Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
File:                     fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft (raw, json)
Hash identifier:          frsKlztKq7n9H6pqa38wSkq3vgU4EbzFQB4wkxljX30=
Subject key identifier:   14:F8:C0:DE:CE:24:D1:CF:3D:A5:C8:E2:61:67:47:EA:10:97:07:05
Authority key identifier: 7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A
Certificate issuer:       /CN=7e3150f8c67063121027328954968d08d4cf329a
Certificate serial:       019EC3005322731496AB3274C1FE284A6C44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
Manifest number:          03F3
Signing time:             Sat 13 Jun 2026 22:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:38 +0000
Files and hashes:         1: 1-jRYaUzINFrEnjfAdRPinSU_734.roa (hash: 3ooS3VmIZ0+eOUublxtT5ocb/PZYp04ILnN6aKePHuY=)
                          2: FEiTqIT1cqpRLflYOI_79JGhaks.roa (hash: ifbVEX7UepiZjjPVlo2crki0TP+d7TO8G3eiigYipls=)
                          3: _vhX2x0MSW_lCM__SUwIoa5cOwM.roa (hash: RJcLvbkKer+dH4YPNNJOTYi3iU1xlbLYxn2gdUfEcwE=)
                          4: bmPTnK5_lSzi5g2t8KWQSdmusiw.roa (hash: c+FOKLLhi0euPzTQWelJXOJ3OAMbQ5k1sWXqQVEcYEM=)
                          5: fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl (hash: ctNG2Hvd6/hs7tgY6VrOBAYKMclr4mUcEWtLD6jQf2g=)
                          6: gDbaYpByZHpLd0mzqeStmCna8dI.roa (hash: L/kpgIHgWaHwD4n82QRwP3BnE2jifSCZ3GZu/xc06F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:53:22:73:14:96:ab:32:74:c1:fe:28:4a:6c:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e3150f8c67063121027328954968d08d4cf329a
        Validity
            Not Before: Jun 13 22:00:38 2026 GMT
            Not After : Jun 14 22:00:38 2026 GMT
        Subject: CN=14f8c0dece24d1cf3da5c8e2616747ea10970705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:86:86:75:06:36:4d:65:5e:de:74:90:4c:d9:
                    1b:b4:a3:02:4f:00:9c:67:1f:e5:96:b9:2b:4b:0a:
                    9f:f9:12:47:83:2c:09:54:72:22:8a:09:30:1d:b3:
                    b6:62:cb:6b:d1:7f:8c:3d:8f:89:89:33:73:44:bc:
                    51:ba:e7:a5:46:f5:7c:8a:24:91:be:04:94:63:77:
                    fd:3a:6f:d1:4d:b3:6c:07:fc:44:8e:74:8c:c8:c1:
                    cb:83:20:7d:6b:b8:4f:d7:1d:01:69:6f:02:47:af:
                    e3:3e:70:17:6b:f1:17:1a:99:6b:2e:61:33:70:92:
                    a5:ba:97:eb:7b:7c:ba:1e:33:59:39:9f:f4:92:88:
                    eb:2b:0e:f6:96:bf:6f:ca:ef:9a:3d:4f:35:37:7d:
                    b2:13:b8:5f:1f:40:43:7c:ed:38:e8:5b:c0:c2:c4:
                    9b:c2:db:53:7c:b6:7b:27:5c:1b:a8:b6:a6:d3:bb:
                    90:3d:77:ee:e2:89:1e:b8:35:cd:75:91:8b:de:cb:
                    33:fe:58:70:7e:9d:14:ca:c2:ab:56:c0:3b:6b:72:
                    b9:37:bd:62:0d:e5:36:ad:6e:8e:f4:de:ef:00:5a:
                    13:1a:80:ad:e6:8d:2c:5f:f9:bd:0f:3f:0c:b4:f9:
                    ee:af:d7:56:d7:83:d8:56:c0:a4:54:a6:74:be:f5:
                    77:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F8:C0:DE:CE:24:D1:CF:3D:A5:C8:E2:61:67:47:EA:10:97:07:05
            X509v3 Authority Key Identifier:
                keyid:7E:31:50:F8:C6:70:63:12:10:27:32:89:54:96:8D:08:D4:CF:32:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8bcfd7-f6d3-432a-b5f0-935e418bdbe7/1/fjFQ-MZwYxIQJzKJVJaNCNTPMpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:d0:6d:a2:5d:38:f1:1c:df:aa:d4:60:81:5e:98:f0:88:d1:
         40:99:97:28:ed:a6:06:af:21:80:16:4c:4d:a2:dc:20:25:42:
         d6:f6:35:cf:15:e1:f9:c3:f4:e0:0f:b3:75:77:78:72:16:fd:
         b7:bf:67:9f:d0:2c:2d:cf:a3:8c:92:a8:02:c7:2c:8a:b5:5c:
         e5:0b:cb:0c:d9:b2:52:27:f1:24:b0:74:13:ff:23:5d:79:c1:
         3f:69:d8:5e:1a:6d:03:94:a6:89:fd:ac:a6:82:59:05:39:01:
         a3:22:6b:f6:f5:67:11:c4:bb:36:e6:96:b5:9a:be:f5:4b:2a:
         cf:ff:af:7e:89:0d:c9:96:c1:3d:23:0e:50:46:5b:3c:8d:7e:
         59:f9:5f:3a:99:06:e1:33:a5:04:5c:1f:6a:8b:0e:1a:64:2b:
         a5:02:6c:1e:27:b8:94:8f:85:52:97:bd:6f:15:53:b1:42:f5:
         4f:2f:6c:c5:ea:ef:7a:11:f6:13:ec:24:42:c2:da:e4:f6:83:
         eb:4a:bc:a0:65:1a:bb:6c:e4:7f:96:b6:91:bc:11:b7:87:43:
         c8:b0:20:8c:dc:fa:79:82:ad:f2:d2:86:ec:76:a2:19:98:80:
         fd:ae:ea:c8:ae:a8:8f:c5:54:a8:03:8f:e1:17:e3:2f:c9:02:
         71:9a:cc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:23 2026 by rpki-client