Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
File:                     fC6U3c5WbZQYOLO8nI6KTznS2kY.mft (raw, json)
Hash identifier:          x1hRvzTuXQGjg1gpc4Fxn10TkhlqvAyM4EOPDv65v9A=
Subject key identifier:   8C:6F:96:FF:AA:C9:B9:F7:43:B8:23:30:29:3A:B3:5A:0D:A3:D5:1B
Authority key identifier: 7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46
Certificate issuer:       /CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
Certificate serial:       019FA8991795A98E1791A20EFE8E7EFBFA13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:33 +0000
Files and hashes:         1: RbKa2MdNi93D_SEy5mldBBAr_6g.roa (hash: DDJFavU8WXwXwFIv80Na6ws8lwRCdKbzrxmE+FCif5A=)
                          2: dt41VRR0PimlyEtWKgjp_m1sl-g.roa (hash: 16MrU0DSxLQHXUU2OJhLiN+r8bslnZH9TQbw0Ga0zUI=)
                          3: e-6WXKXLQVlkp0ljw3-7_Gg6uio.roa (hash: S6VlyRH7fM9NTvjzG86Y+tooHinHAMFIUhEMOhAuGwE=)
                          4: fC6U3c5WbZQYOLO8nI6KTznS2kY.crl (hash: 1ohtU78NVhGRfb4qpmvSq5fzp+vhcM1b7ZiqH72AiDQ=)
                          5: ka7W9UnzjUtfbTLhv4L5SXSWuG8.roa (hash: R2oha/fcFPb0epOdgrfmn0UI+snTa7+8DEeVd1/ufjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:17:95:a9:8e:17:91:a2:0e:fe:8e:7e:fb:fa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c2e94ddce566d941838b3bc9c8e8a4f39d2da46
        Validity
            Not Before: Jul 28 12:00:33 2026 GMT
            Not After : Jul 29 12:00:33 2026 GMT
        Subject: CN=8c6f96ffaac9b9f743b82330293ab35a0da3d51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:63:cc:ad:ae:d9:44:30:e3:76:b6:61:d3:5d:
                    67:df:bd:c3:ff:93:d1:62:52:55:5e:2f:c1:63:64:
                    5e:95:5d:20:2e:c3:a0:d4:43:b3:27:34:60:f6:68:
                    24:7d:c6:6c:2d:4d:0c:19:4e:5f:7d:a4:6b:3d:33:
                    28:30:e3:a1:8b:c0:2e:21:2b:39:56:d0:89:d2:bd:
                    0b:61:4f:fb:bf:3b:48:d5:e4:fd:8a:41:b9:ff:60:
                    b6:fa:a1:ff:3d:6c:a4:e1:c8:3e:54:c6:4b:50:05:
                    d1:03:ce:f3:f1:fd:bf:31:87:cf:29:4a:c6:db:e0:
                    69:77:9c:21:23:4a:4c:d9:16:2f:83:26:7a:05:f5:
                    37:12:a2:09:a1:1c:db:17:1d:69:c1:f7:c5:bf:37:
                    0c:00:6a:de:c5:38:2f:c6:f8:2f:6d:09:63:8c:58:
                    fd:98:33:6a:ff:4e:88:23:f0:4b:3f:7b:8e:07:8c:
                    6c:a7:9a:ec:f1:d5:80:6f:1a:ec:c0:ec:b6:dc:d6:
                    7e:c2:a3:ed:83:8f:33:5c:46:b9:ab:d2:2d:d4:32:
                    32:c4:b3:ab:c7:5f:4e:02:1f:10:5f:fc:e2:66:b7:
                    cd:ea:9c:90:8a:0a:22:8c:cd:8e:73:36:da:d5:35:
                    05:8d:d1:45:fe:f9:44:0a:2b:28:37:c2:b0:a9:0a:
                    55:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6F:96:FF:AA:C9:B9:F7:43:B8:23:30:29:3A:B3:5A:0D:A3:D5:1B
            X509v3 Authority Key Identifier:
                keyid:7C:2E:94:DD:CE:56:6D:94:18:38:B3:BC:9C:8E:8A:4F:39:D2:DA:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fC6U3c5WbZQYOLO8nI6KTznS2kY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7c7851-585b-49f1-8be9-3c7e4f93e42b/1/fC6U3c5WbZQYOLO8nI6KTznS2kY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a6:fe:c7:24:29:63:67:cd:6a:4f:4d:e7:7a:b8:cd:8c:33:
         a9:8f:6c:07:0b:8e:73:7e:25:4b:9f:2b:a2:ff:c7:73:fc:0f:
         eb:25:4a:68:f7:92:85:0a:90:3f:8c:48:82:88:b9:a1:65:7f:
         3f:36:c1:4b:b6:8c:27:3d:09:e3:df:06:e5:c5:96:ba:8d:ce:
         92:24:65:40:11:f6:99:1f:ca:ef:a5:9e:ac:ee:9c:0c:af:ea:
         83:c0:16:97:9c:fd:08:30:90:5f:b6:a6:bc:06:37:17:9e:57:
         ac:b7:4d:5f:38:3f:e2:76:63:0f:9c:44:71:10:aa:27:61:68:
         bc:08:12:03:b1:27:83:79:94:ed:e5:6e:17:f1:db:a6:81:83:
         d0:20:69:c7:c1:d2:a8:4f:86:96:91:4e:f4:ce:50:b7:72:ba:
         3c:22:be:a1:46:b2:ed:c2:83:84:89:7c:5e:a4:f7:fb:47:2e:
         35:2e:98:48:63:cd:1b:93:2a:c8:3e:67:82:08:16:fa:66:02:
         87:55:4c:82:20:75:89:41:76:cd:2a:ab:5a:fe:6a:51:93:39:
         09:ac:d9:f8:3f:3a:f8:10:02:b1:2d:89:33:5f:bb:19:a1:ba:
         46:26:b2:aa:56:d1:06:46:80:27:44:83:1b:5b:90:df:06:1c:
         00:29:1f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:37:36 2026 by rpki-client