Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
File:                     FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft (raw, json)
Hash identifier:          zm92iWf5pLRFGwCmNU30FJCoC57pEcFbHUNVC64xYUE=
Subject key identifier:   33:29:C4:7E:D1:D1:A2:DD:A7:A2:B6:68:4A:3A:2D:06:27:D5:C2:36
Authority key identifier: 14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24
Certificate issuer:       /CN=145c4728382ec5354e106023df467a4113b49324
Certificate serial:       019ED5749CA1823AF38A30E2BD3EE1FCC6A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
Manifest number:          017D
Signing time:             Wed 17 Jun 2026 12:00:49 +0000
Manifest this update:     Wed 17 Jun 2026 12:00:49 +0000
Manifest next update:     Thu 18 Jun 2026 12:00:49 +0000
Files and hashes:         1: FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl (hash: rRNox9Ds6EJbJYNdPN7xucY8apS3wZAm0Q2kLYCBz2w=)
                          2: py9eyb051zBNGRXqf0w217Iyr0U.roa (hash: V1rIxP2aeir1g3qKAPo7xgCkgSSb/VU/nyh0Upf99zs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:74:9c:a1:82:3a:f3:8a:30:e2:bd:3e:e1:fc:c6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145c4728382ec5354e106023df467a4113b49324
        Validity
            Not Before: Jun 17 12:00:49 2026 GMT
            Not After : Jun 18 12:00:49 2026 GMT
        Subject: CN=3329c47ed1d1a2dda7a2b6684a3a2d0627d5c236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c7:2a:31:e4:e6:d7:f9:a4:a4:53:24:12:c9:
                    9e:89:ad:03:4c:68:a7:0a:9d:88:e9:ab:cb:c2:15:
                    ec:86:c6:0f:52:9c:6d:f8:fa:aa:c1:0c:d2:b7:4d:
                    79:95:e3:7e:ea:e8:1c:12:68:30:b9:3f:e5:0a:b8:
                    d6:9f:44:10:b9:9a:59:67:39:c8:e9:4e:02:ae:89:
                    ff:36:2d:eb:9e:09:62:6e:35:a0:b3:b6:1e:42:06:
                    26:00:cf:26:dc:7c:73:58:4c:7d:e1:e9:d4:f3:d4:
                    46:df:b5:b3:b1:3e:5f:db:17:b7:db:5c:8b:a7:fb:
                    66:34:49:f7:22:cc:83:b3:a5:9f:db:7c:b0:25:ae:
                    84:58:16:59:8c:55:17:11:7f:3f:2b:f9:bd:e1:c8:
                    1a:5e:b1:c3:9b:a8:d0:66:70:8d:92:6c:d5:96:dc:
                    76:24:0e:8e:b6:fa:52:e0:86:c1:b8:69:d4:65:ab:
                    0a:38:9b:a6:13:13:bf:29:8b:16:6b:fd:2f:0f:4d:
                    6a:e3:32:0a:5c:af:ce:6b:3f:ad:9e:ed:e8:3f:2d:
                    83:ab:d6:d7:70:39:29:d4:bb:d9:c1:01:8c:56:73:
                    e3:1d:f1:41:14:d7:f8:53:16:87:eb:6e:d2:56:40:
                    98:5e:3d:6e:19:5a:97:31:16:f8:5f:64:22:ff:3d:
                    3a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:29:C4:7E:D1:D1:A2:DD:A7:A2:B6:68:4A:3A:2D:06:27:D5:C2:36
            X509v3 Authority Key Identifier:
                keyid:14:5C:47:28:38:2E:C5:35:4E:10:60:23:DF:46:7A:41:13:B4:93:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFxHKDguxTVOEGAj30Z6QRO0kyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2c216f-082e-4f83-98c2-da5099e58a28/1/FFxHKDguxTVOEGAj30Z6QRO0kyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:3a:6c:62:64:f1:2a:a6:2b:3d:66:30:48:c1:3e:98:58:a4:
         36:92:d9:5d:06:9c:b8:01:9d:86:35:d9:c5:cc:17:78:3b:6f:
         ec:db:9e:63:2e:f4:3c:9d:f8:25:19:58:ad:bd:2f:9c:05:61:
         58:8e:e4:70:8e:0d:0b:c8:c3:89:c8:09:e0:b2:7e:ce:5d:da:
         7c:a6:1a:61:7b:2f:6b:fa:9d:a8:87:58:04:1c:36:57:e4:bb:
         40:c9:50:ee:41:e3:87:a2:ca:e8:69:c2:a5:f9:99:3a:af:e9:
         80:e5:c3:a9:3d:ab:22:3c:ac:d2:ec:33:af:fb:1a:2a:74:5e:
         e8:6b:1d:2f:92:a1:01:a8:3b:87:28:21:7b:f3:6f:8c:49:fd:
         1d:c1:3b:1b:85:c5:09:93:a6:44:a7:eb:df:91:4a:b0:eb:b5:
         37:1e:22:c7:96:fe:7e:bb:48:cc:bf:ef:15:d7:bc:5c:4f:e7:
         75:da:32:e6:68:ee:9e:7c:4e:93:fc:e0:f4:9d:8a:1c:1e:ad:
         c3:31:4e:85:6d:aa:25:9c:31:d0:44:8e:a1:fd:81:c2:25:e9:
         0c:95:34:63:6f:33:70:8f:ce:fa:1a:e2:d3:0c:03:9e:6e:bd:
         97:0c:19:f8:eb:e9:d0:7b:4b:31:32:7b:9a:f7:48:9e:7f:4d:
         ac:4b:c7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 15:38:51 2026 by rpki-client