Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
File:                     FENcf9xIKJ7FWfAepR2sFyPwke0.mft (raw, json)
Hash identifier:          u+QljgNE+7kLRmw/CmDSIKr+GbjguoZtH65E+FHEeYE=
Subject key identifier:   BB:E8:46:1F:74:27:28:CA:32:7A:73:E5:19:7A:04:C9:6E:F8:75:E1
Authority key identifier: 14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED
Certificate issuer:       /CN=14435c7fdc48289ec559f01ea51dac1723f091ed
Certificate serial:       019EC292E1D158E4472216DDC1707554F65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 20:01:06 +0000
Manifest this update:     Sat 13 Jun 2026 20:01:06 +0000
Manifest next update:     Sun 14 Jun 2026 20:01:06 +0000
Files and hashes:         1: FENcf9xIKJ7FWfAepR2sFyPwke0.crl (hash: 47eB6GfuJC/FOxA9Z8kCm4hEA5eeH9N7gsGpGNMWaGI=)
                          2: KZrT9vMzu7K3Un0s9bEKCsYgn2g.roa (hash: AIX5thmAvFyA3Ct0qYMz82ptq3CBSFPlNtikY3jmQXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:e1:d1:58:e4:47:22:16:dd:c1:70:75:54:f6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14435c7fdc48289ec559f01ea51dac1723f091ed
        Validity
            Not Before: Jun 13 20:01:06 2026 GMT
            Not After : Jun 14 20:01:06 2026 GMT
        Subject: CN=bbe8461f742728ca327a73e5197a04c96ef875e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:c2:56:19:5c:20:ab:b5:01:39:35:57:d1:
                    f4:bc:10:f7:ea:9b:52:d4:f2:8c:0e:c7:76:20:0a:
                    dd:73:3f:e5:a9:de:1b:95:5e:f2:b5:e3:3b:bb:74:
                    32:e3:4a:27:3a:d5:c3:b9:7b:5e:4c:6a:c6:8a:20:
                    0a:99:b1:54:00:ab:cf:a7:00:0d:a4:58:4e:09:1c:
                    31:0b:89:7f:8b:7b:62:8f:e2:2e:2a:b2:f7:bd:e8:
                    e7:06:30:a5:bf:98:82:08:46:3f:3a:4e:0c:d4:9a:
                    cf:7f:4b:58:f9:0c:a2:80:c8:7c:34:de:f7:b1:de:
                    b4:8d:d5:83:1e:60:3e:df:6f:5d:0d:1b:d3:c3:78:
                    7a:4e:47:7a:b8:e1:bd:2e:2b:7b:52:c5:ba:57:12:
                    c8:5a:6c:db:66:49:9e:d1:14:7c:e0:62:4c:fe:2e:
                    cf:96:c3:56:9f:c7:82:1d:75:5b:b2:54:7b:49:16:
                    86:65:f2:0d:94:c7:f7:df:78:64:16:4a:26:30:b1:
                    9f:fa:bf:9a:d0:ca:f3:fe:32:b7:69:b3:62:f0:28:
                    d6:bb:8f:c0:ae:c2:c4:6d:83:fb:db:c2:2a:9d:23:
                    32:5c:c3:8c:c1:ce:6f:9d:70:38:39:24:a8:80:b3:
                    65:17:6f:9b:c5:13:2e:64:9d:99:f5:f5:a6:cf:48:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E8:46:1F:74:27:28:CA:32:7A:73:E5:19:7A:04:C9:6E:F8:75:E1
            X509v3 Authority Key Identifier:
                keyid:14:43:5C:7F:DC:48:28:9E:C5:59:F0:1E:A5:1D:AC:17:23:F0:91:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FENcf9xIKJ7FWfAepR2sFyPwke0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/a7fec4-df2d-45eb-8520-73c2740ea8bf/1/FENcf9xIKJ7FWfAepR2sFyPwke0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:5b:65:d4:70:e9:b3:01:41:aa:56:c0:57:c0:fe:15:04:18:
         a6:4d:63:70:9b:c1:1f:eb:45:1c:d3:88:75:65:bf:b4:eb:5a:
         20:39:b6:e1:8b:c0:13:2d:d6:a9:90:20:e0:45:5f:5d:bd:ff:
         0f:b9:27:fe:c5:30:32:fd:bc:ef:5d:94:e6:2c:5b:b5:2f:e8:
         f4:f4:32:e3:e4:a8:08:41:1b:8e:c3:16:b4:cf:f0:1f:56:b5:
         85:78:99:42:cc:50:a4:4e:c7:e2:36:ef:8a:80:a9:b9:ba:5b:
         36:1e:8b:fb:9c:d8:cf:a0:49:6c:75:09:fc:3d:77:15:6a:9f:
         c1:dd:6d:7a:92:10:9e:4c:25:77:26:8c:07:61:40:66:d8:0b:
         b4:4e:96:80:4d:2f:bd:b4:e6:fa:b7:e5:e0:8e:d2:8e:89:db:
         34:d9:d6:0c:35:d7:56:a0:15:24:03:cf:20:d0:7f:51:15:24:
         18:e0:9e:5c:cf:9f:91:fc:ab:ac:39:59:e6:f4:54:aa:0a:30:
         d5:80:ce:80:38:d1:f5:a3:b0:15:8c:4e:46:62:7e:f9:d7:ae:
         87:9f:38:7f:cd:64:e0:7c:b1:58:1f:a0:b5:bd:fc:cd:8d:f2:
         f7:86:ec:64:fa:9e:1e:52:af:a4:a9:5d:8f:ff:f6:8a:d2:c4:
         5d:ae:98:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:26 2026 by rpki-client