8f:ce:ef:ae:ef:1b:6f:2f:ae:95:2b:b4:60:bf:dc:
                    20:7d:18:28:29:48:c9:54:cd:21:d8:00:7b:a2:0e:
                    73:11:ee:62:7e:91:f2:f9:64:53:26:a6:65:0c:11:
                    fc:3f:1e:d3:0b:b0:2b:97:03:bf:e1:a5:a5:30:6e:
                    8e:0e:c6:11:db:5f:9f:55:91:06:8a:0c:8a:fc:fa:
                    1d:00:5f:b6:fe:12:6f:ba:b6:4f:2a:f6:b4:c6:d4:
                    0e:69:09:b4:eb:16:07:50:a4:c3:c3:02:2e:7f:6a:
                    7b:24:2e:3a:e5:d3:d9:45:bb:cd:9d:74:b0:35:81:
                    77:ae:64:99:25:71:45:52:af:04:ca:7f:34:a3:7a:
                    c2:d3:40:5f:f4:34:89:1e:bc:fd:74:b2:38:81:dc:
                    41:5f:d3:66:30:51:ad:cc:9b:1d:8a:a9:6d:c1:ca:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:0B:65:89:08:81:D5:1D:03:91:F0:0A:24:8F:BC:6D:2A:AB:5B
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:9a:ed:1e:d6:22:2c:f2:17:1b:0a:7b:a6:80:0b:93:47:e3:
         5c:7e:39:91:1d:7d:44:9b:37:7d:ff:b6:f5:fa:fb:8a:22:25:
         39:22:aa:e7:23:08:cd:b8:75:ba:bc:a9:8e:8f:01:70:e0:51:
         8f:32:e4:9e:25:a0:e6:58:c2:0a:89:a7:63:24:c1:0d:c3:fa:
         2a:e9:25:66:18:11:5a:48:5f:c6:7d:88:d6:fc:98:b7:45:f6:
         08:4a:85:ae:21:d3:c6:16:17:43:37:09:9e:bf:bd:83:61:9a:
         be:de:b0:43:93:7f:59:19:42:09:74:33:cc:95:33:46:fe:dc:
         b0:ad:f8:ef:fc:ca:18:1e:20:97:47:92:71:b1:f1:20:01:b3:
         55:60:6d:01:f4:93:f2:93:fc:19:e5:ca:db:28:af:31:a9:e8:
         8d:0a:35:d2:26:f1:9c:b9:42:66:85:e3:1a:e1:c0:48:d5:4f:
         82:08:d4:5d:28:57:54:b0:fb:c5:f2:64:d5:9a:88:26:90:01:
         d0:df:59:7d:95:da:23:cd:ad:4b:85:6d:7d:b9:1a:65:93:2c:
         c4:3b:a6:44:70:fb:2a:74:49:5b:6d:d0:82:3d:84:f0:6b:4c:
         24:66:92:62:e1:f4:11:00:ea:14:78:9d:10:e6:bc:49:e1:02:
         9d:4b:91:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:29 2026 by rpki-client