Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File:                     FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier:          dzZWtafcKEFKs1f/hqHLiBbkRWI8MwpxYT8WWpFdd+w=
Subject key identifier:   8C:9B:A5:2E:19:B9:FC:DD:93:76:D5:EF:02:7E:B3:7C:5C:4E:AE:6C
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       019FA9ABF963FB2A5ADE655B229A593CD332
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number:          19DC
Signing time:             Tue 28 Jul 2026 17:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:47 +0000
Files and hashes:         1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
                          2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: QQWIaz301iFfnZ+Ipwc3Eu8y2vvmIKm81/To4cVjowM=)
                          3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
                          4: JGYsNj9H1c_XLokkyRvioL1Icvs.asa (hash: FsSg7M51c+/dkmTYhVW+tHhpAYi4anL4jcOUSvzQsF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:f9:63:fb:2a:5a:de:65:5b:22:9a:59:3c:d3:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Jul 28 17:00:47 2026 GMT
            Not After : Jul 29 17:00:47 2026 GMT
        Subject: CN=8c9ba52e19b9fcdd9376d5ef027eb37c5c4eae6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:31:4f:3e:e5:33:e4:11:c7:5f:c1:4f:6f:16:
                    1d:db:09:a5:bb:f4:99:11:94:86:58:2d:32:17:1f:
                    d7:62:9b:ca:ea:fe:b3:e0:a8:3c:c2:21:58:d7:46:
                    41:77:b9:14:d0:22:5e:1a:03:59:cb:45:df:2f:dd:
                    47:15:b1:61:d5:f0:05:a8:99:7d:c6:78:9d:f1:e2:
                    f1:7e:ec:00:53:23:15:de:49:6e:80:d3:cf:4e:e0:
                    77:69:db:e2:82:c9:84:f7:53:82:32:79:83:45:84:
                    a6:32:c9:9c:d9:7c:22:c1:e1:79:e4:7e:20:45:74:
                    45:d6:f5:6a:ac:dc:80:4a:9d:24:18:43:c8:3a:cf:
                    04:fb:24:d6:3f:0f:d7:99:98:17:37:f6:0c:51:d7:
                    82:c2:96:12:b8:41:85:2d:c0:9d:ba:78:c0:a0:ec:
                    7d:fb:28:28:17:9d:15:0c:92:0e:ec:85:76:8e:ca:
                    72:7b:0a:a8:53:0f:7d:43:0f:c9:d6:2e:43:f6:bc:
                    1b:45:a1:6b:82:8f:a6:43:02:ad:88:e5:88:d4:98:
                    d3:f5:8a:b9:8b:76:49:6f:0d:20:b5:19:93:11:00:
                    6d:28:51:16:d0:d8:06:95:31:a4:8d:a7:be:9d:ff:
                    f6:d2:a4:72:df:78:1c:d4:73:e1:94:49:28:dc:da:
                    84:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:9B:A5:2E:19:B9:FC:DD:93:76:D5:EF:02:7E:B3:7C:5C:4E:AE:6C
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:07:2c:4a:f2:5f:66:1c:d9:50:60:c9:16:cb:ac:16:1c:
         45:e6:ae:2c:d1:4b:2f:12:64:a7:9a:22:c2:09:4f:69:51:4a:
         e5:5a:7c:ee:d6:6b:be:3d:77:32:0e:65:7d:d5:b4:21:59:4f:
         1a:9e:58:6a:75:52:64:ed:7c:ad:27:72:a4:11:62:c2:ab:6e:
         a6:5e:5b:b0:cd:40:b7:b0:52:5f:a3:b0:e3:61:f0:54:2e:a8:
         a5:2d:b4:34:9c:64:f0:fb:17:2c:cf:5b:d6:8c:6d:d2:52:5e:
         49:91:60:c4:5e:d8:7e:66:23:b9:2b:33:8f:92:69:24:88:e7:
         75:33:28:f4:69:3c:3c:88:be:df:70:d2:ca:da:cd:05:95:65:
         9c:d8:51:80:59:0c:da:d9:f1:6b:6f:5e:25:37:f5:0d:11:24:
         e2:1c:50:81:f8:a4:95:2f:21:ad:fa:bb:54:64:a2:d9:b6:34:
         7b:e6:84:3e:f0:31:72:0e:7a:6f:7a:f2:b4:6d:2b:c7:e2:de:
         16:b8:73:c0:84:da:af:a9:9a:9f:b6:9e:db:08:6e:f6:2b:a7:
         5b:4e:07:36:84:ed:fe:c5:33:76:bc:01:15:a7:fd:db:ae:16:
         52:5a:60:bc:34:26:99:65:c2:7b:d7:fe:83:aa:bd:ca:5f:5b:
         e0:ff:00:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:45 2026 by rpki-client