Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          Ohjh3kk+CnOCq2RQ0G802g55HAc9HCIylw9n183Rioc=
Subject key identifier:   85:DD:A3:57:64:DE:BE:26:CA:7C:DB:8B:A6:EB:38:40:B0:14:E8:58
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       019EB9C6617436DB6027CE0B235BA467A2B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          18C2
Signing time:             Fri 12 Jun 2026 03:00:46 +0000
Manifest this update:     Fri 12 Jun 2026 03:00:46 +0000
Manifest next update:     Sat 13 Jun 2026 03:00:46 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: SXYjgIaBtrru1wEMn0/mmdY3esWZiUSqhYV/F/FbJhw=)
                          2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 03:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:c6:61:74:36:db:60:27:ce:0b:23:5b:a4:67:a2:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Jun 12 03:00:46 2026 GMT
            Not After : Jun 13 03:00:46 2026 GMT
        Subject: CN=85dda35764debe26ca7cdb8ba6eb3840b014e858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:52:de:4f:ea:33:60:71:44:74:f3:ca:63:78:
                    0a:85:cf:4d:b0:d1:c2:ec:ff:af:e0:49:14:95:7c:
                    48:fb:53:93:ec:6e:50:0b:d8:fd:63:d5:d6:dc:35:
                    a5:53:c0:c8:15:a8:db:bd:56:b8:b9:53:34:3b:a9:
                    37:d2:3d:6c:b3:b2:44:7b:4c:2c:3a:c1:67:3d:31:
                    40:66:5e:41:18:e6:3d:8f:aa:7e:f0:05:e8:6a:d2:
                    aa:bc:77:a2:62:9c:da:f7:94:50:b1:9c:ef:93:e7:
                    9d:1b:a2:de:65:29:17:f9:de:f4:55:09:aa:59:64:
                    b9:31:ce:76:a6:67:03:3c:65:6e:07:f8:e1:1c:1f:
                    de:dd:7d:4d:75:e3:f0:e1:0a:da:0c:db:ff:f9:cd:
                    a3:68:03:6e:70:76:a9:82:89:0b:5d:53:8f:ce:8d:
                    95:c9:1d:81:4b:2d:de:06:dd:68:a2:85:35:c7:8e:
                    29:db:1c:ff:2c:0d:a5:c6:2c:b3:67:7b:76:fa:97:
                    44:45:30:b1:17:2a:35:bd:54:7b:5b:11:b5:78:27:
                    09:37:2a:cc:63:7e:cc:85:bd:79:a0:f7:c0:5d:b1:
                    a0:4c:26:6b:32:6f:8f:d3:32:1e:67:7c:c9:62:3c:
                    07:71:7e:d1:9f:c4:da:46:b1:da:98:01:25:da:f2:
                    ad:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DD:A3:57:64:DE:BE:26:CA:7C:DB:8B:A6:EB:38:40:B0:14:E8:58
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:ce:1f:ad:0a:c8:e8:f8:e2:59:a9:b6:e1:95:0f:73:a3:3c:
         b3:0a:98:39:d9:66:b9:3e:64:e1:9d:b9:9e:6f:9a:25:a8:fc:
         b6:81:90:54:c1:ef:1f:fa:9a:71:98:a5:31:70:b5:15:12:65:
         69:b1:98:39:4d:f9:c0:21:d9:dc:f0:5d:bf:95:fb:31:02:19:
         38:44:b7:e0:80:31:21:17:cc:ea:9e:32:66:ab:9b:52:e7:b0:
         6c:f6:97:6d:61:5f:40:a6:68:d5:c3:ae:ef:63:ce:e0:93:e1:
         e6:b7:f2:f7:3e:8a:64:88:d9:77:d3:0e:a2:05:d8:1a:ab:74:
         8b:f6:2b:17:2d:c0:de:4b:21:72:06:a4:19:5d:01:b8:6a:8d:
         cc:82:44:ee:66:31:44:e4:37:1f:67:03:91:c1:92:cf:0e:ba:
         0f:dc:7f:8f:21:65:30:9e:f9:7b:7e:d9:5c:1f:72:6d:cd:1b:
         9a:7a:7d:44:c9:02:b5:d6:d3:a1:56:24:29:08:30:52:2c:67:
         6d:0e:40:32:a5:45:9a:4b:d6:bc:09:f0:2d:52:5d:b5:43:bf:
         d3:41:e2:17:27:71:bd:29:2e:ad:1b:4c:38:f5:b3:01:8f:7b:
         f6:de:cd:bd:03:e9:3b:bf:33:95:fe:0e:60:d5:b3:17:9f:6f:
         e8:3e:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 09:09:57 2026 by rpki-client