Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
File:                     FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft (raw, json)
Hash identifier:          h2KUB6xd+Jz0u0x3wWZmpJ7lzc7/bQv21NH2AXVHDRs=
Subject key identifier:   DF:58:7A:57:6F:D3:38:30:C2:CD:D8:95:18:1B:CD:E5:D0:AD:8D:77
Authority key identifier: 15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35
Certificate issuer:       /CN=15c18a2908cebd9085e01266bb02fb8af2247735
Certificate serial:       019EC224A8FB7651F05B808FBBBB6FA269AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
Manifest number:          0410
Signing time:             Sat 13 Jun 2026 18:00:42 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:42 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:42 +0000
Files and hashes:         1: FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl (hash: Om7DRbiwYxmCkVR9dRh4t91IV1AkmNosCECnjLuzAZQ=)
                          2: dLRmwhFl83bEy7zAcdX4mKmlXjY.roa (hash: VThAeMBueXR/zSSpQFMxHljw4NYIZkHXHe6JR0i+XFk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:a8:fb:76:51:f0:5b:80:8f:bb:bb:6f:a2:69:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c18a2908cebd9085e01266bb02fb8af2247735
        Validity
            Not Before: Jun 13 18:00:42 2026 GMT
            Not After : Jun 14 18:00:42 2026 GMT
        Subject: CN=df587a576fd33830c2cdd895181bcde5d0ad8d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:f0:a8:f6:44:90:ff:d5:1e:1b:1d:2f:09:
                    db:6b:8e:06:00:53:31:7d:45:8b:0f:8a:84:6b:95:
                    00:2c:1d:3f:17:bd:9d:a3:94:f1:b4:86:b8:ae:8a:
                    d1:17:d7:1f:7a:5d:b1:e6:eb:a4:fb:b7:cf:52:75:
                    44:6e:6f:dd:6c:10:fa:37:e8:7a:52:e2:20:0f:1b:
                    b3:80:31:77:d9:1a:04:79:85:da:b1:29:cf:90:14:
                    72:b0:91:70:4e:a9:b4:9a:aa:a6:cc:c1:17:ac:59:
                    94:21:17:70:8a:63:4a:12:ff:12:5a:1c:34:e6:a8:
                    f9:1a:ad:71:80:65:94:b2:89:55:72:83:a8:45:3b:
                    9c:78:96:29:d7:08:28:69:f1:14:da:d4:aa:cb:fb:
                    6a:ae:5b:c8:e9:4b:8b:6c:57:2b:20:2b:5c:73:f9:
                    a2:f7:33:73:2f:de:f3:69:a0:02:76:02:a0:9c:39:
                    de:b3:da:c9:9a:cd:1a:e7:b6:6b:16:d3:04:b8:01:
                    d3:69:9a:41:bd:98:0e:4f:9b:67:b7:51:09:8f:72:
                    29:e6:fe:9e:b6:22:8a:15:93:32:6e:a2:ef:ca:a5:
                    5b:12:f3:ee:99:59:ce:da:14:99:a2:d0:9f:7c:d0:
                    f7:ed:ca:a7:e8:80:e2:be:98:b5:26:26:f3:9a:64:
                    97:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:58:7A:57:6F:D3:38:30:C2:CD:D8:95:18:1B:CD:E5:D0:AD:8D:77
            X509v3 Authority Key Identifier:
                keyid:15:C1:8A:29:08:CE:BD:90:85:E0:12:66:BB:02:FB:8A:F2:24:77:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGKKQjOvZCF4BJmuwL7ivIkdzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/6f8157-8d76-4d3e-8938-7e53d1c558d9/1/FcGKKQjOvZCF4BJmuwL7ivIkdzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:21:f6:ea:6c:49:9f:5a:46:0f:93:ab:6c:07:ca:00:ac:
         db:a1:ac:f9:b9:c3:5c:17:7d:b1:bf:41:e6:c9:e0:a1:ac:18:
         1d:18:1d:3b:04:54:ba:c3:8d:a2:12:08:49:88:17:5f:8a:c1:
         50:c5:3b:47:9c:7e:59:28:a0:0d:45:82:c8:9a:07:5b:95:78:
         17:d9:36:ad:1a:4c:e6:01:53:7b:32:c4:a6:44:8b:d6:90:73:
         f6:08:bb:d4:e7:59:6e:67:a7:de:a0:ae:cf:05:5a:a0:83:1b:
         c9:a8:2c:89:22:a0:6e:97:63:d4:04:9a:da:c5:ec:c4:f3:6d:
         17:c5:4f:76:50:1d:12:38:f3:db:36:ae:4d:f4:a6:a9:5b:ad:
         b9:69:2a:0a:0f:03:87:11:8d:fe:24:57:69:25:9a:b6:70:64:
         59:15:14:a2:b5:b5:07:24:2f:50:74:9d:d9:c1:ca:c0:9a:4a:
         73:0f:73:38:c6:85:51:b6:bf:05:11:42:b7:4c:c4:66:ae:21:
         db:c4:77:1f:02:d2:d2:67:b3:5c:37:59:ab:e9:82:10:99:60:
         33:61:d6:e8:6a:53:b4:25:56:ff:2e:2e:8d:e2:d2:a1:30:b8:
         dc:6e:77:42:2c:b5:54:c7:f3:f0:ba:6e:b6:3f:fa:a7:ab:3e:
         74:70:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:43 2026 by rpki-client