Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
File:                     FShvAiXBQdlYV_50ZGlJ513Zbyg.mft (raw, json)
Hash identifier:          MSumO/rhFm24TeHZ2pa4mEB2NwOdJMXPhjb7h0gmNlk=
Subject key identifier:   1E:F1:A9:CC:8A:02:E4:07:AF:AC:0C:CE:17:92:55:00:41:4B:B6:27
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Certificate issuer:       /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial:       019FAB632C35E89D97932DF2DF0A5C2E3111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
Manifest number:          19D2
Signing time:             Wed 29 Jul 2026 01:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:31 +0000
Files and hashes:         1: 46n2g7ewMdgKGwJHev4LZIKd-KM.roa (hash: WKhBSncOj3EAW5iouWLaSYsvjG5KuQBioF2eekKp43c=)
                          2: 9PbzP8qeLurzCOR3dnQ6jsHoYao.roa (hash: PeVhHyvWI7MP2U+BHZvU1jOgwKtHxhXWcKdeG/dNuZE=)
                          3: FShvAiXBQdlYV_50ZGlJ513Zbyg.crl (hash: dMY0npXbqIHqa3HwDeNZM7SXD7HoLEkZudtxOq+BHd4=)
                          4: _dBwgGh994WuwFW0ls-FCw4dhLc.roa (hash: bTqHhg0tmKJDUGstBlc3i5Our5IYOdKSwj234j6pRCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:2c:35:e8:9d:97:93:2d:f2:df:0a:5c:2e:31:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
        Validity
            Not Before: Jul 29 01:00:31 2026 GMT
            Not After : Jul 30 01:00:31 2026 GMT
        Subject: CN=1ef1a9cc8a02e407afac0cce17925500414bb627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:42:ba:87:70:71:81:a8:44:d7:e7:c2:6d:
                    44:22:42:85:fd:b0:08:66:08:82:91:fb:25:75:12:
                    af:5b:f1:bd:db:5a:43:3c:cf:db:df:cf:c1:03:f8:
                    f0:b6:e9:cb:23:82:e9:6c:c5:d7:cd:b1:2c:a2:66:
                    16:b3:9a:46:c4:65:4b:b8:59:23:e1:e5:b5:36:a5:
                    75:d9:70:3b:22:31:e7:c2:76:e1:2d:74:c4:28:e6:
                    66:da:25:3a:bb:d0:1e:f6:6b:b6:ed:7a:78:c6:1e:
                    e0:9b:d6:99:48:2c:99:68:77:0f:5e:af:86:3c:e7:
                    60:25:76:55:10:81:1c:6c:62:4f:32:e4:e6:2f:7f:
                    bd:4e:8b:a0:4f:81:b5:f9:8d:3f:8a:d7:be:e4:52:
                    57:64:72:df:5a:76:e0:24:1c:51:d6:43:23:36:da:
                    fe:6c:c4:a2:e7:2a:1f:a0:6f:24:51:b0:42:fb:49:
                    ec:37:2f:f1:c6:52:33:43:45:c6:1f:75:7a:b6:c3:
                    73:ef:f2:f5:be:c6:ca:28:76:af:bf:f5:b3:7d:78:
                    eb:88:e1:2e:5e:35:cd:0c:e6:c3:77:4b:72:83:76:
                    42:d2:03:54:b9:36:c1:1b:bc:9d:ff:3e:3c:44:90:
                    dc:bb:ac:72:c2:6d:c3:74:cf:b4:71:40:b8:0a:1e:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F1:A9:CC:8A:02:E4:07:AF:AC:0C:CE:17:92:55:00:41:4B:B6:27
            X509v3 Authority Key Identifier:
                keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:dd:eb:0a:86:7e:e8:65:11:64:c8:e1:98:40:ef:50:12:e4:
         56:39:3d:d9:dd:26:2b:3a:57:09:6a:42:76:bd:a2:e3:a7:a3:
         07:19:c0:33:c9:34:63:db:29:34:8d:46:7f:57:92:24:59:64:
         d6:2d:4a:98:0d:4e:b6:a8:31:f4:ff:53:58:39:0f:cf:09:9d:
         75:5c:dd:76:d3:01:b4:71:b8:c6:60:86:f9:f1:a7:2f:aa:b2:
         e0:77:4f:78:33:33:63:4a:bb:a9:9a:13:b1:b4:17:71:95:6e:
         d0:44:f3:90:e7:0e:4b:5d:bf:8e:f4:1d:2a:be:3b:6f:ee:23:
         ed:9b:09:b1:9d:64:17:89:da:0d:fc:74:d5:d7:aa:45:3a:ac:
         54:bf:81:44:95:98:8d:8a:fd:68:35:65:d6:9d:fa:29:f4:d8:
         6f:f5:19:89:2b:bc:29:a3:91:0d:37:e7:0f:9c:21:24:c9:75:
         f0:a8:a0:b3:ae:84:4b:ae:3e:83:fb:7f:4d:3c:1a:36:be:55:
         d3:72:b5:03:d7:f4:a9:90:99:ff:4e:01:fc:d1:dc:21:83:ea:
         65:95:a7:c6:58:03:7e:b4:11:be:3d:88:d6:04:58:4b:37:18:
         90:62:25:25:f7:55:50:73:af:3c:52:a6:9e:27:43:09:ed:2a:
         73:f2:30:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:15:40 2026 by rpki-client