Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          ny7xcp1JzuKo7SnCoD868whHQs9TM6dspCAuO0B+eMo=
Subject key identifier:   F7:E0:1F:0C:82:F9:FC:99:6D:8F:62:55:71:96:71:B1:AF:45:3D:8B
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       019EC3378A4958BD364A43B4A8E46D8BC252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          089C
Signing time:             Sat 13 Jun 2026 23:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:57 +0000
Files and hashes:         1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: woX2A2A1Ggzf51EQeb+tSbpNnty1nyYGfkousGmv55w=)
                          2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:8a:49:58:bd:36:4a:43:b4:a8:e4:6d:8b:c2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Jun 13 23:00:57 2026 GMT
            Not After : Jun 14 23:00:57 2026 GMT
        Subject: CN=f7e01f0c82f9fc996d8f6255719671b1af453d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7f:a2:17:a1:6f:40:cf:15:0b:53:9d:f5:03:
                    2a:8f:a2:25:dd:5f:4a:c6:26:40:a0:87:8c:cf:cd:
                    71:2c:8c:3b:1d:c2:40:e0:a9:78:31:cb:80:b4:25:
                    8f:77:13:b6:81:5d:81:8b:c4:8b:73:a9:a8:f7:05:
                    77:75:12:0e:79:bb:66:47:1e:60:ef:70:2d:be:87:
                    8c:aa:47:e0:26:df:07:90:1d:e3:24:ce:c4:20:70:
                    94:0a:f2:b1:a1:77:97:b1:51:12:de:65:eb:b8:00:
                    fc:b5:fd:82:63:f3:88:c3:12:75:6d:ba:2d:c7:51:
                    45:ad:a7:bc:ee:1b:3c:04:8c:74:dd:35:cf:e5:83:
                    b6:9c:0d:be:f7:ab:11:44:e8:82:cf:ab:54:61:da:
                    e8:ad:42:8f:62:bd:51:d7:2c:62:8f:00:d0:1d:bd:
                    42:bb:85:43:06:71:80:56:7e:5b:65:06:f6:d4:8d:
                    fb:f7:dd:0d:4d:c4:c7:9a:bc:b4:79:7c:db:41:e2:
                    ee:04:0c:f9:de:36:d8:c9:76:5e:f8:e7:b3:e4:c5:
                    08:45:aa:30:56:da:2f:49:0d:d6:2b:01:17:88:11:
                    a0:f7:85:96:cf:f2:be:ab:e0:b9:9a:1f:f4:00:34:
                    d4:65:9a:74:8c:65:a0:8c:79:2b:87:72:d8:6a:da:
                    e2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E0:1F:0C:82:F9:FC:99:6D:8F:62:55:71:96:71:B1:AF:45:3D:8B
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3f:d2:b1:f2:df:b9:c5:b2:d3:ed:8d:c1:f3:37:10:d8:f5:
         be:9b:3d:56:8b:2a:9f:b0:01:ac:51:bc:71:2d:78:3a:1d:e6:
         97:c3:03:a8:a5:4e:95:fb:df:58:1e:c9:f5:40:71:68:5c:ce:
         66:a6:ce:16:68:47:fd:b6:2a:d9:29:03:e4:9a:7c:84:47:cf:
         04:c3:c2:d6:d3:6e:4a:5b:5f:b5:d4:7c:d6:14:85:32:04:d0:
         86:21:54:94:49:47:cd:17:82:00:28:d7:bd:21:36:0e:47:43:
         48:0c:74:2f:cb:f5:23:c1:ce:97:ee:9a:37:d1:b9:5a:b5:51:
         ad:f9:49:3e:13:17:2f:f1:a9:bb:f6:a3:8d:c1:45:16:f3:9c:
         48:46:4f:7d:87:45:81:a1:d5:8c:3b:06:2e:48:fa:70:6c:43:
         88:87:10:d4:17:45:5d:50:ce:66:49:ac:53:c6:86:06:3d:4a:
         2d:2c:9e:6e:32:6b:53:59:ee:31:33:b9:3e:fd:15:8b:14:88:
         dd:fc:67:22:94:93:31:05:04:19:48:10:68:f7:87:0d:6d:83:
         a6:3f:48:8b:dc:4b:c7:a7:03:71:0b:c1:54:7b:59:58:71:96:
         8c:e3:53:f8:67:a6:e3:46:cd:9d:ed:65:e8:18:b2:94:b5:7c:
         1f:38:15:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:23:17 2026 by rpki-client