Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          ziamvqCNhE1c63PwgPr9/XpoddtF5ZTbzqd44LXQCco=
Subject key identifier:   27:8E:F5:83:40:41:B7:85:FC:30:FE:F6:87:2C:C3:F3:6A:D2:46:D3
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019EC1EDA726A1F7323DDD4DBCEE9CF8F52F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 17:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:37 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: LtecEe9wUqQJ542aZRF3k/zqH9DP4oBIFsmmhivygYE=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:a7:26:a1:f7:32:3d:dd:4d:bc:ee:9c:f8:f5:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jun 13 17:00:37 2026 GMT
            Not After : Jun 14 17:00:37 2026 GMT
        Subject: CN=278ef5834041b785fc30fef6872cc3f36ad246d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:e8:55:54:51:6f:56:fa:ce:27:2c:13:df:
                    34:98:f9:3f:dc:df:25:ae:f9:f6:41:99:e0:79:a3:
                    13:fc:e9:c7:90:13:68:98:a3:7f:b3:dc:63:3c:78:
                    00:22:75:2c:24:f6:80:4a:a0:b7:8d:9f:27:c5:97:
                    73:b2:31:b4:3b:10:c8:ce:1f:ee:32:10:50:40:bf:
                    d9:86:f6:ea:8e:75:a4:c3:81:57:f3:fa:50:dd:83:
                    05:c2:84:af:97:b5:11:e3:e6:26:61:31:89:44:ef:
                    5d:7b:15:6a:0a:6b:8b:12:3f:fc:62:65:54:25:b0:
                    3d:e7:dc:ff:7b:96:72:5f:a2:e3:5c:51:8a:6a:71:
                    aa:81:a3:aa:d2:04:2a:bc:f6:b5:d0:7e:3a:42:83:
                    e7:51:6a:fc:41:c6:68:f1:6b:e9:82:99:7a:b9:40:
                    85:ce:be:32:54:16:9d:3f:ba:bb:77:0b:c0:90:e9:
                    c1:e2:3d:af:b3:f0:03:d0:75:49:d2:b9:1c:32:2b:
                    a9:66:f4:1f:59:49:aa:7c:78:ed:66:36:35:f5:ff:
                    69:ff:a5:b6:f6:74:48:5b:c2:09:3a:5d:0d:f1:4f:
                    bd:58:e9:ab:26:80:d0:6f:45:01:71:7a:67:6e:fa:
                    a4:25:d6:4b:04:86:0a:14:93:a2:92:9a:4c:1a:f5:
                    da:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:F5:83:40:41:B7:85:FC:30:FE:F6:87:2C:C3:F3:6A:D2:46:D3
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b0:3e:a2:19:36:96:32:6b:c9:fc:ab:c4:bb:31:ea:ff:81:
         1b:60:f5:24:bc:53:ee:bc:f3:85:e3:30:84:38:78:ec:24:41:
         94:ae:eb:0c:a8:b3:1e:38:69:b7:74:ff:46:cc:92:50:19:a0:
         56:f2:bf:d3:26:3d:e8:eb:92:8a:87:94:16:58:87:18:0c:ab:
         00:15:01:47:7b:19:be:ea:08:cf:25:33:8a:2d:c7:76:87:4a:
         bb:76:55:0e:94:3f:ec:59:2c:9b:c1:bd:e8:b5:7d:1d:a7:3c:
         9f:1b:da:df:46:54:3c:4b:df:0e:71:75:81:35:cd:33:e6:db:
         04:5a:ed:18:68:3e:24:77:9a:e3:5d:76:c1:62:02:06:7f:41:
         08:d6:56:d9:bf:49:7a:04:1d:45:86:b8:c8:7c:18:fe:5e:40:
         5f:90:50:de:1e:2a:dd:7b:f4:12:ad:75:be:84:52:a1:a7:81:
         0e:35:33:ff:90:c2:48:7a:77:88:ad:fa:30:37:a4:8c:d2:c6:
         6b:9e:d8:f5:72:9b:21:b2:a1:a3:f3:f5:0e:89:fd:09:1b:4e:
         15:88:fd:f2:71:af:69:9a:85:32:7f:9c:2b:20:a5:fb:e7:5d:
         f0:a2:4b:82:5d:91:05:f8:89:96:cd:6a:e0:3e:d6:54:61:2b:
         fc:bf:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:10:17 2026 by rpki-client