Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File:                     FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier:          LCWW5ViK0QhwGhbW6Vj20m5zCOGGF1rEF0jq+kKt3do=
Subject key identifier:   09:E0:B4:54:E3:73:BF:A3:D3:B6:90:90:0E:4D:08:85:39:BC:84:6E
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer:       /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial:       019FAAF628DAA6181108DFFC93F8673F2E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number:          06DB
Signing time:             Tue 28 Jul 2026 23:01:26 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:26 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:26 +0000
Files and hashes:         1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: m9weR8pLAuIz66AUEsBEzor6SjKubvzQRWsK/ohWaYk=)
                          2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:28:da:a6:18:11:08:df:fc:93:f8:67:3f:2e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
        Validity
            Not Before: Jul 28 23:01:26 2026 GMT
            Not After : Jul 29 23:01:26 2026 GMT
        Subject: CN=09e0b454e373bfa3d3b690900e4d088539bc846e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:71:9d:83:6c:1e:c0:67:49:f6:6d:00:db:c3:
                    bc:00:8f:3d:47:e3:f6:f6:8f:77:3b:66:d3:41:ea:
                    8b:9a:19:cf:47:d1:29:ad:42:d7:a0:db:0c:1f:03:
                    9c:8b:f8:a1:91:14:1a:3e:fb:9d:c3:b3:65:7e:7d:
                    71:87:d0:8f:0b:7d:dc:f9:54:af:1c:c6:ce:bc:65:
                    f8:31:26:68:cf:61:e0:15:3a:5f:64:16:a4:db:ed:
                    6e:71:5c:57:1b:ea:8f:81:c9:84:84:85:67:75:42:
                    09:a7:c3:ec:e6:69:2e:80:f8:45:4e:54:ee:3c:5d:
                    43:c0:3c:c8:88:67:7b:fa:b3:6f:ea:7b:ec:c5:de:
                    14:7d:27:4c:27:c4:c6:1c:02:a7:63:64:c9:00:c2:
                    fe:b5:e3:c1:23:18:d7:e1:55:90:0c:9e:5d:18:54:
                    6e:4c:45:2a:3e:67:61:65:2e:3a:22:67:a9:2b:e4:
                    4c:ef:91:58:93:2b:e1:ce:f8:20:f2:b0:9a:dd:46:
                    92:ee:88:82:55:ce:c5:0f:4b:a8:aa:44:68:1e:8c:
                    d8:d8:03:a5:72:fd:51:0f:32:1e:d3:ac:12:39:be:
                    54:4e:7d:dc:e6:1d:31:7e:b8:41:46:dc:20:b7:04:
                    07:4d:6b:eb:3c:a8:54:21:f9:56:0d:56:fe:41:b4:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E0:B4:54:E3:73:BF:A3:D3:B6:90:90:0E:4D:08:85:39:BC:84:6E
            X509v3 Authority Key Identifier:
                keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:04:39:64:ed:50:55:ad:64:24:e4:7a:d3:7d:5c:04:79:27:
         17:c3:82:f0:3e:90:fa:18:2a:e7:bb:dd:d7:a0:ed:76:9a:6b:
         73:fb:75:d2:fa:e4:e5:db:ff:4e:00:62:b4:32:90:34:c6:bd:
         90:e2:ca:31:9b:20:52:fa:92:0f:11:60:d2:d7:f2:ae:59:9d:
         8d:cb:e3:ca:77:f8:93:25:9f:77:57:4b:41:31:bf:90:6b:d0:
         a5:c4:60:9e:51:e6:d9:36:1c:33:28:9d:bb:0d:01:6a:e3:59:
         f1:e8:9d:0b:a9:99:0c:2e:da:de:b1:66:1c:ae:e8:90:b0:0f:
         71:1d:a6:8e:a5:d6:3b:e9:c2:23:1a:08:fd:08:25:11:34:57:
         5c:73:59:68:db:1a:db:f5:c0:15:a8:e8:11:1d:72:15:d7:57:
         fc:26:ae:8f:a3:fc:5d:b6:32:2f:12:6f:64:c2:2b:0e:44:53:
         32:86:7d:f1:42:8b:f9:29:dc:8d:92:88:f1:99:72:51:ff:8d:
         b8:4e:30:9c:8d:ed:f5:de:40:54:13:5d:16:ef:ab:54:be:1a:
         4d:95:d9:d5:18:d2:e2:99:24:88:72:00:f5:f2:9e:99:85:cb:
         09:8a:c0:1b:df:b0:07:6c:b6:0f:bd:61:e5:e0:5b:de:a7:f4:
         c2:3a:60:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:04 2026 by rpki-client