Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          hbgxqCFWCxd3MqD6hm/1Gv+zt6aa+zbQMjcjG2Xsncw=
Subject key identifier:   C3:D4:AB:E8:ED:9B:57:62:E9:EE:84:C3:2A:76:1A:2B:B6:C1:23:0B
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019EC25C7F8044BA3526C28E0F215F8123A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          1417
Signing time:             Sat 13 Jun 2026 19:01:42 +0000
Manifest this update:     Sat 13 Jun 2026 19:01:42 +0000
Manifest next update:     Sun 14 Jun 2026 19:01:42 +0000
Files and hashes:         1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
                          2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
                          3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
                          4: hd7rQeulDecBxJXUMXx1KtWshog.roa (hash: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=)
                          5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
                          6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: L1fUiz/avn3DfWZ9EF4To3ACt13fndEY1YChK8A8CRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5c:7f:80:44:ba:35:26:c2:8e:0f:21:5f:81:23:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Jun 13 19:01:42 2026 GMT
            Not After : Jun 14 19:01:42 2026 GMT
        Subject: CN=c3d4abe8ed9b5762e9ee84c32a761a2bb6c1230b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:73:98:d1:ba:63:80:9e:1d:ad:84:aa:29:ac:
                    f3:36:2f:1c:e5:6e:bb:28:0e:d6:3c:5d:14:cc:08:
                    91:93:b6:83:3c:e7:ac:ce:ee:0a:cd:cd:71:71:d7:
                    e2:9f:ce:7a:f5:60:cd:2f:6c:7a:29:1f:e1:28:de:
                    1e:24:f9:ee:92:a1:86:29:8f:f1:1f:ed:6e:8f:a2:
                    ac:2b:9d:71:49:77:ba:9e:59:c1:1c:1e:04:b8:7a:
                    10:8a:64:37:24:16:6a:13:84:21:4f:31:a1:bb:b5:
                    e5:33:28:35:c7:dd:8a:04:6a:6f:59:27:38:29:92:
                    21:85:1d:4b:dd:4c:85:e6:84:48:cb:53:0f:aa:4a:
                    dc:e1:fe:bb:c9:9c:f6:48:e6:58:4a:9e:c3:72:37:
                    36:18:03:79:1c:29:ca:bb:39:6f:cf:f6:fd:b8:16:
                    60:b0:5c:af:60:6b:71:56:e5:66:08:f8:02:ac:b4:
                    a4:08:52:8b:0d:3d:c2:7b:b9:6c:e3:06:21:26:77:
                    63:75:9d:ab:f3:f6:8b:3a:d2:56:2b:41:49:c2:76:
                    c6:e4:7c:6f:3e:18:27:2f:39:41:84:07:c1:85:de:
                    fa:85:83:66:17:26:2e:10:6d:9d:78:cd:db:96:b2:
                    bb:02:d2:4b:7a:41:c6:b7:4d:70:a9:e1:b3:71:53:
                    6c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D4:AB:E8:ED:9B:57:62:E9:EE:84:C3:2A:76:1A:2B:B6:C1:23:0B
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:ac:8b:12:fc:00:07:da:a8:f7:bd:32:44:59:84:81:30:
         d1:ce:a4:7c:42:df:28:f4:25:a7:99:80:83:03:f9:a6:ba:c3:
         f2:39:9e:58:1e:e4:0c:7b:24:d7:da:d4:cf:a0:f3:7f:c8:42:
         88:9d:d1:aa:d8:e3:0e:e0:a7:ce:ce:c9:85:56:42:0f:ea:55:
         a7:44:de:3f:89:5c:f8:8c:27:8a:f8:76:fd:96:bd:08:a1:90:
         b2:ad:5b:08:2f:e0:be:7b:4b:41:fd:97:a6:fe:a7:89:7b:3a:
         d1:dd:0c:54:cd:db:19:81:b4:0f:8b:1e:b4:7b:7d:96:44:6c:
         c6:b3:d3:fc:5f:49:15:9b:84:03:7b:f8:48:8b:65:ac:38:02:
         2d:1d:d9:79:b4:38:ee:37:8c:03:cf:28:6a:fd:68:3b:3e:df:
         ed:e7:a0:e1:5a:a0:46:f1:19:ec:7e:ef:87:46:22:2a:8f:7c:
         f6:97:67:90:b5:f5:e5:88:09:11:b7:2d:24:bd:e9:2b:2b:5f:
         75:93:4d:89:f3:81:f6:82:7d:80:e6:3a:37:cc:23:d5:04:c3:
         18:51:d3:0c:43:5e:0c:04:fb:81:e1:d6:06:49:d7:63:b1:cb:
         4e:61:54:db:c7:f6:c2:a9:49:8e:97:4f:61:6b:68:24:02:50:
         1b:4d:db:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:33:08 2026 by rpki-client