Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
File:                     fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json)
Hash identifier:          IwW4P9HrTU10QsVfEutkM1gawzDG0RCxuRl+4n6OSLk=
Subject key identifier:   7E:5B:FF:2B:2C:A3:5E:4C:6F:E1:79:86:2E:CA:E8:4B:7F:34:FB:C3
Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5
Certificate issuer:       /CN=7d346ace4e652870f1687450d5c34e14cb0094b5
Certificate serial:       019EC148D8F06349D2D760FCCC87436C502E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
Manifest number:          02C1
Signing time:             Sat 13 Jun 2026 14:00:37 +0000
Manifest this update:     Sat 13 Jun 2026 14:00:37 +0000
Manifest next update:     Sun 14 Jun 2026 14:00:37 +0000
Files and hashes:         1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=)
                          2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: CrC6Pv9WsFX9e94+SBThQOjPDeYhPV1g8hsUpE9ZmnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:48:d8:f0:63:49:d2:d7:60:fc:cc:87:43:6c:50:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5
        Validity
            Not Before: Jun 13 14:00:37 2026 GMT
            Not After : Jun 14 14:00:37 2026 GMT
        Subject: CN=7e5bff2b2ca35e4c6fe179862ecae84b7f34fbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:13:66:46:f5:fa:2f:3c:9a:b7:e3:01:74:26:
                    ce:14:22:32:75:4c:0c:91:43:81:3b:86:fd:10:a3:
                    69:78:d4:60:a3:cf:d5:a8:e3:45:79:52:a9:8f:3e:
                    62:2f:85:80:7c:26:bc:8e:7f:0c:09:7d:8f:74:d6:
                    db:10:c0:89:78:7c:dd:07:3e:cf:af:0a:4b:72:80:
                    94:54:04:82:83:c9:40:8c:d6:15:f9:00:17:49:82:
                    33:c1:09:6a:af:51:f0:30:6b:cf:a3:67:0a:6d:1c:
                    05:17:21:dc:fd:fc:4d:25:cb:fb:df:e7:d7:84:90:
                    50:40:4a:a6:3b:4c:a0:ae:d1:fc:2f:be:99:57:14:
                    6b:5f:d8:bd:16:bc:0b:a7:4c:95:dc:cc:ad:0a:9b:
                    40:53:c2:ac:bb:b6:ea:35:db:bf:43:27:14:8c:8c:
                    0e:17:0c:33:c8:8f:e8:70:5e:cf:f1:43:6d:9a:6d:
                    e4:35:67:a8:8e:21:12:64:1d:4d:f8:6a:ec:d1:97:
                    f1:de:ac:1b:35:06:89:41:4d:1f:58:1d:0c:9a:52:
                    13:23:6a:7d:50:c1:9c:fd:eb:b2:35:a1:d7:60:9e:
                    bf:08:cb:8c:c3:7a:18:13:72:f0:52:e4:b3:4d:dc:
                    02:d3:8e:10:b8:13:3f:63:12:5c:e8:ed:ee:5d:6a:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:5B:FF:2B:2C:A3:5E:4C:6F:E1:79:86:2E:CA:E8:4B:7F:34:FB:C3
            X509v3 Authority Key Identifier:
                keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:4c:dd:59:5c:ed:eb:ba:d9:5a:79:a7:7a:d0:91:eb:e9:f2:
         a6:82:f8:da:ab:d0:5c:b0:bf:c2:dc:8f:2a:5a:72:9f:f5:f1:
         38:54:7d:cd:69:e8:df:95:55:e5:7b:91:35:b9:30:b5:25:3b:
         19:91:ad:e3:0b:e5:bf:18:5c:26:39:57:bd:c7:cb:03:30:6d:
         6f:1d:29:04:e4:6b:ce:a8:be:2c:5b:54:8f:87:c1:68:7e:b6:
         60:19:72:6e:b3:64:56:f1:42:86:7b:51:a9:a9:61:aa:a6:15:
         3c:05:91:f2:76:aa:0b:50:d0:e3:1b:d8:49:b4:62:0f:a5:3c:
         21:99:9c:33:da:1c:83:db:41:b4:d7:45:66:8a:c3:84:35:3a:
         37:70:8c:39:1a:12:89:01:2c:bc:3e:1c:fa:e8:f1:7e:03:9a:
         b7:b2:51:ca:fc:41:b6:7c:68:f4:30:e6:c2:d8:1e:5b:32:88:
         89:3d:7b:53:40:34:8c:57:b2:90:fa:88:7f:e3:eb:7d:08:6d:
         85:01:32:06:bc:50:4d:98:be:3b:7f:fb:5b:8d:66:72:c5:3b:
         7b:1d:ab:c8:52:a5:14:93:c1:9c:c5:5c:34:b8:c4:a6:59:2c:
         d6:49:f7:c1:3e:54:3f:bb:a4:17:f3:2b:1c:9b:f3:85:9e:69:
         06:88:f8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:38 2026 by rpki-client